GenAgent Trust Hub
Menu

TurboTax (Intuit)

FTier FHighest risk · 29/100
  • The policy allows AI training; it does not describe an opt-out.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared with partners and affiliates; you can opt out.
  • Staff may review your content; the policy does not describe an opt-out.

Intuit collects tax, financial, and device data, trains AI on it, shares across products.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · March 9, 2026 ↗Terms ↗50 min read · college graduate level25 lines verified word for word
  • Uses your content for AI training with no opt-out

Collected

What is collected

Account, tax IDs, money data, chats, devices, and sometimes location, contacts, and credit files.

Read the exact line

Privacy policy

“Identity verification information. We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number”

Training

How it is used

They run the service, personalize ads, and train AI models on how you use the platform.

Read the exact line

Privacy policy

“Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models”

Sharing

Who may see it

Affiliates, ad networks, AI vendors, banks, and partners you connect can get your information.

Read the exact line

Privacy policy

“We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes”

Kept

How long it is kept

They keep data as long as they think they need it, even after you ask to delete.

Read the exact line

Privacy policy

“Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information for as long as necessary to:”

Controls

Your controls

You can change privacy settings, download data, or ask to delete it in your account or Privacy Center.

Read the exact line

Privacy policy

“You may ask us to delete your personal information by visiting your account settings or the Intuit Privacy Center or calling us toll-free at 1 (877) 261-6470.”

Fine print

The fine print

You must be 18; they can close you anytime; no refunds; not a class suit.

Read the exact line

Terms of service

“Intuit may terminate this Agreement (and your account) or suspend the Platform at any time in our discretion.”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Opt out of California sharing

    “Your California ” link in the Intuit website footer, or Preferences in your Intuit Account

  2. Turn off interest-based ads

    Choices Opt-Out Page, Manage Cookies / Privacy Settings in the site footer, or enable Global Privacy Control

  3. Download or delete your data

    Account settings, Intuit Privacy Center, or call 1 (877) 261-6470

  4. Cancel a paid subscription

    Follow the applicable Service instructions; removing a mobile app does not cancel billing

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

What you type and how you use TurboTax can be used to train Intuit’s AI.

Read the exact line

Privacy policy

“Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models and other machine learning models”

For example, a chatbot question about your refund could help train future tax bots.

2 · How it is used

Chatbot messages are used to personalize answers and improve the AI.

Read the exact line

Terms of service

“Any Content you provide to Digital Assistants may be used to provide more personalized responses and improve our Platform, Digital Assistants, and related technology.”

For example, a voice or chat question about deductions can be reused to improve the assistant.

3 · Terms

If something goes wrong, you generally cannot sue in a regular court with a group of other users.

Read the exact line

Terms of service

“you and Intuit are each waiving the right to a trial by jury or to participate in a .”

For example.

4 · The fine print

If you cancel mid-year, you keep access until the period ends but do not get money back.

Read the exact line

Terms of service

“We do not provide refunds or credits for any cancellations or partial subscription period.”

For example, canceling TurboTax Live in March after an annual charge still costs the full year.

5 · The fine print

They can shut your account without promising a warning.

Read the exact line

Terms of service

“Intuit may terminate this Agreement (and your account) or suspend the Platform at any time in our discretion.”

For example, they could lock you out during tax season if they think you broke a rule.

6 · The fine print

If your use of the product causes a lawsuit, you may have to pay Intuit’s legal bills.

Read the exact line

Terms of service

“You will and the Intuit Parties for any losses, damages, judgments, fines, costs and expenses (including legal fees)”

For example, if you upload someone else’s tax data without permission and they sue Intuit, you could owe costs.

7 · How it is used

People, not just computers, may look at information from AI chats and similar features.

Read the exact line

Privacy policy

“we may process your personal information using automated and manual (human) methods.”

For example, a support or safety reviewer could read a chatbot conversation about your taxes.

