How we collect, use, and protect your information when you use PracticeWings.
PracticeWings (“PracticeWings,” “we,” “us,” or “our”) operates the PracticeWings practice management platform (the “Service”) for accounting and tax firms. This Privacy Policy explains what information we collect, how we use and protect it, and what choices you have. It applies to our website at www.practicewings.com and to the Service itself.
PracticeWings is operated from the United States and hosted on Amazon Web Services (AWS) infrastructure. By using the Service, you agree to the collection and use of information as described in this Privacy Policy.
When you or your firm register for PracticeWings, we collect account-level details such as name, email address, phone number, firm name, job title, and login credentials. Passwords are stored using one-way hashing and are never stored in plain text.
As a practice management platform, your firm stores its own operational and client records within the Service — client contact details, engagement information, documents, notes, time entries, invoices, and related work product. Your firm controls this data; PracticeWings processes it solely to provide and support the Service and does not use, sell, or share it for any other purpose except as required by law.
We automatically collect information about how the Service is used, including pages viewed, features used, browser and device information, IP address, session timing, and error/performance logs, in order to operate, secure, and improve the Service.
We use collected information to provide and maintain the Service, process payments and manage subscriptions, deliver transactional and account communications, provide customer support, secure the platform against fraud and abuse, and comply with legal obligations. We do not use your firm's client data for advertising or sell it to third parties.
Transactional and account email (password resets, billing notices, service alerts, and similar messages) is sent through Amazon Simple Email Service (AWS SES). Marketing or bulk email, where applicable, includes a List-Unsubscribe header and an unsubscribe link so you can opt out at any time; unsubscribing does not affect transactional messages required to operate your account.
Payment processing is handled by Stripe. PracticeWings never receives, transmits, or stores full credit card numbers, bank account numbers, or other raw payment credentials — that information goes directly to Stripe. We retain only limited billing metadata (such as the last four digits of a payment method, transaction history, and invoice records) needed to manage your subscription and provide receipts.
Where SMS is used — for example, multi-factor authentication codes or optional notifications — messages are delivered through Twilio. Phone numbers used for SMS are stored only to support that delivery and related account security.
Certain features (such as document analysis and AI-assisted workflows) use Amazon Bedrock, a cloud AI service, to process content on your firm's behalf. AI processing of tax return information is subject to consent controls consistent with IRC §7216 (the federal statute governing use and disclosure of tax return information by preparers): your firm's authorization is required before tax return information is used in connection with AI features, and firms can configure the strictness of that consent gate. AI processing is used only to provide the requested feature and is not used to train third-party foundation models on your data.
PracticeWings uses a limited set of cookies necessary to operate the Service — primarily authentication and session cookies, which are set as httpOnly (not readable by page scripts) to reduce exposure to cross-site scripting. We do not use third-party advertising or cross-site tracking cookies. The Service is served through Cloudflare, which may set its own cookies and request headers for security, performance, and routing purposes as part of delivering the site.
PracticeWings does not sell personal information or client data, as those terms are understood under applicable privacy law, and has not done so in the preceding 12 months.
You may request deletion of your personal information, or of an account and its associated data, at any time by emailing [email protected] with the subject line “Data Deletion Request.” We will verify the request and act on it within a reasonable time, except where we are required or permitted to retain certain records (for example, billing records retained for tax/accounting compliance, or data subject to a firm's own legal retention obligations to its clients). If you signed in or connected to PracticeWings through a third-party platform (such as Meta or LinkedIn), you can use this same process, or that platform's own data-deletion request tools where available, to request removal of data associated with that connection.
We apply multiple layers of protection to safeguard data:
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we are committed to protecting data using industry-standard practices appropriate to a platform handling tax and financial records.
PracticeWings is a business platform for accounting and tax professionals. It is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If we become aware that we have collected information from someone under 18, we will take steps to delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where changes materially affect your rights, provide additional notice (such as by email or an in-Service notice). Continued use of the Service after a change constitutes acceptance of the updated policy.
Questions about this Privacy Policy, your data, or a deletion request can be directed to [email protected].