Fiscal Safeguard
Privacy Policy
Version 1.0 · Effective date: October 21, 2026
1. Scope and Overview
This Privacy Policy explains how BK Global Solutions, LLC, an Arizona limited liability company doing business as Fiscal Safeguard ("we," "us," or "our"), collects, processes, utilizes, and protects information gathered through our digital assets and communications.
The core operational parameters of this policy are defined below:
| Privacy Parameter | Policy Scope & Corporate Enforcement |
|---|---|
| Effective Date | October 21, 2026 (Version 1.0) |
| Covered Digital Assets | The public website (FiscalSafeguard.com), the web application portal (app.fiscalsafeguard.com), and all associated transactional emails. |
| Targeted Data Subjects | Primarily the business owners, operators, partners, and corporate staff members of our subscribing customer firms. |
| Strict Data Boundary | This platform operates strictly on a business-to-business (B2B) model. It is not intended for individual consumers, and we do not knowingly collect information from personal, family, or household users. |
Important Financial Data Restriction: Fiscal Safeguard provides programmatic compliance tools to help tax, accounting, and bookkeeping firms satisfy federal guidelines. Our platform is strictly designed to manage your firm's internal security frameworks. This platform does not collect, store, or process the non-public personal information (NPI) or financial records belonging to your firm's end-consumers or tax clients.
2. Information We Collect
We collect and process information strictly necessary to deliver the compliance platform features. The categories of information, their specific data fields, and their operational sources are detailed below:
| Information Category | Specific Data Elements Collected | Direct Data Source |
|---|---|---|
| Account Data | First and last name, work email address, and a sign-in identifier from Microsoft Entra External ID. (We never see or store your password.) | Submitted by you via your corporate Microsoft sign-in integration. |
| Billing Data | Corporate billing name, email address, physical billing address, Stripe transaction ID, and subscription lifecycle status. | Submitted by you directly to our third-party billing portal. |
| Payment Cards | None. Fiscal Safeguard does not collect, process, or store credit or debit card numbers. All card handling is isolated and managed securely by Stripe. | Processed entirely by Stripe on its hosted checkout page. |
| Firm Profile Data | Firm name, physical address, corporate phone number, website URL, total staff count, and the specific name/role of your designated Qualified Individual (QI). | Input by you during platform onboarding and questionnaire phases. |
| Compliance Context | Names and roles of staff members, who uses each device, lists of software systems, IT vendors, encryption statuses, physical security protocols, and operational security answers. | Input by you within the guided questionnaire modules. |
| Plans & Action Items | Generated WISP documents, task due dates, assigned task owners, mitigation notes, and Change Log entries, documented risk-acceptance rationales. | Generated programmatically by the platform based entirely on your inputs. |
| Compliance Evidence | User-uploaded files validating security controls (e.g., sanitized setting screenshots, employee training certificates, corporate policies). | Uploaded directly by you into the Evidence Locker. |
| Preferences & Support | Notification schedules, advisor-contact toggles, technical help-desk notes, names, and optional contact phone numbers. | Submitted by you when utilizing platform features or support portals. |
| Technical Telemetry | IP addresses, browser types, requesting subdomains, page view timelines, system exception errors, records of each acceptance of these policies and each electronic plan approval or attestation (time, version and IP address), and access timestamps. | Captured automatically via our Microsoft Azure server security logs. |
Important Privacy Notice on Prohibited Content: As established in Section 8 of our Terms of Service, you are strictly prohibited from entering or uploading your end-clients' consumer nonpublic personal information (NPI).
To enforce this boundary, Fiscal Safeguard utilizes automated server-side detection mechanisms. When you upload evidence files or save typed entries (such as notes, questionnaire answers and help requests), our system scans them in real time to identify and block common PII strings (such as Social Security numbers or credit card formats). If a data conflict is flagged, the upload or entry is instantly blocked and the data is discarded without being stored. If such information is found after it was saved, we follow the Remove and Notify process in Section 8 of our Terms of Service.
3. How We Use Your Information
We use the data we collect strictly for commercial, administrative, and security purposes. We do not sell your personal or business information, we do not share your data with third parties for cross-context behavioral advertising, and we never utilize your data to train external artificial intelligence or large language models.
