We handle two kinds of information: tax and financial data shared with us during an engagement, and the routine data a website collects when you visit. This page describes what we do with each.
Tax and client information
Information shared with us during a client engagement, including tax documents, financial statements, K-1s, brokerage records, and anything else provided to us for the purpose of preparing returns or rendering advice, is confidential.
As a CPA firm, we are bound by Internal Revenue Code Section 7216, which restricts how a tax preparer may use or disclose tax return information. We do not sell, rent, or share client tax information with third parties for marketing purposes, and we do not use it outside the scope of the engagement. Disclosure for non-return purposes, where permitted by law, requires your written consent in advance.
We are also bound by the confidentiality rules that apply to New York CPAs, including the New York State Board of Regents regulations.
How we store and transmit data
- Client documents are stored in encrypted, access-controlled systems limited to firm personnel working on your engagement.
- Documents are transmitted through encrypted channels. We do not ask clients to email sensitive documents in plain text, and we will offer a secure alternative if you do.
- We retain client records for the period required by applicable professional and regulatory standards. On request, we will provide copies of your records.
Website information
This website is a simple, typography-led site. It does not run fingerprinting or email-based lead capture, and nothing on it is gated behind a signup. The site is hosted on Cloudflare, which collects basic server-level request data (including IP addresses) for security and performance reasons in the ordinary course of operating a website.
We use two Google tags. Google Analytics 4 tells us which pages visitors read most, in aggregate. A Google Ads conversion tag tells us when a visit that started from one of our ads leads to an inquiry, and it sets Google advertising cookies to do that; depending on your Google settings, Google may use this data for ad measurement and personalization. You can block both with any standard content blocker, and the site works fully without them. Neither tag is enabled on the calculator pages under /insights/tools; inputs you type into calculators never leave your browser. Both Google tags set Google cookies; the Ads tag’s cookies are used for ad measurement. Page typography is self-hosted: font files are served from this site’s own domain, and no font request goes to Google or any other third party.
The notes on the homepage and /insights/notes are published directly on this site. They link to our public X profile, but no X script or widget loads here and visiting those pages sends nothing to X.
When you contact us by email at info@bycadvisory.com, through the form on our contact page, or by phone at (917) 341-1753, we receive only what you send us. Form submissions are delivered to our inbox through Resend, an email delivery service, and our site runs on Cloudflare; both act only as service providers for us and do not use your information for their own purposes. We use that information only to respond. We do not add inquiries to a marketing list, and we do not share them with third parties.
Your choices
- You can email info@bycadvisory.com to ask what information we hold about you, to request corrections, or to ask us to delete information we are not legally required to retain.
- If you submitted a contact form and do not become a client, you can ask us to delete the submission.
Changes to this page
We will update the date at the top when this page changes. Material changes that affect how we handle client information will be communicated to active clients directly.
Questions
Email info@bycadvisory.com. Same-day responses as the default. Never more than 48 hours.