File now
LoginGet started
Privacy statement

This privacy statement (“Statement”) provides information on the processing of personal data by Expatfile.tax LLC, hereinafter individually and collectively referred to as: “Expatfile”. Expatfile provides tax filing software for U.S. expats (“Service”). The contact details of Expatfile are the following:

1 E Liberty St #600
Reno, Nevada 89501
support@expatfile.tax

This Statement applies to all personal data processed by Expatfile and/or on behalf of Expatfile concerning all its data subjects (including (potential, current and former) employees, contractors, (prospective) customers and (other) business partners), with which a natural person may be identified or become identifiable (“Personal Data”). The natural persons involved are hereinafter collectively referred to as data subjects (“Data Subjects”).

This Statement sets out the elements necessary for Expatfile’s compliance with applicable privacy legislation, principles and practice, including but not limited to the General Data Protection Regulation (“GDPR”) and the EU/U.S. Data Privacy Framework Principles (“DPF Principles”) (“Applicable Laws”). Expatfile reserves the right to review and/or alter the Statement periodically, in order to comply with (local and/or European) legislation, and for any other purpose deemed reasonably necessary by Expatfile.


Expatfile complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. Expatfile has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework Program (DPF Program), and to view our certification, please visit https://www.dataprivacyframework.gov/.

For queries and inquiries about this Statement, please contact Expatfile at e-mail address: support@expatfile.tax

Please find below an overview of the subjects which will be discussed in this Statement.

  • Categories of Personal Data
  • Purpose, legal ground and retention period of data processing
  • Security of Personal Data
  • Transfer of Personal Data
  • Rights in relation to Personal Data
  • Questions and inquiries

Categories of Personal Data

Expatfile processes the following categories of Personal Data, with respect to the following categories of Data Subjects:

  • Email address;
  • First name and last name;
  • Social Security Number;
  • Street address;
  • Zip code;
  • Phone number;
  • Personal income information in order to provide our tax filing service for U.S. expats;
  • Cookies (for more information about the use of Cookies, please see our Cookie statement);
  • IP address.

These Personal Data are collected via https://expatfile.tax and https://app.expatfile.tax.

Purpose, legal ground and retention period of data processing

Based on the following legal grounds, Expatfile is processing Personal Data for the following purposes.

In order to fulfil our contractual obligation, we process your Personal Data:

  • To provide and maintain our Service;
  • To allow you to participate in interactive features of our Services when you choose to do so;
  • To detect, prevent and address technical issues;
  • To provide you with news, special offers and general information about other goods, services and event which Expatfile offer that are similar to those that you already purchased or enquired about unless you have opted not to receive such information.

Expatfile will retain these Personal Data for no more than 3 years.

For our legitimate interests, we may process your Personal Data in order to:

  • Notify you about changes to our Services;
  • Provide customer support;
  • To gather analysis or valuable information so that Expatfile can improve the Services;
  • To monitor the usage of the Services;

Expatfile will retain these Personal Data for no more than 3 years.

Expatfile will only process Personal Data to the extent necessary for the described purposes. Personal Data may in principle not be processed for other purposes other than that for which the Personal Data were collected. If there is a necessity or need to process Personal Data for other purposes, it shall be investigated by Expatfile whether the purposes of the intended data processing is compatible with the original purposes. Expatfile shall provide the Data Subject prior to that further processing with information on that other purpose.

Security of Personal Data

Expatfile handles Personal Data carefully and confidentially, and uses appropriate technical and organizational measures to preserve the integrity and security of your Personal Data. We maintain physical, electronic and procedural safeguards that comply with applicable law and federal standards.

Transfer of Personal Data

Expatfile transfers (only relevant portions of) Personal Data to the following recipients in order to provide the Service to you:

  • Google Analytics;
  • CloudAccess;
  • Hubspot;
  • Microsoft Clarity;
  • Stripe;
  • Currencies Direct;
  • The Internal Revenue Service (the “IRS”);

Expatfile does transfer Personal Data to a third country or international organizations outside of the European union/European Economic Area (“EU/EEA”), including the United States of America. These transfers only take place in compliance with the Applicable Laws and where appropriate safeguards are in place that ensure the level of protection of Data Subjects as required by these Applicable Laws (e.g. transfers on the basis of an adequacy decision or standard EU Model clauses). Expatfile uses Standard Contractual Clauses for safeguarding this transfer.

Rights in relation to Personal Data

Data Subjects have the right of information, access, rectification, addition and erasure of Personal Data, and the right to object against or restrict the processing of Personal Data (or withdraw an earlier given consent), as well as the right to data portability. The procedure of Expatfile that enables Data Subjects to exercise these rights, is described below.

Data Subjects may file a request for access with Expatfile, and Expatfile shall respond as soon as possible, and in any event within one (1) month, about:

  1. Whether Expatfile holds any Personal Data relating to the respective Data Subject; and
  2. If so, information is provided on the purposes of the processing, the categories, the recipients (if applicable) the envisaged period for which the Personal Data will be stored, or the criteria used, the existence of the right to request rectification, erasure, restriction or to object to such processing, the right to lodge a complaint with a supervisory authority, the existence of automated decision-making, where the data is transferred to a third country, the appropriate safeguards and the source(s) of the Personal Data.

Expatfile informs the Data Subject within one (1) month after receiving the request whether the request shall be complied with (in time), and if not, accompanied with the reasons for the delay or rejection. Information provided shall be free of charge. Data Subjects can exercise these rights at reasonable intervals. Data Subjects can exercise their rights by contacting us in writing or per e-mail (see address above).

Expatfile will comply with a legitimate request of a Data Subject for rectification, addition and erasure, if the Personal Data are factually incorrect, incomplete, or irrelevant for the purpose(s) of the data processing, or otherwise processed in violation with the Applicable Laws.

With regard to a request to erase Personal Data, it should be taken into account that Expatfile shall not comply with such request, if it is incompatible with any legal obligations of Expatfile.

Pursuant to the DPF Program, EU individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States in reliance on the DPF Program should direct their query to support@expatfile.tax. If requested to remove data, we will respond within a reasonable timeframe.

We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to support@expatfile.tax.

If you are an EU Individual, where we transfer your personal data to third party service providers who perform services for us or on our behalf, we are responsible for the processing of that data by them and shall remain liable if they process your personal data in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.

In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the DPF Principles, Expatfile commits to resolve DPF Principles-related complaints about your privacy and our collection or use of your personal information. European Union individuals with inquiries or complaints regarding our handling of personal data in reliance on the DPF should first contact Expatfile at: support@expatfile.tax

Expatfile has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by us, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction for more information on this process.

With respect to personal data received or transferred pursuant to the DPF Program, Expatfile is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

In the event of concerns about the handling of Personal Data, Data Subjects also have the right to lodge a complaint with a local supervisory authority.

Questions and inquiries

For queries and inquiries about this Statement, please contact us at e-mail: support@expatfile.tax

Effective date: January 1st, 2026