AltiroPrivacy Policy

Altiro Terms of Service

Effective October 2, 2026 · Version 2026-10-02

These Terms of Service (the "Terms") are an agreement between Altiro LLC ("Altiro," "we," "us") and the person or business that uses the Altiro client portal (the "Service"). Please read them. They include a limit on our liability (Section 17) and say which courts handle disputes (Section 20).

1. Accepting these Terms

You accept these Terms when you create an account, check the box agreeing to them, or use the Service. If you are signing up on behalf of a firm or other business, you confirm that you have authority to bind that business, and "you" means the business.

If you do not agree, do not use the Service.

You must be at least 18 years old to use the Service. The Service is built for businesses and their adult clients. It is not meant for children.

2. Definitions

  • Firm means a tax preparer, CPA, bookkeeper or other business that opens an Altiro account, along with the staff it adds as team members.
  • Client means a person or business that a Firm invites into its portal, or that submits information through a Firm's intake form or public intake link.
  • User means anyone who logs in to the Service, whether a Firm team member or a Client.
  • Customer Data means everything a Firm or its Clients put into the Service: contact details, intake answers, uploaded documents, messages, tasks and similar content.
  • Account Data means the information we collect to run a Firm's account, such as the name, email and phone number given at sign-up.

3. The Service

Altiro is a client portal for small tax and accounting firms. Firms can use it for custom intake forms and public intake links, document upload and download, document requests with automatic email reminders (including monthly recurring requests), secure in-app messaging, tasks, staff-only internal documents, an activity log, and team member management.

We may add, change or remove features over time. If we remove a feature a Firm is paying for in a way that materially reduces the Service, we will tell the Firm in advance where we reasonably can.

4. Accounts and security

You must give accurate information when you sign up and keep it current.

You are responsible for keeping your login credentials private and for activity that happens under your account. Tell us promptly at info@altiro.io if you believe someone has accessed your account without permission.

A Firm controls who on its team has access. When a Firm removes a team member, that person loses access to the Firm's portal. The Firm is responsible for removing people who should no longer have access and for choosing what each team member can see.

5. The Firm's responsibilities

The Firm decides what information to collect from its Clients and what to do with it. Because of that, the Firm agrees that:

  • it has the legal right to upload, collect and share the Customer Data it puts into the Service, or asks Clients to provide;
  • it will give its Clients any notices, and get any consents, that the law or its professional rules require before collecting their information through the Service;
  • it remains fully responsible for its own professional obligations, including duties to its Clients, record-keeping duties, and any data security program that applies to it (such as the FTC Safeguards Rule for tax preparers);
  • it will review the information Clients submit and will not rely on the Service to check whether that information is accurate or complete; and
  • it will keep its own copies of any records it is required to keep.

Using Altiro can support a Firm's security practices, but it does not by itself make a Firm compliant with any law or professional standard.

6. Acceptable use

You agree not to:

  • upload or send anything unlawful, or anything you do not have the right to share;
  • upload malware, or anything designed to harm or interfere with the Service or other people's devices;
  • try to get around our security, access accounts or data that are not yours, or probe or test the Service for weaknesses without our written permission;
  • scrape, crawl or extract data from the Service by automated means, except through tools we provide for that purpose;
  • use messaging, document requests or reminders to send spam or messages the recipient has not agreed to receive;
  • resell, sublicense or offer the Service to others without our written permission;
  • copy, reverse engineer or build a competing product from the Service.

We may remove content or restrict access if we reasonably believe it breaks these rules.

7. Customer Data

Ownership. The Firm owns its Customer Data. As between Altiro and the Firm, nothing in these Terms gives Altiro ownership of it.

Our permission to use it. The Firm gives Altiro a limited permission to host, store, copy, transmit, display and otherwise process Customer Data only as needed to provide, secure, support and maintain the Service, to follow the Firm's instructions, and to comply with law. This permission ends when the Customer Data is deleted under Section 13.

What we do not do. We do not sell Customer Data. We do not use Customer Data for advertising. No artificial intelligence providers process Customer Data today. If that changes, we will update these Terms and our Privacy Policy and give notice before it takes effect.

