State E-file Disclosures

1. Scope

These disclosures supplement the federal E-file Disclosures, Privacy Notice, and Terms of Service for taxpayers using any future state e-file workflow through TakoTax. Built-in state e-file is not available yet. The planned initial state scope is California, Colorado, and Georgia, but final availability will be published before launch.

2. California

2.1 Authorization

If California e-file is enabled, TakoTax will follow California Franchise Tax Board (FTB) authorization, transmitter, software, and record-retention requirements for individual returns.

2.2 California §17530.5 — separate consent for non-preparation use or disclosure

California Business and Professions Code §17530.5 protects information you provide for the preparation of federal or California tax returns. TakoTax may not use or disclose that information for any purpose other than preparing or filing your return, or providing support, without a separate written consent that complies with §17530.5.

The §17530.5 consent is presented only when a specific non-preparation use or disclosure is requested. It is a separate document, not bundled with the Terms, Privacy Notice, federal §7216 consent, or the e-file authorization. Consent is voluntary. If you decline a §17530.5 consent, it will not block preparation or any enabled federal or California e-file workflow. No feature of TakoTax is conditioned on this consent.

If a §17530.5 consent is requested and you would prefer to revoke it after accepting, contact [email protected]; revocation is prospective.

2.3 California Consumer Privacy Act / California Privacy Rights Act

To the extent the CCPA / CPRA apply, California residents have the right to know what personal information TakoTax collects, to access and delete that information, to correct inaccurate information, and to opt out of any sale or sharing of personal information. TakoTax does not sell tax return information and does not share it with advertising platforms. Requests may be sent to [email protected]. TakoTax will not retaliate against any California resident for exercising these rights.

2.4 California breach notification

In the event of a breach of unencrypted personal information affecting California residents, TakoTax will notify affected California residents within 30 calendar days of discovery, per California Civil Code §1798.82 as amended by SB 446 (effective January 1, 2026). If more than 500 California residents are affected, TakoTax will also notify the California Attorney General within 15 days of resident notification.

3. Colorado

3.1 Authorization

If Colorado e-file is enabled, TakoTax will follow Colorado Department of Revenue authorization, software, and record-retention requirements for individual returns.

3.2 Federal §7216 controls

Colorado does not impose its own consent requirements on tax return information beyond federal IRC §7216. TakoTax follows the federal §7216 requirements described in the E-file Disclosures §13 for any non-preparation use or disclosure.

3.3 Colorado Privacy Act

Under the Colorado Privacy Act, Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of any sale of personal data, targeted advertising, or profiling that produces legal or similarly significant effects. TakoTax does not sell tax return information, does not run targeted advertising, and does not use profiling to produce legal or similarly significant effects. Requests may be sent to [email protected].

3.4 Colorado breach notification

In the event of a breach of unencrypted personal information affecting Colorado residents, TakoTax will notify affected Colorado residents within 30 days of the determination that a breach occurred, per CRS §6-1-716. If more than 500 Colorado residents are affected, TakoTax will also notify the Colorado Attorney General within the same 30-day window.

4. Georgia

4.1 Authorization

If Georgia e-file is enabled, TakoTax will follow Georgia Department of Revenue authorization, product registration, and record-retention requirements for individual returns.

4.2 Federal §7216 controls

Georgia does not impose its own consent requirements on tax return information beyond federal IRC §7216. TakoTax follows the federal §7216 requirements described in the E-file Disclosures §13.

4.3 Georgia breach notification

In the event of a breach of unencrypted personal information affecting Georgia residents, TakoTax will notify affected Georgia residents without unreasonable delay, per OCGA §10-1-912. If more than 10,000 Georgia residents are affected, TakoTax will also notify nationwide consumer reporting agencies as required by the statute.

5. Other states

TakoTax may add state e-file scope in later filing seasons. Until a state is added to an enabled supported scope, you remain responsible for filing that state return separately. The State support page reflects current calculation coverage.

6. Breach notification posture across states

TakoTax engineers its breach response to the strictest applicable state timing rule (currently California's 30-day individual + 15-day Attorney General standard). When a breach affects residents of multiple states, each cohort is notified under the respective state's statute, but TakoTax does not delay any state's notification while it prepares another's.

7. Sources

• California Business and Professions Code §17530.5
• California Civil Code §1798.82 (as amended by SB 446, effective 2026-01-01)
• California Franchise Tax Board Publication 1345 (current edition)
• California Consumer Privacy Act / California Privacy Rights Act
• Colorado Revised Statutes §6-1-716
• Colorado Privacy Act, CRS §6-1-1301 et seq.
• Colorado Department of Revenue e-file program guidance
• Official Code of Georgia Annotated §10-1-912
• Georgia Department of Revenue e-file program guidance and annual Letter of Intent