Privacy Policy
Last updated: October 2026
Overview
Rocket CPA, a 10X CPA Inc company, respects your privacy. This policy explains what information we collect when you use our website and services, how we use and protect it, and the choices you have. By using this site or booking a session, you agree to the practices described here.
Information we collect
When you contact us or book a session, we collect the information you provide directly: your name, email address, the topic you need help with, and the details of your message. If you join our email list, we collect the email address you submit. When you purchase a plan, we also retain a booking reference and the status of your order. Payment details are processed securely by Stripe — we never see or store your full card information.
Information collected automatically
Like most websites, our hosting platform may collect standard technical data when you visit, such as your browser type, device type, approximate location derived from your IP address, pages viewed, and the time of your visit. This information is used only in aggregate to keep the site running well and understand how visitors use it.
How we use your information
We use your information solely to respond to your inquiry, schedule and conduct your CPA session, process and manage your subscription, send you the communications you asked for (such as email tax tips, which you can stop at any time), and keep required records of our professional work. We do not sell your personal information, and we do not share it with third parties for marketing purposes.
Third-party service providers
We rely on a small number of trusted providers to operate: Stripe for payment processing, and cloud hosting and email-delivery services to run the site and send you messages. These providers process your information only as needed to deliver their services to us and are bound by their own confidentiality and security obligations.
Confidentiality
All consultations are subject to CPA professional confidentiality standards. Anything you discuss with a Rocket CPA consultant stays between you and the firm. We do not disclose your information except where required by law, regulation, or professional rules — for example, in response to a valid subpoena or to comply with IRS or state board requirements.
Data security
We use industry-standard measures to protect the information you give us, including encrypted connections (HTTPS) for all traffic to and from our site and restricted access to stored records on a need-to-know basis. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps designed to keep your data safe.
Data retention
We keep your contact inquiries, bookings, and session records only as long as needed to serve you, resolve disputes, and meet professional and recordkeeping obligations. When information is no longer needed, we delete or anonymize it.
Your rights and choices
You may request access to, correction of, or deletion of your personal information at any time by contacting us. You can unsubscribe from our emails using the link in any message or by contacting us directly. Residents of states or countries with specific privacy laws (such as the CCPA or GDPR) may have additional rights regarding their data; contact us and we will honor valid requests as required by applicable law.
California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request access to and deletion of your personal information; to correct inaccurate information; to limit the use of sensitive personal information; and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising. To submit a request, contact us through our contact page; we will verify your identity and respond within 45 days, as required by law. You may also use an authorized agent to submit a request on your behalf.
European privacy rights (GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data based on your consent, the performance of a contract with you (such as delivering a booked session), our legitimate interests in operating and securing the service, and legal obligations. You have the right to access, rectify, erase, restrict, or object to the processing of your data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority. Your data is processed in the United States, and where required we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers. Contact us to exercise any of these rights.
Children's privacy
Our services are intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us information, contact us and we will remove it.
Changes to this policy
We may update this policy from time to time as our services or the law change. The 'last updated' date at the top reflects the current version, and material changes will be reflected on this page.
Questions about this document? Contact us.