DeductionDog is operated by Don Schomer III, a sole proprietor doing business as DeductionDog, in collaboration with Vision Tax Co. This policy explains how DeductionDog collects, uses, stores, shares, and deletes information when self-employed professionals use the mobile application, website, email features, and related services.
Contact
DeductionDog by Vision Tax Co
151 N Sunrise Ave, Ste 1303
Roseville, CA 95661
support@deductiondog.com
Information we collect
Account and profile
Email address, legal name, profession, mobility mode, fiscal-year selections, home and work locations, home-office qualification, vehicle details, communication preferences, and consent choices.
Financial and transaction information
When a user chooses to connect a bank account through Plaid, we receive account identifiers and limited account metadata, transaction identifiers, dates, amounts, merchant or description information, pending/posted status, currency, and categories. DeductionDog does not receive or store online-banking passwords. Plaid also handles information under the Plaid End User Privacy Policy.
Receipts and email
Uploaded, forwarded, or scanned receipts may include images, sender and subject information, dates, merchants, amounts, excerpts, and attachments. Mailbox authorization tokens are encrypted. Gmail access uses a read-only receipt-discovery scope. DeductionDog never asks for a primary Google, Microsoft, or Apple password.
Mileage, location, and calendar
If enabled, we process precise location points during detected vehicle travel, trip times, route distance, coordinates, addresses, classifications, and confirmed purposes. Selected calendar details may suggest trip labels. Activity Recognition operates while idle; active GPS begins during detected driving.
Tax-workpaper information
We process expense classifications, assets, business-use percentages, home-office inputs, work-location history, notes, and accountant-export information.
Security and optional analytics
We process authentication sessions, IP-derived security hashes, user-agent information, delivery events, failure logs, and service-health data. Product analytics and email open/click analytics are disabled by default and require separate consent. Product analytics exclude designated sensitive fields such as passwords, tokens, bank details, receipt images, email contents, precise coordinates, and raw addresses.
How we use information
- Authenticate users and protect accounts.
- Import and classify potential business expenses.
- Match transactions with receipt evidence.
- Detect, calculate, and classify mileage.
- Produce deduction-focused reports and exports.
- Operate receipt scanning, notifications, account email, and optional recaps.
- Prevent duplicate ingestion, fraud, abuse, and unauthorized access.
- Monitor reliability and improve consented features.
- Comply with legal obligations and enforce service terms.
DeductionDog does not initiate bank payments, make credit decisions, or sell connected financial information.
How we share information
We disclose information only to operate requested services, at the user's direction, or as required by law. Providers may include Plaid, Hostinger, Cloudflare R2, Google, Microsoft, Apple, user-selected IMAP providers, Google Maps Platform, Namecheap Private Email, Resend, and Better Stack. Tax professionals or other recipients receive information only when a user explicitly exports or shares it.
Providers receive only information needed for their service and are subject to their own terms. DeductionDog does not sell personal information or connected financial data and does not share it for cross-context behavioral advertising.
Consent and choices
Bank linking, mailbox linking, calendar access, background mileage, marketing email, email analytics, and product analytics are optional. Users may withdraw email or analytics consent in Settings and may change device permissions through Android settings.
Retention
Financial records, receipts, assets, mileage, and profile information remain while an account is active unless deleted. Product analytics and email engagement events are retained up to 12 months. Finalized email content is scrubbed after 30 days. Expired security tokens and sessions are routinely removed.
Encrypted backups rotate for approximately 30 daily, 90 weekly, and 370 monthly days. Deleted live data may remain in disaster-recovery backups until expiration and is not restored for ordinary use. See the Data Retention and Deletion Policy.
Deletion and privacy requests
Users can permanently delete an account from Settings after reauthentication. Live account deletion removes associated transactions, mileage, receipts, integrations, preferences, and private receipt objects, subject to legal and encrypted-backup exceptions. Requests for access, correction, deletion, or processing information may be sent to support@deductiondog.com. Identity verification may be required.
Security
DeductionDog uses HTTPS, private networking, restricted administrative access, critical-provider MFA, encrypted integration credentials, private object storage, encrypted off-server backups, monitoring, rate limiting, firewalls, intrusion protection, and automatic security updates. No system can guarantee absolute security. See the Information Security Policy.
Children and international use
DeductionDog is intended for adults operating self-employed businesses and is not directed to children under 18. The service is operated from the United States and designed primarily for United States users.
Changes
We may update this policy when the product, providers, or legal requirements change. Material changes will be communicated through the app, website, or account email as appropriate.