Taxcaliburby Auto Secure Login

Privacy

Taxcalibur privacy statement

Last updated October 26, 2026. Taxcalibur is made by ASL LLC, doing business as Auto Secure Login ("we").

What Taxcalibur stores, and where

Your practice details, clients, returns, reminders, invoices, contact log and every document you add are kept on your own Windows computer, in one encrypted database and encrypted files, unlocked with your password. We do not run a Taxcalibur cloud and we never receive your clients' information or files. Backups are encrypted files you save where you choose.

What leaves your computer, and only when you use it

  • Reading documents with AI. Before a document is read, Taxcalibur removes names, Social Security numbers, account numbers and similar details. The redacted text is then sent to Anthropic's Claude, through your own API key or your own connected Claude or ChatGPT desktop assistant, under that provider's terms. You can type the numbers by hand instead and send nothing.
  • Redaction on another of your computers (optional). Redaction runs on this computer by default. If you choose "My rBroker fleet", documents are sent end-to-end encrypted to one of your own computers through the rBroker coordinator, which cannot read them.
  • Trusted timestamp (optional). When you sign off a return with a timestamp, only a fingerprint (SHA-256 hash) of the sign-off is sent to the timestamp authority you choose, never the return itself.
  • Your email app. "Email the client what's missing" opens your own email program with a list of document names; nothing is sent until you send it.

Taxcalibur sends us no usage data, analytics or crash reports.

Taxcalibur Client, the phone app for your clients

Taxcalibur Client is a free Android app your clients can use to answer your questionnaire, photograph their documents and sign your engagement letter and consents. It works without us:

  • No account, no internet. The app has no sign-in and no internet permission; it cannot send anything by itself, and we run no server for it.
  • On the client's phone only. What the client enters is kept on their phone, encrypted with a key held by the Android Keystore, and left out of backups and device transfers. Deleting the app or using "Delete everything" removes it.
  • Leaves the phone only when the client sends it. The reply is one file encrypted to a key made for your invitation (P-256 and AES-256); the client sends it through an app they choose (email, a message, a drive), and only your Taxcalibur can open it. The invitation you send is encrypted with a one-time code you give the client separately.
  • Photos are re-encoded before they are kept, which removes their location and camera details.
  • The app collects no usage data, analytics or crash reports, and shows no ads. Google Play delivers the app under Google's own terms.

Purchases

Taxcalibur is sold through the Microsoft Store. Microsoft processes payment and keeps your purchase record under its own privacy statement; we receive only the aggregate sales reports Microsoft provides.

This website

taxcalibur.com sets no cookies and runs no analytics or advertising. Our web server keeps standard access logs with masked IP addresses for security.

Contact

Questions or requests: support@autosecurelogin.com.