Privacy Policy
Mingtu LLC · California
1. Who We Are
Mingtu LLC (“Mingtu,” “we,” “us”) is a tax services firm registered in California, providing tax preparation, bookkeeping, and business formation services primarily to Chinese-American small business owners and truck drivers. This Privacy Policy describes how we collect, use, and protect your personal information.
2. Information We Collect
When you use our website, submit a quote, or become a client, we may collect:
- Name, phone number, and email address
- Home address and legal name (for Engagement Letter preparation)
- Tax-related information (income sources, entity type, filing year, etc.)
- Financial documents (W-2, 1099, bank statements, etc., only when you upload them)
- EIN and employee payroll information (for quarterly payroll tax services)
- Technical data (anonymized IP hash, browser type) for security auditing
3. How We Use Your Information
- Provide tax preparation, bookkeeping, and payroll tax services
- Send you quotes, service updates, and tax reminders
- Prepare and file tax returns with the IRS and state tax authorities
- Comply with applicable federal and state legal obligations
- Improve our website and services
We do not sell, rent, or share your personal information with third-party advertisers.
4. Information Sharing
We may share your information only in these circumstances:
- Government Agencies: With your authorization, to file returns with the IRS, California FTB, CDTFA, and similar agencies
- Service Providers: Supabase (database), Cloudflare (CDN and storage), Resend (email delivery) — bound by contract to use data only for service delivery
- Legal Requirements: When required by law, court order, or government request
5. Data Security
We implement the following technical safeguards:
- All communications encrypted in transit via TLS 1.3
- Client files (tax return PDFs, etc.) encrypted at rest with AES-256-GCM in Cloudflare R2
- Row-Level Security (RLS) ensures each client can only access their own data
- Access logs retained for a minimum of 6 years (per IRS Publication 4557)
- Passwords stored as bcrypt hashes via Supabase Auth
6. Cookies and Local Storage
We use minimal browser technology:
- Session Cookie (logged-in users only): Maintains your portal login session. Strictly necessary — no separate consent required.
- Browser localStorage: Temporarily saves form drafts (expense sheets, payroll forms) on your device only. Not transmitted to our servers.
- Cloudflare Web Analytics: Cookie-free, privacy-first traffic analytics.
We do not use advertising tracking cookies or third-party behavioral analytics.
7. California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we have collected about you
- Request deletion of your personal information (except records we are legally required to retain)
- Opt out of the sale of personal information (we do not sell personal information)
- Not be discriminated against for exercising these rights
To exercise these rights, email info@mingtutax.com.
8. Data Retention
Tax documents and client records are retained for a minimum of 7 years per IRS requirements. Account information will be deleted within 30 days of your request, except records subject to legal retention obligations.
9. Contact Us
For questions about this Privacy Policy, contact:
Mingtu LLC
9049 Valley Blvd, Ste 107, Rosemead, CA 91770
info@mingtutax.com