The specific ways your data is utilized across our platform are broken down below:
| Operational Purpose | Data Utilization & Platform Execution |
|---|---|
| Service Delivery | Managing account authentication via Microsoft Sign-In, programmatically generating your WISP templates, tracking compliance dashboard action items, and hosting files within your secure Azure Evidence Locker. |
| Administrative Communications | Routing transactional and account emails through Azure Email Services. This includes automated compliance reminders (which you can toggle off), downloadable document previews, billing receipts from Stripe, and critical security notices, a confirmation after each purchase, yearly renewal notices (about 45 days and again about 21 days before renewal), notices when we remove a file under the Remove and Notify process, data-deletion warnings, and notices of changes to our Terms or this Policy. |
| Billing & Fraud Prevention | Transmitting secure billing metadata to Stripe to process your upfront annual or monthly payments, validate authorization codes, and actively monitor for payment fraud. |
| Customer & Technical Support | Reviewing your help-desk notes, names, and optional contact numbers to troubleshoot technical errors, respond to platform inquiries, and optimize user experience. |
| Security & System Maintenance | Auditing server logs to monitor cloud ecosystem stability, patching software dependencies, diagnosing system exceptions, and defending against unauthorized access or automated scraping attempts. |
| Anonymized Analytics | Compiling unlinked, aggregate telemetry (e.g., measuring the nationwide percentage of firms with outstanding vendor reviews) to improve our compliance templates. This metadata contains no unique identifiers and cannot be traced back to any specific firm, owner, or employee. |
| Opt-In Advisory Consulting | Accessing designated compliance gaps only when you explicitly click the "Get expert help" button. Advisors only view the specific action items you voluntarily select for 1-on-1 consulting guidance. |
| Regulatory Compliance | Reviewing corporate metadata or technical logs exclusively when required to satisfy federal legal obligations, court subpoenas, or formal regulatory audits. |
4. Cookie Technology & Tracking Disclosures
Fiscal Safeguard values data minimization and platform performance. Our public website and secure web application deploy zero third-party tracking scripts, external tracking fonts, or marketing trackers.
The specific cookie technologies utilized by our platform are detailed below:
| Cookie Type & Technical Name | Operational Purpose | Expiration Timeline |
|---|---|---|
| Sign-In Session Cookie | Essential cookie used to authenticate your Microsoft login token and keep you securely connected to your specific compliance dashboard workspace. | 8 hours maximum. Automatically expires when the browser is closed or after 30 minutes of inactivity. |
| Security & Cross-Site Cookies | Cryptographic tokens deployed natively during the Microsoft authentication sequence to block cross-site request forgery (CSRF) and prevent account hijacking attempts. | Short-lived; deleted automatically once the sign-in sequence successfully completes. |
Zero Behavioral or Advertising Tracking: Because we do not deploy non-essential marketing, behavioral tracking, or analytics cookies, Fiscal Safeguard does not utilize a cookie consent pop-up banner. We do not track your digital behavior across external web domains, and we do not alter our system behavior in response to web browser "Do Not Track" signals.
Transactional Email Transparency: To protect your firm's internal communication security, the automated renewal notices and compliance calendar reminders sent via Azure Email Services contain no web beacons, open-tracking pixels, or hyperlink click-tracking mechanisms.
5. Who We Share Information With
Fiscal Safeguard does not rent, sell, or trade your operational data to third parties. We share data strictly with verified service providers who are contractually bound to process your information under explicit data protection terms, or under the direct permission loops outlined below:
| Verified Service Provider | Operational Role & Purpose | Categories of Data Transmitted |
|---|---|---|
| Microsoft (Azure Cloud Ecosystem & Entra External ID) | Core application hosting, relational database management, secure file storage, cryptographic key management, automated monitoring telemetry, and Azure Email Services transactional routing. | All account data, questionnaire answers, compliance evidence files, and technical logs. |
| Stripe | Processing automated monthly or upfront annual subscription billing, checking payment validation codes, and tracking billing lifecycles. | Account name, billing email, corporate address, and transaction validation codes. (No card data handles our servers). |
| Fiscal Safeguard Advisors (Optional Advisory Team) | Providing 1-on-1 educational compliance guidance and strategic directions via phone or secure meeting links based on your specific platform bottlenecks. | Opt-In Only: Conveys strictly your firm name, primary contact email, your name, phone number and note if you provide them, and the specific dashboard action items you explicitly select for review. |
How to Revoke Advisor Visibility: The advisor communication protocol remains entirely disabled by default. If enabled, you may instantly revoke advisor visibility and stop proactive outreach at any time by adjusting your configurations within your Email Settings dashboard.
Exigent Disclosures & Corporate Transitions: We reserve the right to disclose specific account records or technical metadata to third parties strictly under the following mandatory legal criteria:
Legal Obligations: To comply with a valid federal court subpoena, active regulatory audit, law enforcement warrant, or applicable statutory mandate.
Rights Protection: To enforce our active Terms of Service, defend against malicious platform scanning, or protect the safety and system integrity of Fiscal Safeguard and our subscribing customer firms.
Corporate Transfers: If Fiscal Safeguard undergoes a merger, structural acquisition, or asset sale, your data will transfer to the successor entity. The successor remains contractually bound by this identical Privacy Policy regarding all historical data gathered prior to the transition.
