Prepared for owner approval — not yet effective. Verified website practices, owner-approved commitments and unresolved details are distinguished below. This text has not been reviewed by an attorney; it is not a determination of legal compliance.
Privacy Policy
Draft · November 2, 2026
About this policy
Ozturk Tax & Advisory LLC provides tax preparation, bookkeeping, and tax planning. Based in Marietta, Georgia. Serving clients throughout Metro Atlanta. This draft describes information collected through our website inquiry form; it does not cover tax documents shared under a separate client engagement.
Basic information we collect
The contact form collects your full name, email address, optional phone number, selected service, preferred language, contact consent, and submission date. We also record the website language. Please do not submit Social Security numbers, tax documents, financial account details, or other sensitive tax information.
Why we collect it
We use your information to respond to your inquiry and, with your consent, contact you by email or by phone if provided about our tax services and the upcoming tax season. Submitting the form does not commit you to services or establish a client relationship. The website currently sends an inquiry notification to the business owner, not a newsletter or automated marketing message to you. No email marketing platform or SMS marketing service is configured in the reviewed website.
Storage and service providers
Lovable manages this website's hosting and backend infrastructure. Inquiries are stored in Lovable Cloud. Visitors cannot browse saved inquiries through the website. After a successful save, basic inquiry details are sent through Lovable's email service to burhan@ozturktax.com, hosted in Google Workspace, for follow-up. These providers process information to operate the website, storage, and email delivery. We have not verified this project's hosting region or the providers' complete processing locations. No website or email system can guarantee absolute security; we do not claim a security certification.
Spam protection
The form sends a hidden spam-check field, elapsed time, and a randomly generated single-use token for validation. The database stores the token identifier and its issue and use times. Tokens expire for submission purposes after one hour; expiration does not automatically delete their records. Submission limits use saved inquiry email addresses and dates, not a custom IP-address counter. These checks reduce automated submissions but do not guarantee that all spam is blocked.
Browser storage and cookies
The site stores your selected English or Turkish language in your browser's local storage and uses session storage to remember page scroll positions. Unsubmitted form entries are held in the page's memory, not deliberately saved to browser storage by the form. No cookies were observed on the six public pages in the local check. Lovable documents that its native visitor analytics sets no cookies and stores nothing in visitors' browsers. This does not establish that all hosting or preview services are cookie-free. The hosted preview required Lovable sign-in and could not be inspected as a public site; published-site behavior has not yet been tested.
Fonts, diagnostics, and analytics
The site loads Fraunces and Manrope from Google Fonts. Your browser contacts Google to download them, exposing your IP address and ordinary browser request information to Google. No Google Analytics, advertising pixel, or separate visitor-analytics tool was found configured in the reviewed application. Lovable documents that native visitor analytics starts when a project is published unless disabled. It reports visits, page views, referral sources, countries and device types, and uses referring sites and tracking tags such as utm_source and utm_medium to classify traffic. Lovable states that it does not profile visitors or track them across separate visits, uses a random visit identifier discarded when the visit ends, and collects analytics through the app's own domain rather than an outside analytics service. This site is not yet published; its future analytics setting has not been verified. The documentation reviewed does not specify analytics-data retention. Discarding a visit identifier is not a promise that all analytics records are deleted at that time.
Operational and error logs
The website records save-failure notices and email-provider error messages. Its error-handling code can log error messages, stack details and causes; browser errors and page paths can be sent to Lovable when its reporting hooks are present. Lovable documents backend logs for requests, server output, database activity and errors. We do not deliberately write complete inquiry submissions to application logs, but error details can contain information supplied by a provider. The reviewed documentation does not establish exact retention periods for server, error or email-delivery logs. A log viewer's available date range is not a verified retention promise.
Database backups and other copies
Lovable documents one automatic database backup per day, with up to roughly 14 days of daily backups retained. These snapshots cover database structure and data, including saved inquiries and form-token records; they do not cover files in storage buckets or the related messages in Google Workspace. This is the documented service practice, not a verified inventory of this project's backups. Deleting a current database record does not rewrite an earlier snapshot, and we do not promise immediate removal from backups. No exact retention period has been verified for Google Workspace copies, email-service records or any separately downloaded exports.
Retention of non-client inquiries
Our approved business policy is to retain inquiries from people who do not become clients, and related notification emails under our control, for 12 months after the last contact, unless a legal obligation or dispute requires longer retention. This is a manual policy, not an automatic website deletion schedule or a statement of a legally required period. The owner must maintain a last-contact record and carry out periodic reviews. Separate tax-client records follow separate engagement and retention arrangements. Database backup retention is described above; no automatic cleanup of form-token records is implemented. Provider logs and email copies may follow different schedules whose exact durations have not been verified.
Correction, deletion, and contact choices
Email burhan@ozturktax.com to request a correction, deletion, or an end to follow-up contact. Preferably write from the address used for your inquiry; we may ask for limited information to verify your request, but do not send tax documents or a Social Security number. We will review your request within 30 days. We handle requests manually across the saved inquiry and related emails we control, stop follow-up when requested, and delete information unless retention is required. If we cannot delete certain records, we will explain the reason. This review period is not a promise that all copies are erased within that time; removal from provider backups may not be immediate.
Pending owner approval and verification
This policy is prepared for owner approval, not yet effective as a published policy. The owner has approved the 12-month non-client inquiry retention period and 30-day deletion-request review period, but must confirm that the manual process for tracking last contact, reviewing records and handling requests across inquiries and related emails is ready. The launch-time visitor analytics choice and this project's latest available database backup still require confirmation. Published-site cookies and requests must be checked after publication. Hosting and processing locations, exact provider log and analytics retention, Google Workspace retention settings, and any separately retained exports remain unverified; no exact periods or legal requirements are asserted for them. These facts need evidence, not approval alone. Tax-document sharing, additional analytics, email marketing or SMS services require a separate review and appropriate notices before use.
Separate client records and changes
Tax preparation and bookkeeping engagements involve separate terms and information-handling arrangements. This website policy is not a statement of legal compliance. We may revise it as our practices change; the review date appears above.