My ITINPrivacy Policy
Last updated: October 5, 2026
This Privacy Policy explains how ORXON LLC ("ORXON", "we", "us") collects, uses and protects your information when you use the My ITIN mobile app and website (together, the "Service"). My ITIN is a private ITIN application assistance service and is not affiliated with or endorsed by the Internal Revenue Service (IRS) or the U.S. Government.
1. Information we collect
| Category | Examples |
|---|---|
| Account information | Email address, password (stored only as a secure hash), or Sign in with Apple identifier |
| Contact information | Name, phone number, email, foreign residential address, U.S. mailing address |
| Application information | Date and place of birth, gender, marital status, occupation, citizenship, country of tax residency, foreign tax ID, U.S. visa details, reason for applying, existing ITIN (for renewals) |
| Identity documents | Passport scans, visa scans, handwritten signature, and other documents you upload |
| Payment information | Processed by our payment provider (e.g. Apple Pay or a card processor). We receive a payment confirmation and limited details such as the last four digits of your card. We do not store full card numbers. |
| Communications | Messages you send to our team and our replies |
| Device and technical data | Push notification token, app version, and basic diagnostic information needed to operate and secure the Service |
We do not use your information for advertising and we do not track you across other apps or websites.
2. How we use your information
- To prepare, review and submit your ITIN application (including Form W-7) on your behalf.
- To communicate with you about your application, including status updates and requests for documents.
- To process payments and prevent fraud.
- To secure the Service, keep audit logs of access to sensitive data, and comply with legal obligations.
- To provide customer support.
3. How we share your information
We do not sell or rent your personal information. We share it only as needed to provide the Service:
- The IRS — the information and documents required for your ITIN application are submitted to the IRS.
- Service providers that process data on our behalf under confidentiality and security obligations, such as cloud hosting and storage, payment processing, and communications providers.
- Legal requirements — when required by law, legal process, or to protect the rights, property or safety of our users or others.
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.
4. Security
We use industry-standard safeguards, including encryption in transit (TLS) and at rest, short-lived access tokens, access controls limiting document access to you and authorized staff, and audit logging. On your device, drafts and pending documents are stored encrypted. No method of transmission or storage is completely secure, but we work hard to protect your information.
5. Data retention
We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your account, application information and documents, except for records we must keep to comply with legal, tax or accounting obligations (for example, payment records), which are retained only for the period required.
6. Your rights and choices
- Access and correction — you can review and update your application information in the app, or contact us.
- Deletion — you can delete your account at any time in the app (Profile → Delete Account). See Delete your account.
- Copy of your data — request a copy by messaging us in the app or emailing myitin@orxon.co.
- Notifications — manage push notifications in the app or in your device settings.
Depending on where you live (for example, California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have additional rights, such as the right to know, delete, correct, or restrict or object to certain processing, and to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising your rights. To exercise them, contact us using the details below.
7. International transfers
We are based in the United States and many of our users are not. Your information will be processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for these transfers.
8. Children
The Service is intended for adults. Applications for dependents must be completed by a parent or legal guardian. We do not knowingly collect information from children without the involvement of a parent or guardian.
9. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect.
10. Contact us
ORXON LLC
Email: myitin@orxon.co