1099 Sorted / 1099-K reconciler
← Back to 1099 Sorted

Privacy Policy

Last updated: October 2026

1. Data Controller

Igor Kazazic
Segeparksgatan 18
212 50 Malmö, Sweden
Email: contact@1099sorted.com

1099 Sorted is operated as a sole proprietorship based in Sweden. Because the business is established in the EU, this policy is written to meet EU/GDPR requirements, and it applies equally to visitors and customers anywhere, including the United States.

2. The short version

Your 1099-K PDFs, transaction CSVs, and client records are processed entirely inside your own browser. They are never uploaded to our servers, never sent to any third-party AI or OCR service, and never stored anywhere we can access. We genuinely cannot see your reconciliation data — there is no server-side code path for it to reach us. What follows explains the handful of things that do touch a server: hosting logs, payment processing, firm-license access control, and affiliate referral tracking.

3. Hosting and server logs

The site is hosted on Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Like any web host, Vercel's infrastructure processes IP address, user agent, and request timestamps in server logs to operate and secure the service. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — keeping the site running and secure.

4. How your 1099-K and transaction data is processed

When you upload a 1099-K PDF or a transaction CSV, or use OCR on a scanned form, all of that processing — PDF text extraction, OCR (via an in-browser WebAssembly engine), CSV parsing, and the reconciliation calculation itself — happens locally in your browser using JavaScript. No file content, no client name, no dollar amount from a reconciliation is ever transmitted to our servers or to any third-party processing service. There is no upload step in the code for this data.

Saved clients, tax years, and in-progress reconciliations are stored only in your browser's local storage, on your own device. This data:

5. Payment processing

Purchases (the $15 per-reconciliation payment and the $79/month firm license) are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, and/or its US affiliate Stripe, Inc., depending on how the transaction is routed. Stripe processes your payment details as an independent controller under its own privacy policy. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). We never see or store your card number — Stripe's checkout page handles that directly.

If you apply to our partner (affiliate) program, your name, email address, and payout details (for example a PayPal or Wise email) are processed through PromoteKit, the service we use to run the program, so that we can track referrals and pay commissions. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

6. Firm license access (email-based unlock)

If you subscribe to the $79/month Firm License, we store the following in a server-side database (Vercel KV) so we can verify your subscription is active: your billing email address, your Stripe customer and subscription IDs, your subscription status (active/canceled/past due), and, if you opt out, a record that you have unsubscribed from reminder emails. This is the only reconciliation-adjacent personal data we hold on our servers, and it contains no client data, no financial figures, and no uploaded files — only account/subscription status tied to your email.

To unlock access on a device, you request a one-time sign-in link, which we email to you via Resend (email delivery provider, USA). The link is valid for 15 minutes and lets you unlock exports on that browser. We use this instead of a password specifically so that knowing someone's billing email alone is not enough to gain access — only someone with access to that inbox can use the link. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Reminder emails. While your Firm License is active we send a reminder to your billing email each month to run your monthly close, and a calendar reminder shortly before each quarterly estimated-tax deadline. They relate to the service you subscribed to and contain no advertising from third parties. Every reminder includes the sender's postal address and an unsubscribe link (and the standard one-click unsubscribe header supported by Gmail, Outlook, and Apple Mail). Unsubscribing stops these reminders only; sign-in links and billing receipts are service messages and are still sent. We keep a record of your opt-out, keyed to your email, so the reminders do not restart. They are delivered through Resend. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in keeping subscribers informed about the service they pay for; you can object at any time by unsubscribing or by writing to contact@1099sorted.com.

7. International data transfers

Vercel (hosting) and Resend (email delivery) are US-based service providers. Where personal data (such as server logs or your billing email) is transferred to the United States, this is done under Standard Contractual Clauses (SCCs) pursuant to GDPR Art. 46(2)(c), as provided in each provider's own Data Processing Addendum. Stripe's EU entity processes payments within the EU/EEA where applicable. PromoteKit, our affiliate-tracking provider, is also a service provider outside the EU/EEA; where personal data is transferred to it, we rely on the transfer safeguards set out in its own data processing terms.

8. Retention periods

9. Your rights

Under GDPR (and, if applicable, comparable US state privacy laws), you have the right to access, correct, delete, restrict, or object to processing of your personal data, and the right to data portability. Since we hold almost no personal data server-side (only your email and subscription status, if you're a Firm License subscriber), most requests can be resolved quickly. Contact contact@1099sorted.com to exercise any of these rights. If you're in the EU, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. Cookies and tracking

We do not use marketing cookies, advertising trackers, or Google Analytics. Browser storage on this site falls into two groups.

Functional storage. localStorage and sessionStorage are used to save your clients and reconciliations locally and to remember that you've unlocked a purchase on this device. None of this is used for tracking or shared with any third party.

Affiliate referral tracking. We run a partner program and use PromoteKit (promotekit.com) to credit a sale to the partner who referred you. PromoteKit's script is not loaded on the pages where you use the tool or work with client data. It loads only on a short intermediate page (1099sorted.com/go/) when you arrive through a partner's referral link; that page lets PromoteKit set its cookie and sends you straight back to the main page within a few seconds. PromoteKit receives your IP address and browser details when that page loads. The cookie records the referral for up to 60 days, so that a later purchase can be credited to that partner. Nothing from your reconciliations, client records, or uploaded files is part of this; that data never leaves your browser. If you would rather not have this cookie, block or clear cookies for 1099sorted.com; purchases work the same way without it. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — crediting partners for referrals.

If we add analytics in the future, we will ask for your consent first via a consent banner where legally required.

11. Children's privacy

1099 Sorted is a professional tool intended for tax preparers, bookkeepers, and accounting firms. It is not directed at, and we do not knowingly collect data from, anyone under 18.

12. Changes to this policy

We may update this policy as the product changes. The "Last updated" date at the top reflects the most recent revision. Material changes affecting Firm License subscribers will be communicated by email.

Contact

Questions about this policy or your data: contact@1099sorted.com