Privacy Policy

Effective Date: October 4, 2026

At Saavedra CPA LLC, your privacy matters. This policy explains how we collect, use, protect and share personal information when you use our website, our client portal (Connect), our communications, or our professional services.

Who we are

Saavedra CPA LLC is a professional services firm based in Puerto Rico offering accounting, payroll, tax, compliance and advisory services to individuals and businesses. For questions about this policy, contact privacy@saavedracpa.com.

Information we collect

Contact information: name, email address, phone number and mailing address.
Financial and tax information: identification numbers (such as EIN or SSN), income and expense records, payroll information (including employee names, hours and pay), bank and accounting data, and the documents needed to provide our services.
Connected account data: information we receive from accounting, banking, payment or other platforms that you authorize us to connect.
Technical data: device and browser type, IP address and how you interact with our website and portal.
Communications: emails, form submissions, portal messages and uploads, text messages, and recordings of calls. We will tell you when a call is being recorded.

We do not need medical or patient records to provide our services. Please do not send them. We do not knowingly collect information from anyone under 18, and we ask that they not submit personal data.

How we use information

We use your information to:

deliver the services you engaged us for;
maintain secure client records and communications;
comply with tax, legal, regulatory and professional obligations;
operate, secure and improve our systems and your experience;
send essential communications such as deadlines, billing notices, document requests and service updates, including by SMS where you have consented; and
send occasional educational content or updates about our services. You may opt out of non-essential communications at any time through the preferences in the platform or by contacting us.

We do not sell or rent personal information. We do not use your tax return information to market third-party services without your separate written consent.

Automation and AI-assisted tools

We use automation, such as pre-filled forms, reminders and onboarding workflows, and in limited cases AI-assisted tools, such as a chat feature on our website. Website chat provides general information and scheduling help only. It does not provide tax, accounting or legal advice, and you should not enter Social Security numbers, bank numbers or other sensitive details in it. Professional advice is given only under a confirmed engagement. We review AI-assisted work before relying on it, and we choose tool settings that limit a vendor’s use of your data where such settings are available.

Text messages (SMS)

We send text messages only with your consent. We do not share your SMS consent with third parties or affiliates. You may opt out at any time by replying STOP or by contacting us.

Why we use information

We use personal information to provide the services you requested, to comply with legal and professional obligations, with your consent where required, and for legitimate business purposes such as securing and improving our services.

Platforms and security

We use third-party platforms for accounting, payroll, document exchange, scheduling, payments and communications. For security reasons we do not publish a list of every provider, but we will identify the providers that handle your information in your engagement documents or on request.

We maintain administrative, technical and physical safeguards appropriate to the size and nature of our practice, including encrypted connections, access limited to authorized personnel, multi-factor authentication where available, and regular backups. No system is completely secure, and we cannot guarantee absolute security. We maintain a written information security plan.

Sharing information

We share information only as needed to serve you and meet our obligations:

with service providers that support our operations under confidentiality and security commitments, and intend that may not use your information for their own purposes beyond providing services to us;
with taxing authorities, agencies and other parties as needed to prepare and file what you have authorized;
with professional advisors bound by confidentiality; and
when required by law, subpoena or court order.

Storage outside Puerto Rico

Information may be stored or processed on servers outside Puerto Rico, including in the United States and other countries where our providers operate. We use providers that commit to confidentiality and security, and our engagement letters request your consent where tax return information is involved.

Your rights

Depending on applicable law, you may ask to access, correct, delete, restrict or receive a copy of your personal information, or to object to certain uses. Some records must be kept under law or professional standards, so we may not be able to delete everything on request. To make a request, contact privacy@saavedracpa.com. We will respond within the time required by law.

Data retention

We keep client records for seven (7) years after the end of the engagement or the last tax year to which they relate, whichever is later, unless the law requires a longer period or we agree in writing to a longer archive. During that time you may ask for copies of historical records. After that period we may securely destroy records, and we will try to notify you first. Website inquiries from people who do not become clients are kept for twenty-four (24) months.

Data processing addendum

A Data Processing Addendum is available on request for clients or partners who need additional contractual safeguards.

Cookies and similar technologies

We use cookies and similar technologies to keep sessions secure, remember language preferences, measure site usage and measure marketing performance, including through advertising pixels. You can manage your choices through our cookie banner and your browser settings.

Security incidents

If we learn of a security incident that affects your personal information, we will notify affected individuals and authorities as required by applicable law, including Puerto Rico law.

Policy updates

We may update this policy to reflect changes in our practices, technology or legal obligations. The updated policy will be posted on our website with a new effective date. Please also see our Terms.

Contact us

For privacy questions, requests or complaints, email privacy@saavedracpa.com or use the contact form at www.saavedracpa.com.