Deletion inside the app. Firms cannot currently delete documents from within the Service. A Firm that needs specific data removed can contact us at info@altiro.io.

8. Data processing

When we handle Client information inside a Firm's portal, we act on the Firm's behalf. In particular:

  • Instructions. We process Customer Data only to provide the Service and on the Firm's instructions, which include the Firm's use of the Service's features and settings, unless the law requires otherwise.
  • Service providers. We use the service providers listed in our Privacy Policy (currently Vercel, Neon, Amazon Web Services, Clerk and Postmark for the app) to host, store, authenticate and deliver email. We require them to protect the data they handle for us. We will update that list before adding a new provider that stores or processes Customer Data.
  • Security. We use the safeguards described in Section 9.
  • Breach notice. If we confirm a security breach that affects a Firm's Customer Data, we will notify the Firm without undue delay and share what we reasonably know so the Firm can meet its own notice duties.
  • Staff access. Our personnel access Customer Data only when needed to run, support or secure the Service, or when the law requires it.
  • Data processing agreement. A separate data processing agreement is being prepared and will be available on request at info@altiro.io.

9. Security

We take reasonable steps to protect the Service. Today that includes:

  • encryption of data in transit using TLS (HTTPS), with HSTS enabled;
  • storage of uploaded files in Amazon Web Services S3 with encryption at rest;
  • separation of data by Firm, so each Firm sees only its own portal and each Client sees only their own records;
  • staff-only internal documents that Clients cannot see;
  • download links that expire within minutes;
  • an activity log showing who uploaded, viewed or downloaded files and when; and
  • removal of access for team members a Firm removes.

No system is perfectly secure, and we cannot promise that unauthorized access will never happen.

10. Feedback

If you send us ideas or suggestions about the Service, we may use them without any obligation to you. You do not have to send feedback.

11. Fees, payment and early access

Early access. The Service is currently free during early access. Early-access features may change and may not be as polished as a finished product.

Paid plans. When paid plans launch, they will be monthly subscriptions, billed in advance. There is no long-term contract, and a Firm can cancel at any time. Cancellation takes effect at the end of the current billing month, and we do not give partial refunds for unused time unless the law requires it.

Notice before charging. We will show the fees before any charge. We will give at least 30 days' notice before we start charging an existing free account, and at least 30 days' notice before changing the price of a paid plan. A Firm that does not want to pay can cancel before the charge applies.

Payment processing. We do not process payments today. When billing launches, payments will be handled by a third-party payment processor (for example, CPACharge), and the Firm may need to accept that processor's terms.

Taxes. Fees do not include taxes. The Firm is responsible for any sales, use or similar taxes on its subscription, other than taxes on Altiro's income.

12. Suspension and termination

By the Firm. A Firm can stop using the Service and close its account at any time by contacting us at info@altiro.io.

By Altiro. We may suspend or end access to the Service if:

  • you materially break these Terms and do not fix the problem within 10 days after we tell you (or immediately if the breach cannot be fixed);
  • you break Section 6 in a way that threatens the security or integrity of the Service or other users;
  • payment is overdue after notice;
  • the law requires it; or
  • we stop offering the Service, in which case we will give at least 30 days' notice where we can.

Clients. A Client's access depends on the Firm. If a Firm removes a Client or closes its account, the Client loses access to that Firm's portal. Clients who need their records should ask their Firm.

13. Data export and deletion after termination

When a Firm's account ends for any reason, the Firm may ask us for an export of its Customer Data within 30 days. We will provide the export in a reasonable, commonly used format. If the account ended because the Firm broke the law or Section 6, we may limit the export to what the law requires.

After that 30-day window, we will delete the Firm's Customer Data within 90 days, with two exceptions:

  • copies in backups, which are deleted as the backups age out on their normal schedule; and
  • records we must keep to comply with law, resolve disputes or enforce these Terms.

Anything kept under these exceptions stays protected until deleted.

14. Third-party services

The Service relies on outside providers, and a Firm may choose to link or use other tools alongside it. We are not responsible for third-party services we do not control, including their availability, security or terms. A Firm's use of a third-party service is between the Firm and that provider.

