Back to Home

Privacy Policy

Last updated: June 27, 2026

Your privacy is very important to us and we take your privacy very seriously. This Privacy Policy describes how 2290 Support LLC and its affiliates (collectively, “2290 Support”, “we”, “us”, or “our”) collects and uses the personal information you provide to us on our website and all other websites, mobile sites, applications, platforms and tools where this Privacy Policy appears or is linked, and through the use of our services (collectively the “Site”). It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

By creating an account, providing information to us (by any means, whether in correspondence, via our Site, or otherwise), or continuing to use our services, you acknowledge that you have read, understood, and consent to be bound by this Privacy Policy.

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY OR OUR PRACTICES, YOU MAY NOT USE OUR SITE. THIS PRIVACY POLICY MAY CHANGE FROM TIME TO TIME AND YOUR CONTINUED USE OF OUR SITE CONSTITUTES YOUR ACCEPTANCE OF THOSE CHANGES. WE ENCOURAGE YOU TO REVIEW THIS PRIVACY POLICY PERIODICALLY.

Information Collection

We collect information you provide when registering, completing forms, or contacting support. This includes:

  • Registration Information: Your business name, your first name and last name, user name, and password.
  • IRS Form 2290 information: Your first and last name, business entity name, business address, city, state, zip code, employer identification number (EIN), and vehicle details (including vehicle identification numbers).
  • Payment information such as bank account information or debit or credit card information.
  • Usage Data: Log data, device/browser information, and analytics (e.g., pages visited, time on page) collected via cookies or similar technologies (further described below).

Use of Information

Under data protection law, we can only use your information if we have a proper reason for doing so. We use information collected via our Site for a variety of business purposes described below. We process your information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal and regulatory obligations. A legitimate business interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

We use (process) your personal information:

  • To process your IRS Form 2290 filing;
  • To generate Schedule 1;
  • To provide our Site and certain support related services to you;
  • To contact and communicate with Site visitors, including responding to requests and inquiries, providing customer service, and confirming submissions;
  • To prevent and detect fraud against you or 2290 Support and as part of our efforts to keep our Site safe and secure;
  • To ensure business policies are adhered to, e.g. policies covering security and internet use, and to enforce our terms, conditions and other applicable policies;
  • To request feedback and to contact you about your use of our Site;
  • To update and enhance consumer records;
  • For statistical analysis to help 2290 Support manage its business, e.g. in relation to financial performance, consumer base, product range or other efficiency measures;
  • For operational reasons, such as improving efficiency, improving the user experience, performance monitoring, training, and quality control;
  • For other processing necessary to comply with professional, legal and regulatory obligations that apply to our business, e.g. if we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

We do not use your IRS Form 2290 tax return information for advertising or third-party marketing. We do use third-party analytics and advertising technologies on our public website to understand how visitors find and use our Site and to measure the effectiveness of our advertising. These technologies collect usage information (such as your IP address, device and browser information, pages visited, referring source, and whether a visit resulted in a completed filing) but do not receive the contents of your tax return. See “Cookies and Tracking Technologies,” “Analytics and Advertising Partners,” and “Your Choices and Opt-Outs” below.

Shared Site Infrastructure and Access

Our affiliated websites operate on a unified infrastructure and login system.

When you sign in using the same email address across our affiliated websites, you may access your own tax filings, documents and account information from multiple affiliated websites for your convenience and customer service purposes. If you prefer to keep filings visible only within a specific 2290 Support brand, you may use distinct email addresses for each brand or contact support to request brand segmentation, where feasible.

