TurboTax: File Your Tax Return

"We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Service providers or agents also include AI providers, including generative AI providers."

Intuit shares personal data broadly across its family of companies (TurboTax, QuickBooks, Credit Karma, Mailchimp) and with a wide range of third parties including generative AI providers, advertising networks, credit bureaus, and financial services providers.

"When we say we process your data as a 'platform,' we mean that when you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together to power experiences across the Intuit Platform and products, not just within the individual offering(s) you're using. This means that, for example, we may use your bookkeeping details from QuickBooks, contact and purchase history details from Mailchimp, certain information from TurboTax, and/or recommendations from Credit Karma."

Intuit explicitly combines user data across its entire product ecosystem (TurboTax, QuickBooks, Mailchimp, Credit Karma), creating a unified profile from tax returns, financial records, email marketing data, and credit information.

"Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks' time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs)."

Intuit collects precise GPS location and device motion data for several features. Notably, employers can require employees to use location tracking to clock in for shifts via QuickBooks, making consent less voluntary.

"We may use session-replay technologies, such as those provided by FullStory and Medallia, that employ software code to record users' interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users' clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions."

Intuit records detailed user interactions including keystrokes, mouse movements, clicks, and scrolls via session-replay tools, effectively capturing granular behavioral data from users' devices.

"Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to comply with our legal or regulatory compliance needs, to exercise, establish or defend legal claims, and to protect against fraudulent or abusive activity on our service."

Intuit retains data indefinitely by default with no specific deletion timeline, and even after a deletion request, may keep data for broad and open-ended reasons like legal claims or fraud protection.

"From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law."

Intuit reserves the right to change its privacy practices at any time, with notification potentially limited to a community post or in-app notice rather than requiring affirmative consent to material changes.

"Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to: comply with our legal or regulatory compliance needs; to exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our service. There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons."

Even after an explicit deletion request, Intuit may retain personal information indefinitely for broad reasons including potential legal claims and fraud protection, with no defined timeline for when retained data will ultimately be purged.