6. Where Information is Stored
Fiscal Safeguard stores Customer Data in the United States, as described below.
The physical and cloud architecture hosting environments are mapped out below:
| Infrastructure Vector | Primary Data Storage Location | Operational Architecture Details |
|---|---|---|
| Core SaaS Platform & Database | Microsoft Azure — West US 3 Region (Phoenix, Arizona, USA). | All active database storage, generated WISP templates, dashboard action items, and Evidence Locker file repositories. |
| Identity & Account Authentication | Microsoft Entra External ID — United States Regional Data Centers. | Encrypted account profiles, user names, access logs, and unique multi-factor authentication tokens. |
| Billing Metadata & Records | Stripe — United States Financial Processing Data Centers. | Historical billing addresses, subscription invoices, transaction verification keys, and payment tokens. |
Data Localization and Service Provider Processing: Fiscal Safeguard processes and stores primary Customer Data, including your questionnaire responses, generated WISP templates, Remediation Ledger records, Change Logs, and Evidence Locker file repositories, strictly within Microsoft Azure data centers located in the United States, and all automated system backups remain localized within the United States. However, you acknowledge that our verified third-party service providers (such as Stripe for automated payment validation and administrative billing tracking) may process limited corporate account metadata, transaction keys, or billing addresses across international data networks under their own independent data protection terms and security frameworks.
7. Information Security & Technical Safeguards
Fiscal Safeguard implements rigorous, industry-standard administrative, physical, and technical controls designed to isolate and protect your operational data within our Microsoft Azure environment.
Our active security architecture is structured across the following parameters:
| Security Domain | Specific Technical Safeguard Implemented |
|---|---|
| Data Encryption | Enforced TLS 1.2 or higher for all data traveling in transit between your browser and our servers. All information resting in databases or file repositories is encrypted using AES-256 bit encryption algorithms. |
| Access Control & Identity | Mandatory Multi-Factor Authentication (MFA) required for all customer sign-ins and internal system administration. Production networks are locked down using Azure Managed Identities rather than shared static passwords. |
| Secret & Key Management | All cryptographic certificates, database connection strings, and application API keys are strictly isolated and monitored inside a secure Azure Key Vault. |
| Business Continuity | Automated daily data backups featuring point-in-time restore capabilities, coupled with secure, geographically redundant storage arrays to prevent disaster-related data loss. |
| Resilience & soft Delete | Hardened platform dependencies featuring regular automated vulnerability updates, system telemetry monitoring, and soft-delete protections to defend against accidental file purging or ransomware overrides. |
Data Breach & Security Incident Protocol: While Fiscal Safeguard deploys enterprise-grade defenses, no cloud architecture can guarantee absolute, impenetrable security.
If our security team detects, analyzes, and formally confirms a data security incident that compromises the confidentiality or integrity of your specific Customer Data, Fiscal Safeguard will notify all affected account administrators via email without undue delay, and strictly within seventy-two (72) hours of incident confirmation, in complete alignment with Section 9 of our Terms of Service.
8. Data Retention & Deletion Schedules
Fiscal Safeguard minimizes data footprint storage by maintaining information only for as long as necessary to fulfill core application services, satisfy corporate tax compliance, or maintain cloud environment security.
In alignment with Section 14 of our Terms of Service, data is retained and purged according to the specific lifecycles detailed below:
| Data Classification | Active Retention Period | Automated Destruction Protocol |
|---|---|---|
| Account, Profile, & WISP Data | Retained for the entire duration of an active paid subscription lifecycle. | Kept securely for a maximum 60-day courtesy window after the subscription ends, during which the account owner can sign in only to download the Compliance Archive (ZIP), with an email warning at least 14 days before deletion; then permanently deleted from production servers. |
| Cloud Infrastructure Backups | Maintained continuously during active subscription access. | Purged data naturally cycles out of and is permanently overwritten within all secure geo-redundant storage arrays within 35 days. |
| Azure Server Logs & Telemetry | Retained for up to 90 days via Azure Application Insights. | Automatically overwritten and deleted on a rolling basis by the system database. |
| Help Desk & Consulting Requests | Retained for 24 months from the date the support ticket or advisor request is closed. | Permanently deleted from support records, together with email delivery logs and blocked-upload logs, to maintain data minimization. |
| Corporate Billing & Tax Records | Retained for up to 7 years following the date of financial transaction processing. | Securely archived in isolated billing logs as mandated by federal and Arizona corporate tax regulations. |
| Agreement, Signature & Deletion Records | Records of each acceptance of our Terms of Service and this Policy, each electronic plan signature or attestation, and each help-request consent (time, version, wording and IP address); after an account is deleted, a deletion record (firm name, requester, and deletion date). | Kept while the account is active and for 7 years after the account is deleted, then permanently deleted. |
9. Your choices and rights
Fiscal Safeguard provides comprehensive control over your administrative communications and data footprints. As a nationwide platform, we apply an institutional compliance standard and will process data control requests regardless of which state your firm operates in.