Disclosure to Third Parties

We may share your information with:

  • Our brand families, business partners, affiliates, and subsidiaries. We may disclose your information to other entities within our family of brands to fulfill any purpose described in this Privacy Policy, including those with whom we partner to provide the Site and our services, and to promote our products, services, offers, contests, or other promotions to our customers.
  • Our Service Providers. We disclose your information to third parties that provide business, professional, or technical support services to us and/or administer activities on our behalf. We currently use the following third party service providers:
    • Google Firebase: Authentication services (login, session management) and push notification delivery via Firebase Cloud Messaging.
    • Amazon Web Services (AWS): Data storage (Amazon S3), database hosting, and email delivery (Amazon SES).
    • Vercel and Render: Hosting of our website and application. Vercel also provides privacy-friendly, cookieless web analytics and website performance (Core Web Vitals) measurement, collecting aggregate usage and performance data without cookies.
    • Stripe: Payment processing for filing fees. We do not store your full credit card number; payment data is handled directly by Stripe in accordance with PCI DSS standards.
    • Twilio: SMS delivery for account notifications and filing status updates.
    • Unitel Voice: Cloud business-phone service used to place and receive customer support calls, including recording and storing those calls on our behalf.
    • Google (Google LLC): Website analytics (Google Analytics), advertising measurement (Google Ads), and bot/abuse protection (reCAPTCHA).
    • Meta Platforms, LinkedIn, Microsoft, and OpenAI: Advertising conversion measurement, as described under “Analytics and Advertising Partners.”
    • Trustpilot: Collection and display of customer reviews.
    • Tawk.to: Live chat customer support.
    • EmailJS: Delivery of messages you submit through certain website forms.
  • Analytics and Advertising Partners. Our public website uses third-party analytics and advertising technologies to measure site performance, understand visitor behavior, and measure the effectiveness of our advertising. These partners may set cookies or similar identifiers and receive usage information such as your IP address, device/browser information, pages viewed, and conversion events (for example, that a filing was completed). They do not receive the contents of your IRS Form 2290 return. We currently use Google Analytics and Google Ads (Google LLC); Meta Pixel (Meta Platforms, Inc.); LinkedIn Insight Tag (LinkedIn Corporation); Microsoft Advertising/UET (Microsoft Corporation); and the OpenAI Ads measurement pixel (OpenAI, L.L.C.). Some of this activity may be considered “sharing” (or, under broad statutory definitions, a “sale”) of personal information for cross-context behavioral advertising under certain U.S. state privacy laws. See “California Privacy Rights” and “Your Choices and Opt-Outs” below for how to opt out. These technologies do not run on our internal administrative pages.
  • The IRS and transportation authorities. We may disclose your information as required to process your IRS Form 2290 return.
  • Governmental and Public Authorities. We disclose your information to government and public authorities as necessary or permitted by the laws of any jurisdiction in which we operate, including in response to a subpoena, court order, investigative demand, request for cooperation from a law enforcement agency, or similar request from a self-regulatory body or government agency.
  • Relevant Third Parties in Connection with a Business Transaction. We may disclose or otherwise transfer your information to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction as well as in the event of any insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.

We only allow our service providers to handle your information if we are satisfied they take appropriate measures to protect your information. We also impose contractual obligations on service providers to ensure they can only use your information to provide services to us and to you.

We may also need to share some information with other parties to the extent we believe it is necessary or appropriate to (1) protect our operations and those of our affiliates and subsidiaries; (2) investigate and prevent against fraud and other illegal activity; (3) protect our rights, privacy, safety, property, and/or those of others; or (4) allow us to pursue available remedies or limit damages that we may sustain.

We may disclose your information for other reasons described at the time of information collection or prior to disclosing your information. Additionally, we may disclose your information with your consent or when you direct us to do so.

Except as set forth above, we will not share your information with any other third party.

Call Recording and Monitoring

When you call us, or we call you, your telephone conversation may be monitored or recorded. We do this for quality assurance, staff training, security and fraud prevention, resolving disputes, and keeping accurate records of our communications with you.

We notify callers that a call may be monitored or recorded. By continuing with the call after that notice — or by calling us — you consent to the monitoring and recording. If you prefer not to be recorded, you may tell the representative or contact us instead by email or live chat.

This practice applies to callers in the United States, Canada, and Mexico. Some U.S. states and certain other jurisdictions require all parties to a call to consent to recording; where all-party consent is required, your decision to continue the call after our notice constitutes that consent. We will provide any further notice, and obtain any further consent, required by the laws applicable to you.

Call recordings are personal information and are handled under this Privacy Policy: stored securely, accessed only by authorized personnel for the purposes above, retained only as long as necessary for those purposes or as required by law, and never sold. Our telephone service is provided by Unitel Voice, which records and stores calls on our behalf as a service provider, subject to appropriate confidentiality and security obligations.

