Privacy policy

What we collect

To prepare and transmit a Heavy Highway Vehicle Use Tax return we collect only what the IRS return itself requires, plus what we need to reach you:

• Business details: legal name, Employer Identification Number, business address and business type.
• Vehicle details: Vehicle Identification Numbers, taxable gross weight, and whether each vehicle is logging, suspended or agricultural.
• Signing officer details: name, title, telephone, email, and the individual’s Social Security number where the IRS requires it for the signature block.
• Payment details for the tax: if you choose Electronic Funds Withdrawal, the bank routing and account number the IRS should debit.
• Account details: your name, email and telephone number.

What we deliberately do not do

Your IRS self-select PIN, the signing officer’s Social Security number and your bank account number are write-only in our system. Once saved, no page and no interface can display them back to you or to us. You will only ever see a masked form such as ***-**-1234. This is enforced in the software, not by policy.

We do not sell your information. We do not share it with advertisers, and we do not use it to build marketing profiles.

Card payments

Card details are entered directly into our payment processor and never reach our servers. We store a record of what was charged and a reference to the transaction, not the card number.

Who we disclose to

We transmit your return to the Internal Revenue Service. That is the purpose of the service and it is not optional.

Separately, and only if you give explicit consent, we may confirm your HVUT payment status and the VINs on your return to the Department of Transportation, U.S. Customs and Border Protection, and state Departments of Motor Vehicles. That consent is required by law before we may disclose return information, it is recorded with a timestamp, and you may withdraw it at any time before payment. See the §6103(n) disclosure for the full explanation.

We also use service providers to operate the platform: hosting, email delivery and payment processing. They process data on our instructions in order to provide those services.

How long we keep it

We retain filed returns, acknowledgements and stamped Schedule 1s so they remain available in your account when a state agency or an auditor asks for them, and for as long as we are required to as an authorized IRS e-file provider. If you want your account closed and your data removed, write to support@2290.agency and we will tell you what we are able to delete and what we are obliged to keep.

Security

Traffic is encrypted in transit and sensitive fields are encrypted at rest. Our data security page sets out the specifics.

Your choices

• You can view and correct your account and business details at any time.
• You can withdraw §6103(n) consent before payment.
• You can ask what we hold about you by writing to support@2290.agency.

Contact

Questions about this policy go to support@2290.agency.