8 · How it is used

Ad companies can get data so they can show you targeted ads.

Read the exact line

Privacy policy

“Intuit may share personal information with advertising networks and other providers to tailor advertising and offers presented to you”

For example, using TurboTax could lead to loan or credit-card ads on other sites.

9 · How it is used

You keep ownership, but Intuit gets a broad license to copy and what you upload.

Read the exact line

Terms of service

“Host, reproduce, distribute, communicate, and use your Content — for example, to save your Content on our systems and make it accessible from anywhere you go”

For example, they can store and reformat your tax documents and share them with vendors that run the service.

10 · What is collected

Voice or face biometrics need notice and consent first.

Read the exact line

Privacy policy

“We will not collect your Biometric Information without first providing notice and obtaining your consent.”

For example, a face or fingerprint login should not start until you agree.

11 · How it is used

Raw tax-return data is extra protected unless you agree to share it across Intuit products.

Read the exact line

Privacy policy

“Except as necessary to provide you with tax preparation services or as authorized by law, we will not use or disclose your Tax Return Information – including to Intuit Group Companies – unless you consent.”

For example, your filed return should not go to Credit Karma unless you say yes.

Words to know

Legal words from the lines above, in plain English.

model training
Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
class action waiver
You agree not to join with other users in one lawsuit; each person must complain alone. For example, if a bug overcharges a million people, you cannot all sue together for a refund.
indemnify
You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
sublicensable
The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
biometric
Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
consent
Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
How we got here · grade F · score 29/100 · 15 of 15 policy answers backed by a verified quote · 0 not stated
  • What does the app collect beyond what it needs to work?

    They collect far more than a tax form: SSN, credit reports, precise location if allowed, contacts, session replays, and partner data.

  • Does it record your voice, face or body, and what happens to that?

    They may keep call recordings, photos, and video, and they treat some of that as biometric data after notice and consent.

  • Are your chats and uploads used to train AI models, and is that off by default?

    They say they train AI and machine-learning models on platform use and digital-assistant content, with no training-specific off switch described.

  • Can employees or contractors read your conversations, and when?

    AI features may be processed with human methods, and support calls are monitored, with no review opt-out described.

  • Are you profiled or tracked for advertising?

    They and advertising partners collect data for personalized ads on Intuit and other sites, with cookie and GPC opt-outs.

  • Do they sell or share your data, and can you opt out?

    They say they do not sell under CCPA (except Credit Karma’s separate claim) but share with affiliates, ad networks, and partners, with California opt-out of sharing.

  • What rights do they take over what you type and what the AI makes?

    You keep IP in your content, but you grant a worldwide, sublicensable license that lasts as long as the content is protected.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can request deletion in the app, but they may keep records for legal, claims, and fraud needs, which can last years.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    They build insights and personalized recommendations about you; privacy settings exist, but a viewable memory control is not described.

  • Do they commit to basic security, and have they leaked data?

    They say they use reasonable physical, technical, and organizational safeguards, but do not promise they cannot be breached.

  • Is there a real age gate, and are teens protected?

    Terms require you to be at least 18. The privacy statement says services are not for children under 13, with no age-check described.

  • Will they tell you when the rules change, and is the policy specific?

    The privacy statement is dated. Material changes may be posted in the product; continued use of the terms means you accept.

  • Can they close your account without warning, and can you get your data out first?

    They may terminate or suspend your account at any time in their discretion, without a promised notice period.

  • If something goes wrong, who pays?

    The service is as-is, liability is capped at fees paid in 12 months or $100, and you must indemnify Intuit for many claims.

  • Do subscriptions renew on their own, and can you get a refund?

    Paid plans auto-renew. Annual plans get a reminder, but they say they do not give refunds or credits for mid-period cancels.

The privacy policy is 11,294 words at a college graduate level (Flesch reading ease 37.9); the terms are 6,858 words at a professional or legal expert level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton