Privacy & Document Handling
Last updated: August 18, 2026
Website and Intake Use
The website contact form and the Microsoft Client Intake form are for contact information, service selection, scheduling, and general intake. They are not document-upload fields and are not intended for highly sensitive identifiers or supporting records.
No Sensitive Documents Through Forms or Ordinary Email
Do not place tax returns, Social Security numbers, ITIN numbers, passport copies or numbers, driver license numbers, immigration records, bank or payment-card information, or other sensitive personal or financial records in the website contact-form message box, the general intake description field, text messages, messaging applications, or ordinary email attachments.
How Client Document Upload Works
After a Client Intake submission, All Tax & Books creates a job-specific document folder and emails the client a Job Number and a private Upload Documents link in the form alltaxbooks.com/upload/<token>. The link may be reused for additional documents while that job remains active. The upload page allows file selection and upload for the mapped job; it does not provide public browsing of the SharePoint folder or other client files.
The upload link is a bearer link: possession of the link does not verify the identity of the person using it. Keep the intake email and do not forward the Upload Documents link. Where identity or document authenticity matters, All Tax & Books uses separate verification or original-document procedures.
Where Uploaded Files Go
The upload page uses a Netlify authorization function to validate the job token and request a Microsoft Graph upload session. Client document bytes then upload directly from the client browser to the assigned Microsoft SharePoint job folder; the production design does not proxy or store the document bytes through Netlify.
Completed Documents
When completed documents are ready, the intake email includes or may provide a separate job-specific Completed Documents link. That link is view-only for the assigned completed-documents folder and does not permit upload, edit, or delete. Keep the link private and do not forward it.
Improper Submissions
If sensitive information is submitted through a form, ordinary email, text, or another unapproved channel contrary to these instructions, we may delete, refuse, or require resubmission through the job-specific upload method.
Confidentiality
Client information is treated as confidential. We do not sell client information. We disclose or provide access only as authorized by the client, required by law, necessary to perform requested services, or otherwise permitted under applicable requirements.