W-2 Extractor

Privacy Policy

Last updated: September 16, 2026

Who Operates This Service

W-2 Extractor is built and operated by Soxoa.

What We Collect

When you use W-2 Extractor, we collect:

  • Documents you upload for processing
  • Extracted fields, raw document text, file metadata, confidence signals, and processing logs for the retention period associated with your plan
  • Email address if you create an account
  • Payment information (processed by Stripe)
  • Basic usage analytics, including optional Google Analytics on selected public pages after consent

How We Use Your Data

We use your data to:

  • Process your documents and return extracted data
  • Manage your account and credits
  • Send important service updates
  • Improve our service

Document Security

The uploaded binary file is processed in memory and is not retained after the request. For signed-in users, the service stores the extracted fields, raw text, and related metadata so results can be reviewed and downloaded. Those records receive a plan-based expiration date and can also be deleted from the dashboard or with a full-access API key. Document contents are sent to the AI providers listed below solely to perform the requested extraction.

Third Parties

We use trusted third-party services:

  • Stripe for payment processing
  • Neon (PostgreSQL) for database hosting
  • Better Auth for authentication
  • Railway for document-processing API hosting
  • Vercel for hosting
  • Anthropic and Mistral via OpenRouter for AI processing

Optional Google Analytics

If you accept analytics, Google Analytics measures selected public page visits and navigation links using cookies that expire after 90 days. We do not send uploaded documents, extracted fields, form values, account identifiers, query strings, or private application URLs to Google Analytics. Automatic form, search, and download tracking and advertising personalization are disabled. Pages with query strings or fragments are excluded from this measurement.

You can decline or withdraw using Analytics choices on our public pages. Withdrawing stops further Google Analytics collection and removes its cookies. Essential authentication storage is separate. Browser Global Privacy Control and Do Not Track signals override an analytics acceptance.

Your Rights

You can request deletion of your account and data at any time by contacting us at john@soxoa.com.

Contact

Questions? Email us at john@soxoa.com