15. Not tax, legal or accounting advice

Altiro is a software tool. We are not a tax preparer, CPA firm, law firm or financial advisor, and we do not provide tax, legal, accounting or financial advice.

We do not review, prepare or file returns. We do not check the accuracy of any information, form or document in the Service. Intake form templates and reminders are tools for the Firm to adapt, not professional guidance.

The relationship between a Firm and its Clients is entirely between them. The Firm alone is responsible for the professional services it provides.

16. Warranty disclaimer

We will make reasonable efforts to keep the Service running and secure. Beyond that, and to the extent the law allows, the Service is provided "as is" and "as available." We disclaim all warranties not stated in these Terms, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement.

We do not promise that the Service will be uninterrupted or error-free, that email reminders will always be delivered, or that the Service will meet every need a Firm has. Some states do not allow certain disclaimers, so parts of this section may not apply to you.

17. Limitation of liability

To the extent the law allows:

  • Neither party is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or goodwill, even if it was told such losses were possible.
  • Altiro's total liability for all claims relating to the Service or these Terms is limited to the fees the Firm paid Altiro in the 12 months before the event that gave rise to the claim, or $100 if the Firm paid nothing in that period.

These limits apply whatever the legal theory, whether contract, tort (including negligence) or anything else. They do not limit liability that cannot be limited by law, such as liability for fraud.

18. Indemnity

The Firm will defend Altiro and its owners, employees and contractors against third-party claims, and pay the resulting losses, costs and reasonable attorneys' fees, to the extent the claim arises from:

  • the Customer Data the Firm or its Clients put into the Service, including a claim that the Firm lacked the right or consent to collect or share it;
  • the Firm's relationship with or services to its Clients;
  • the Firm's breach of these Terms; or
  • the Firm's violation of law or professional rules.

We will tell the Firm promptly about any such claim, let the Firm control the defense, and cooperate reasonably at the Firm's expense. The Firm may not settle a claim in a way that admits fault by Altiro or imposes obligations on Altiro without our written consent.

19. Changes to these Terms

We may update these Terms from time to time. We will post the new version at portal.altiro.io/terms with a new effective date and version number.

For material changes, we will give at least 30 days' notice by email to the Firm's account owner or by a notice in the Service before the change takes effect. A Firm that does not agree can close its account before the effective date. Continuing to use the Service after that date means the Firm accepts the change.

We will not use a Terms update to start using Customer Data in materially new ways without that advance notice.

20. Governing law and venue

These Terms are governed by the laws of the State of Colorado, without regard to its conflict-of-laws rules.

Any dispute relating to these Terms or the Service will be brought only in the state courts located in Denver County, Colorado, or the federal court for the District of Colorado. Both parties agree to the personal jurisdiction of those courts. Either party may seek urgent relief, such as an injunction to stop misuse of the Service or data, in any court with jurisdiction.

Before filing a lawsuit, we each agree to try to resolve the dispute informally by contacting the other and talking in good faith for at least 30 days.

21. General terms

  • Entire agreement. These Terms, the Privacy Policy and any data processing agreement we sign with a Firm are the whole agreement about the Service. If they conflict on how we handle Customer Data, the data processing agreement controls.
  • Assignment. A Firm may not transfer these Terms without our written consent. We may transfer them as part of a merger, acquisition or sale of our business, and we will tell Firms if that happens.
  • Severability. If a court finds part of these Terms unenforceable, the rest stays in effect, and the unenforceable part will be applied as closely to its intent as the law allows.
  • No waiver. Not enforcing a provision right away does not mean we give up the right to enforce it later.
  • Events outside our control. Neither party is liable for delays caused by events beyond its reasonable control, such as natural disasters, widespread internet or hosting outages, or government action. This does not excuse payment obligations.
  • Notices. We may send notices to the email address on the Firm's account. Notices to us go to info@altiro.io or Altiro LLC, 2921 W 38th Ave #330, Denver, CO 80211.
  • Survival. Sections that by their nature should continue after termination, including Sections 7, 13, 15 through 18, 20 and 21, continue to apply.

22. Contact

Questions about these Terms can go to:

Altiro LLC
Altiro LLC, 2921 W 38th Ave #330, Denver, CO 80211
info@altiro.io