TaxAct
Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.
Reported incidents
Settled with Connecticut over tax details sent to Meta and Google
2026-08-19Affected Tracking pixels on its online tax filing pages
Connecticut's Attorney General announced a $275,000 settlement with TaxAct on 19 August 2026. The state found that from 2018 to 2022 TaxAct sent Meta and Google filers' rounded adjusted gross income, refunds or amounts owed, and details of their income and deductions, such as dependents, charitable gifts and investment income, without telling them first. Its contract with Meta "provided no limit on Meta's ability to use the data for its own purposes or to share that data with other third parties." TaxAct must now review, monitor and audit the tracking on its site.
Filers' income and refund details sent to Meta, which trained its AI on them
2023-07-12Affected Tracking pixels on its online tax filing pages
A congressional investigation published on 12 July 2023 by six senators and a member of the House found that TaxAct, with two other tax filing services, used tracking pixels that sent filers' details to Meta and Google: names, filing status, income, refund amounts or taxes owed, and the names of dependents. Meta confirmed it used the data it collected for targeted advertising and to train its own AI. The investigation said millions of taxpayers' details were sent, some of it going back years.
People affected typically ask TaxAct to confirm whether their information was included, and which categories.
The verified route
Where data goes
What TaxAct likely holds
What banks typically hold about you, from our industry research, the most sensitive first.
Pick a folder to see where it goes.
Most sensitive
Sensitive
Everyday
Where it goes
On TaxAct's behalf
They handle your data on TaxAct's instructions. If TaxAct uses them, a request to TaxAct should reach them.
Inferred services
Services banks typically use.
Get their own copy
A request to TaxAct doesn't reach them. Each needs its own, and some keep records under a legal duty.
Inferred practices
What banks typically do with your data, from our industry research.
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.