Data Security

We use reasonable and appropriate physical, technical, and administrative safeguards to protect your information from unauthorized use, access, loss, misuse, alteration, or destruction. We endeavor to protect the information we receive, gather and store, by implementing encryption, secure servers, and industry best practices.

However, no transmission method is entirely secure. Therefore, although we take steps to secure your information, we cannot guarantee your information, searches, or other communications will always remain secure. Any such transmission of information by you over the internet is at your own risk.

Data Retention

We will not retain your personal information for longer than necessary for the purposes set out in this Privacy Policy. Different retention periods apply for different types of personal information. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of personal information; the potential risk from unauthorized use or disclosure of the personal information; the purpose(s) for which we use or may use the personal information; whether we can achieve the purpose(s) through other means; and the applicable legal requirements.

In particular, we retain your IRS Form 2290 tax records for 7 years as recommended by the IRS.

Your Rights

You may have the right to access, correct, or request deletion of your personal information, subject to legal and regulatory requirements.

Your privacy rights are subject to applicable laws and regulatory requirements. Tax return information is governed by federal confidentiality rules under IRC §7216, and certain data retention and disclosure obligations may limit our ability to delete or modify records. Some information may be permanently retained for audit, compliance, and legal purposes.

Privacy Policy Updates

This Privacy Policy was published on the date “Last Updated” above.

We may update this Privacy Policy at any time. Changes to this Privacy Policy will be made by updating this page. Please visit this Privacy Policy regularly to read the current version.

Third-Party Websites

If, in your interactions with the Site, you are linked or directed to, or click on, a third party website, we cannot control what information you may provide to that party or on that website, and we are not responsible for how that party may use or disclose any information you may provide to them. This is not an endorsement by us of any third party website, content that may be offered on such third party website, or of any products or services provided by such third party. We do not control, nor are we responsible for, such third party website, product or service offerings. As such, we urge that you exercise caution before providing them with your personal information and to review the third party's privacy policy for information on its data processing practices.

You should contact the site administrator for such third party website if you have any complaints, claims, concerns or questions regarding such third party website or its privacy practices.

Age and Legal Capacity

Our Site is intended for users who are at least 18 years old or the age of majority in their jurisdiction. We do not knowingly collect information from minors without parental consent. If we learn that we have collected or received information from a child under 13 without verification of parental consent, in compliance with the Children's Online Privacy Protection Act, we will purge such information from our database and cancel the corresponding accounts. If you believe we may have any information from or about a child under 13, please see our “How to Contact Us” section below.

Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to authenticate users, maintain session state, and ensure the proper functioning of our Site. The types of cookies we use include:

  • Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
  • Third-Party Authentication Cookies: Set by our authentication provider (Google Firebase) to maintain your signed-in state. These cookies originate from Google domains and are necessary for login functionality across our platform.
  • Functional Cookies: Used to remember your preferences, IRS Form 2290 progress, and display settings to improve your experience.
  • Analytics and Advertising Cookies: Set by the analytics and advertising partners described above (Google, Meta, LinkedIn, Microsoft, and OpenAI) to measure site usage and the effectiveness of our advertising, including whether a visit resulted in a completed filing. These cookies do not access the contents of your tax return.

We do not use cookies to access or disclose the contents of your IRS Form 2290 return for advertising. You can manage analytics and advertising cookies through the controls described in “Your Choices and Opt-Outs.” Essential cookies cannot be disabled, as they are strictly necessary to provide our Site.

You have the right to decide whether to accept or reject certain cookies. You may manage cookie preferences through your browser settings; however, disabling cookies may prevent you from accessing or using certain Site features. Essential cookies cannot be rejected, as they are strictly necessary to provide you with our Site.

Your Choices and Opt-Outs

You can opt out of analytics and advertising tracking by:

  • Using our Cookie Preferences control (available via the “Cookie Preferences” link in the website footer) to decline analytics and advertising cookies;
  • Enabling a Global Privacy Control (GPC) signal in your browser, which we treat as a request to opt out of the “sale” or “sharing” of personal information for that browser;
  • Using industry opt-out tools such as the Network Advertising Initiative (optout.networkadvertising.org), the Digital Advertising Alliance (optout.aboutads.info), and Google Ads Settings (adssettings.google.com);
  • Managing cookies through your browser settings.

