Legal

Privacy Policy

Last updated: June 26, 2026

Cloverleaf (“Cloverleaf,” “we,” “us”) provides a document workflow platform for tax-prep firms. This Privacy Policy explains what information we collect when you visit our website or use our service, how we use it, and the choices you have. This page is maintained by Cloverleaf and is not an independent certification.

Information we collect

We collect information in three ways:

  • Information you give us. When you request a demo or contact us, you provide your name, work email, firm name, team size, and any message you choose to share.
  • Customer documents. If your firm uses Cloverleaf, we receive the documents and metadata your firm or its clients send into the workflow. We process this material on your firm's behalf as a service provider.
  • Usage information. Standard server logs (IP address, user agent, timestamps, referring page) that help us operate, secure, and improve the service.

How we use information

  • To respond to demo requests and customer inquiries.
  • To deliver, maintain, secure, and improve the Cloverleaf service.
  • To meet legal, accounting, and contractual obligations.

We do not sell personal information, and we do not use customer documents to train third-party AI models.

How we share information

We share information only with vetted subprocessors who help us operate the service (hosting, database, email delivery, error monitoring), and only to the extent needed for them to perform their function. We may disclose information when required by law or to protect the rights, property, or safety of Cloverleaf, our customers, or others.

Data retention

We retain demo and contact requests for as long as reasonably necessary to follow up and maintain business records. Customer data is retained for the duration of your firm's subscription and for a limited window afterward, then deleted or de-identified, except where longer retention is required by law.

Security

We use industry-standard administrative, technical, and physical safeguards designed to protect the information we process, including encryption in transit, access controls, and audit logging. No service can guarantee absolute security.

Your choices

You can request access to, correction of, or deletion of the personal information you have submitted to us by contacting us at the address below. If your firm is a Cloverleaf customer, requests about documents we process on your firm's behalf should be directed to your firm, which acts as the data controller.

Children

Cloverleaf is a business product and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

Contact us

Questions about this policy or your information can be sent through the Request a demo form on our homepage.