Your specific communication options and data rights are structured below:
| Privacy Control / Right | Operational Execution & Platform Parameter |
|---|---|
| Compliance Reminders | You may opt out of automated weekly action item alerts directly within your Email Settings dashboard or via the unsubscribe link inside any reminder email. |
| Administrative Notices | Mandatory system alerts, Stripe transaction receipts, and yearly renewal notices cannot be disabled while an account remains active. |
| Advisor Communication | Proactive advisor outreach is disabled by default. You retain the absolute right to enable or revoke advisor communication access at any time via your user dashboard. |
| Access, Correction, & Export | The account owner can download a complete compliance archive (ZIP) at any time from My Account → Data management, including questionnaire answers, every plan version, the Remediation Ledger, the Change Log and Evidence Locker files. You may also request an export by contacting support@fiscalsafeguard.com. |
| Account Data Deletion | You may request a permanent purge of your platform records. Please note that data deletion results in the immediate cancellation of your application subscription. |
Commercial Scope & Verification Protocols: Because Fiscal Safeguard operates strictly as a business-to-business (B2B) platform, all data processed through our systems constitutes commercial business information rather than individual consumer data.
To protect the confidentiality and regulatory security of your compliance documentation, Fiscal Safeguard enforces a strict identity validation protocol. All requests for data export, modification, or deletion must originate from the primary email account associated with the firm's registered profile, and we must successfully verify the requestor's status as the authorized business owner or formally designated Qualified Individual (QI) before taking action. Validated requests will be completed within thirty (30) calendar days of receipt.
10. Children
Fiscal Safeguard is an enterprise compliance tool designed exclusively for commercial businesses and certified financial professionals. The platform is not structured for, directed toward, or marketed to individuals under the age of majority.
Our operational boundaries regarding minors are defined below:
| Privacy Metric | Enforcement Boundary & Policy Rule |
|---|---|
| Age Restriction | The platform is restricted strictly to users who are eighteen (18) years of age or older. Each user confirms this when accepting our Terms of Service and this Policy. |
| Collection Prohibition | We do not knowingly target, solicit, or collect personal information or technical telemetry from children or minors under any circumstances. |
| Remediation Protocol | If we discover or are notified that an individual under 18 has bypassed authentication boundaries to submit data, we will execute an immediate, permanent purge of that record. |
Reporting Unauthorized Access: If you have reason to believe that a minor or an unauthorized individual under the age of 18 has created an account or submitted profile metadata to Fiscal Safeguard, please notify our compliance team immediately at **support@**fiscalsafeguard.com so we can investigate and permanently delete the data.
11. Amendments & Privacy Policy Updates
Fiscal Safeguard reviews this Privacy Policy periodically to ensure continuous alignment with shifting state privacy amendments, federal financial regulations, and cloud security enhancements.
When updates occur, they will be cataloged and enforced according to the specific parameters below:
| Update Category | Notification Protocol & Enforcement Parameter |
|---|---|
| Material Changes | For amendments that alter how we use, process, or share your data, we will provide an explicit thirty (30) day prior notice via email or through a prominent administrative dashboard alert. |
| Administrative Edits | Minor corrections, phrasing updates, typo fixes, or formatting revisions will take effect immediately upon being posted to this page without advance notice. |
| Acknowledged Acceptance | Each version of this Policy is numbered and dated. For material changes, you will be asked to accept the revised Policy at your first sign-in on or after the effective date. For administrative edits, continued use of the platform after the change is posted constitutes acceptance. |
Archived History Requests: If you require access to historical iterations of our privacy frameworks to satisfy your internal compliance tracking or audit records, you may request past versions by contacting our team at **support@**fiscalsafeguard.com.
12. Corporate Contact & Compliance Inquiries
If your firm has any operational questions, security inquiries, data access requests, or regulatory feedback regarding this Privacy Policy, please reach out to our corporate compliance team through the following channels:
| Communication Channel | Primary Corporate Intake Details |
|---|---|
| Electronic Mail Support | **support@**fiscalsafeguard.com |
| Registered Corporate Entity | BK Global Solutions, LLC (dba Fiscal Safeguard) |
| Physical Mailing Address | 10663 E. Monument Dr., Scottsdale, Arizona 85262 |
Our administrative compliance desk reviews and logs all formal data inquiries within standard business hours and will respond to validated compliance verification requests within thirty (30) calendar days.