Opting out will not affect your ability to use our filing services.

Push Notifications

If you use our mobile application, we may request permission to send push notifications to your device. Push notifications are used to deliver important information related to your tax filings, including but not limited to:

  • Confirmation that your IRS Form 2290 has been submitted to the IRS;
  • Notification that your IRS-stamped Schedule 1 is ready for download;
  • Updates on the processing status of your return;
  • Alerts regarding IRS rejections requiring your attention;
  • Filing deadline reminders and service announcements.

To deliver push notifications, we collect and store a device token (a unique identifier assigned by Apple Push Notification Service or Google Firebase Cloud Messaging) along with your device platform (iOS or Android). This device token does not contain personal information and is used solely to route notifications to your device. Device tokens are automatically removed from our systems when they become invalid or when you uninstall the application. You may disable push notifications at any time through your device settings or within the application. Disabling push notifications will not affect your ability to use our filing services.

Mobile Application

Our mobile application provides access to the same filing services available on our Site. In addition to the information described elsewhere in this Privacy Policy, the mobile application may collect:

  • Device Information: Device type, operating system version, and platform identifier, used to optimize your experience and deliver push notifications.
  • Authentication Tokens: Temporary session tokens generated by Firebase Authentication to verify your identity. These tokens expire automatically and are refreshed as needed during active use.

The mobile application does not access your device contacts, camera, photos, location, microphone, or other device sensors. We do not collect device advertising identifiers or engage in cross-app tracking. All data transmitted between the mobile application and our servers is encrypted using TLS (Transport Layer Security). Our mobile application displays our website within an in-app browser (WebView); the cookies and technologies described in “Cookies and Tracking Technologies” may operate within that view.

California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the rights to know, delete, and correct your personal information, and the right to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising. We use advertising technologies (see “Analytics and Advertising Partners” and “Cookies and Tracking Technologies”) that may constitute “sharing” (and, under the broad statutory definition, a “sale”) of certain identifiers and usage information. We do not sell or share the contents of your IRS Form 2290 tax return, which remains subject to the federal confidentiality rules described in this Policy. To opt out, use our Cookie Preferences control and/or enable Global Privacy Control. To exercise your other rights, contact us at sales@2290support.com.

Other U.S. State Privacy Rights. Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas, among others) may have similar rights, including the right to opt out of targeted advertising. You may exercise these rights through the same controls described above or by contacting us at sales@2290support.com.

Do Not Track Signals

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature signal setting you can activate to signal certain privacy preferences. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, our Site does not respond to “Do Not Track” browser signals. However, where required by applicable law, we honor the Global Privacy Control (GPC) signal as a valid request to opt out of the “sale” or “sharing” of personal information for the browser on which it is enabled.

A Note for Users Outside the United States

2290 Support is headquartered in the United States of America (“United States”) and utilizes service providers throughout the world, including in the United States. The Site is not intended for Site visitors outside the United States. If you are a non-U.S. user of the Site, by visiting the Site and providing us with data, you acknowledge and agree that your information may be processed for the purposes identified in this Privacy Policy. If you choose to access our Site outside the United States, 2290 Support and our service providers may transfer your information to, or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. In particular, you are advised that the United States uses a sectoral model of privacy protection that relies on a mix of legislation, governmental regulation, and self-regulation. Where the laws of your country allow you to do so, by using the Site or the services or by providing your data, you consent and authorize 2290 Support to transfer, store, and use all such information in the United States (and any other country where we operate) which may not offer an equivalent level of protection to that required in the country where you reside and to the processing of that information by us on our servers located in the United States, as described in this Privacy Policy. If you do not want your information transferred to the United States or any other country where we operate, please do not submit any information to us or use our Site or the services.

How to Contact Us

Please contact us at sales@2290support.com if you have any questions about this Privacy Policy or the information we hold about you.

Last updated: June 27, 2026

View Terms and Conditions →Back to Home