Privacy Policy
Effective October 10, 2026. This policy describes FileAbroad's current website and service-provider data flows, including the optional hosted travel workspace.
Who we are
FileAbroad is a service of Iterative Systems LLC. This policy applies to fileabroad.com, preliminary intake requests, payment communications, and FileAbroad tax-preparation engagements.
Information we collect
- Contact details and preliminary filing facts from intake forms. Written-service requests also include your selected service, screening answers, and notes; private delivery records retain the inquiry email for reliable retries.
- The intake form collects your email and preliminary filing facts. FileAbroad receives the inquiry and its originating page, language, and referral or campaign context. The form does not create an account or subscribe you to marketing.
- Email addresses, requested resources, newsletter and follow-up choices, consent and confirmation dates, unsubscribe records, and email delivery records.
- Invoice, checkout, payment-status, service, and tax-year records handled through Mercury or Stripe, as applicable.
- Tax documents and sensitive personal information uploaded through Encyro after an engagement is accepted. Accepted Foreign Gift or Inheritance U.S. Filing Plan engagements use a separate private FileAbroad portal for agreed records, organizer answers, review history, and the written plan; those case records are stored in private Vercel Blob storage.
- Prepared travel evidence, proposed and confirmed travel facts, workpapers, and revisions submitted through the optional hosted Travel Record Reconciler, under its specific disclosure below.
- Messages you choose to send through email or WhatsApp.
- Consent-based website events such as page paths, intake starts, WhatsApp clicks, invoice creation, and completed purchases. Tax answers, intake text, message content, names, emails, phone numbers, and document contents are not sent to GA4.
Where documents belong
Do not put Social Security numbers, passport numbers, account numbers, tax returns, or financial statements in website chat, public intake or service-request forms, ordinary email, or WhatsApp. Use the private document route specified for your accepted engagement: Encyro for tax-document exchange, or the private FileAbroad portal for agreed foreign gift or inheritance filing-plan records. Before uploading filing-plan records, mask Social Security and passport numbers and full account numbers in copies, leaving only relevant last four digits and the names, dates, amounts, currencies, and source context needed for review. The filing-plan portal does not automatically redact documents. The optional hosted travel workspace accepts only relevant prepared evidence under its separate masking and processing disclosure below.
How we use information
- Review a request, recommend scope, prepare accepted filings, and communicate.
- Create and reconcile invoices and checkout payments, send payment confirmations, and deliver purchased digital products.
- Protect the service, prevent abuse, maintain records, and meet legal duties.
- Measure aggregate website and funnel performance after analytics consent.
- Deliver requested resources and service acknowledgments. Send optional newsletters and automated service follow-ups only after separate opt-in and email confirmation. You can unsubscribe from optional emails at any time.
Service providers
FileAbroad does not sell personal information. It discloses information to service providers only as needed for the stated business purpose, subject to their terms and privacy practices. Current providers include:
- Vercel — website hosting, private storage of service inquiries, email delivery and consent records, private Vercel Blob storage of foreign gift or inheritance filing-plan case records and uploaded documents, hosted travel case records, and privacy-oriented site analytics.
- Google Analytics — consent-based website measurement and conversion events.
- Resend — delivery of written-service inquiries to FileAbroad, customer acknowledgments, transactional and resource emails, and customer-only private foreign gift or inheritance filing-plan workflow notifications containing the recipient email address, private portal link, and case reference; plus optional newsletters and follow-ups after confirmed opt-in.
- Mercury — hosted ACH invoices and payment records.
- Encyro — secure tax-document collection and exchange.
- WhatsApp / Meta — optional messaging when you choose to contact FileAbroad there.
- Web3Forms — delivery of ordinary intake forms and FileAbroad inquiries to FileAbroad.
- Stripe — hosted checkout, payment processing, and purchase records.
- OpenAI — processing website AI assistant messages and redacted source excerpts for automated property-sale plans; processing supplied scope facts and redacted record content for the foreign gift or inheritance filing plan’s AI agent scope screening, extraction, evidence checks, clarification, and plan delivery; proposing travel facts from prepared evidence images in the optional hosted Travel Record Reconciler; and processing requests to the legacy AI assistant endpoint if separately enabled and accessed. ordinary contact forms do not use OpenAI.
Tax filings may also require disclosure to the IRS, FinCEN, state tax agencies, or another authority that the client authorizes or the law requires.
Website assistant and AI-assisted workflows
The Ask FileAbroad launcher opens an AI conversation processed by OpenAI. Ordinary contact forms remain separate and do not send form messages to OpenAI. For the automated Foreign Property Sale U.S. Reporting Plan, the buyer explicitly consents to sending redacted source excerpts and scope answers to OpenAI for source auditing. Buyer email is excluded from the model input. Source excerpts are not saved in FileAbroad case storage; the resulting plan is privately stored in Vercel Blob. No human review is included, and no tax position is determined. Requests ask OpenAI not to store response objects and disable agent tracing, although provider retention policies still apply. Automated property-sale scope acceptance follows deterministic rules and source checks before payment. AI output does not set a custom quote or determine a tax position. Share only broad needs in public forms; sensitive documents belong in the private route specified for the accepted engagement. The foreign gift or inheritance filing plan is a separate AI agent workflow, with no human reviewer. After explicit AI-processing consent, FileAbroad sends supplied scope facts and prepared, redacted record content to OpenAI for scope screening, extraction, evidence checks, clarification, and plan delivery. Client fact confirmations remain separate from agent support; AI can make mistakes, and customers must check source-linked output against their records. Records and workpapers are stored privately in Vercel Blob. Before upload, mask Social Security and passport numbers and full account numbers, preserving relevant source facts and only the last four account digits when needed for matching; keep your originals and do not rely on automatic redaction to remove every identifier. Agent requests use store:false and disable tracing. These settings do not promise zero provider retention. OpenAI’s API abuse-monitoring logs may be retained for up to 30 days, with exceptions under its applicable terms. FileAbroad does not claim organization-level Zero Data Retention approval; OpenAI’s applicable API data terms and retention rules still apply. Resend sends private portal notifications, not uploaded documents or organizer contents. The optional hosted travel workspace uses a separate image-extraction workflow described below; every extracted fact needs customer confirmation and day counts use deterministic code.
Hosted Travel Record Reconciler
This English disclosure applies to the optional hosted travel workspace when it is available. The free travel ledger runs locally in your browser. The hosted option sends only the evidence you explicitly prepare and submit to FileAbroad for a purchased ledger. It uses a separate workflow from Encyro tax-preparation document exchange.
Select relevant English or Spanish stamp, boarding-pass, or travel-record pages. PDF pages are rendered on your device; the original PDF stays there. Mask unnecessary names, passport and taxpayer numbers, account numbers, addresses, and unrelated details, then review the final page image. Only reviewed PNG images, prepared JPEG images, or allowed travel CSV fields are uploaded. Image metadata is removed on the server. CSV parsing uses permitted travel fields and does not send the CSV to an AI provider.
Vercel hosts the service and stores case evidence and workpapers in private Blob storage. OpenAI receives prepared image derivatives through its Responses API using GPT-5.4 mini to propose travel facts. Each fact needs your confirmation; software calculates the day counts. FileAbroad does not upload evidence through OpenAI's Files API or retain response IDs. Stripe processes checkout and payment records; your documents and travel ledger are excluded from payment metadata. Application logs and analytics exclude document content, travel facts, original filenames, prompts, and model responses.
OpenAI API data is excluded from training by default unless sharing is enabled. Requests usestore: falseto disable stored response retrieval. Provider abuse-monitoring content may remain for up to 30 days, with legal and safety exceptions. See OpenAI's data controls.
Source derivatives expire 30 days after each upload. Extracted facts, confirmations, ledgers, correction history, and scope/payment references expire 90 days after workspace creation. Access ends at expiry; daily cleanup removes eligible active copies during the next scheduled run. FileAbroad creates no backups of these hosted case records. Separate payment, support, and legally required business records follow the general retention policy.
Access uses a necessary signed, HttpOnly browser cookie that expires with your workspace. Keep exports you need and use the original browser to return. Select “Delete my hosted workspace” to end access immediately and remove its active evidence and workpapers sooner. Processing already in flight may need up to five minutes to finish cleanup during normal operation. Interrupted or failed cleanup is retried by the daily purge. A minimal deletion record without documents or travel facts is kept for 30 days and until cleanup succeeds. Vercel source caches may take up to one minute to clear. Provider infrastructure backups and legally retained copies follow provider terms; FileAbroad promises no exact erasure time for those copies. Your downloaded copies remain under your control.
For deletion or access help, contact info@fileabroad.com without attaching sensitive documents or identity numbers. Review the hosted product terms before checkout.
Analytics and cookies
Google Analytics storage is denied by default and enabled only after the visitor accepts analytics. The preference is stored in the browser. Vercel Analytics may collect privacy-oriented aggregate usage information. Affiliate and newsletter preference cookies may also be used for functional attribution and display choices.
Retention and security
FileAbroad retains records for the engagement, operational, tax-preparer, security, and legal periods that apply to the record. Foreign gift or inheritance case access ends 90 days after case creation; active private Blob case records, workpapers, and uploads are scheduled for deletion then. Customers may request earlier deletion through the authenticated portal, which closes case access and blocks further case processing immediately. An already-running provider request may finish, but its output is discarded; copies already held by providers follow their own retention terms. Failed storage purges are retried daily, so a request does not promise all physical copies disappear immediately. A minimal deletion tombstone is retained to prevent case recovery or renewed processing. Download your plan and keep your original records before the case expires or you delete it. Payment-provider receipts, transactional email records, provider API logs, and abuse or security logs follow their applicable provider terms and legal retention requirements. Automated property-sale plans expire thirty days after preparation and are deleted by scheduled cleanup; rate-limit records expire after two days. Source excerpts are not saved in FileAbroad case storage. Provider retention and payment/email records have their own policies. The hosted travel case schedule is stated separately below. No transmission or storage system can be guaranteed perfectly secure. FileAbroad limits document collection to the private route specified for the accepted engagement and uses access controls appropriate to the service.
Choices and contact
You may decline analytics, unsubscribe from newsletters, decline call recording or AI transcription, or ask about access, correction, or deletion where applicable. Contact info@fileabroad.com. For a foreign gift or inheritance filing-plan case, give your case reference and the request; do not email documents or sensitive identifiers. Some tax, payment, security, and legal records cannot be deleted immediately.