Privacy Policy
Effective Date: September 22, 2026 • Last updated: September 29, 2026 • CrossBorderFiler.com
1. Information We Collect
To prepare your IRS Form 3520 and related documentation, we collect the following categories of information:
- Taxpayer Identification Information: Name, Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN), physical mailing address, email address, and phone number.
- Foreign Gift & Trust Information: Descriptions, dates, values, and foreign currency conversions of foreign gifts, inheritances, foreign trust transfers, and foreign trust distributions.
- Supporting Documents: References to supporting documents entered in preparation notes. Document uploads are not available in this release.
2. How We Protect Your Tax Data
The pilot encrypts saved return data and review snapshots and restricts workspace access by account. Production transport security depends on a correctly configured HTTPS deployment. This development release has not completed an independent security review; use synthetic client data during testing.
3. Website Analytics & Cookies
Our public web pages, including the Agena Software homepage and the Form 3520 home, guide, articles, pricing, terms, and privacy pages, use two analytics services to help us understand how visitors find and use the site:
- Google Analytics (Google LLC) counts visits and measures pages viewed, how visitors arrived, device and browser type, and approximate location derived from IP address. It sets cookies such as
_gato recognize returning browsers. - Microsoft Clarity (Microsoft Corporation) records how visitors interact with a page, such as clicks, scrolling, and mouse movement, and can replay those sessions. It sets cookies such as
_clckand_clskand receives device and browser information.
No analytics or session recording runs where you sign in or work on returns. The sign-in page and the preparation workspace load only our own scripts, so passwords, verification codes, and client tax information you enter are never sent to Google or Microsoft.
The workspace uses one essential cookie, form3520_session, to keep you signed in and to protect forms against cross-site request forgery. It is not used for analytics or advertising.
Some public pages also load fonts from Google Fonts and page styling from the Tailwind CSS content delivery network; like any web request, these services receive your IP address and browser information.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. For more about how these providers handle data, see the Google Privacy Policy and the Microsoft Privacy Statement.
4. Data Retention & Deletion
Drafts and reviewed snapshots persist in the configured application database. Account recovery, self-service deletion, and a production retention policy are not yet implemented. Questions can be directed to privacy@crossborderfiler.com.
5. Contacting Privacy Compliance
If you have any questions regarding our Privacy Policy or data security measures, please contact the project team at:
Email: privacy@crossborderfiler.com