Legal
How Dovetail handles privacy, data, communications, and use of the Services.
Last updated: August 5, 2026
This Privacy Policy explains how Dovetail Mgmt, LLC (“Dovetail,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our website located at Dovetailmgmt.co, our platform, including any platform currently known as DovetailOne, our portals, dashboards, onboarding tools, support resources, communications, and related services that link to or reference this Privacy Policy (collectively, the “Services”).
This Privacy Policy applies both before and after a firm signs up for Dovetail, including when individuals visit our website, request information, schedule a demo, communicate with us, participate in onboarding, access or use DovetailOne or any other Dovetail platform, use our portals, dashboards, onboarding tools, support resources, billing or payment-related features, or otherwise interact with our Services. Certain paid services, onboarding services, payment arrangements, platform access, technology provisioning, management services, ACH debit arrangements, revenue-share arrangements, and other member-firm services may also be governed by a separate written agreement with Dovetail, including a master services agreement, engagement order, ACH authorization, order form, statement of work, or similar agreement. If there is a conflict between this Privacy Policy and a separate written agreement, the separate written agreement will control with respect to the subject matter of that agreement.
Dovetail provides operating infrastructure, technology, administrative support, billing support, back-office systems, onboarding support, platform access, and related non-professional management services for independent professional firms. Dovetail is not a public accounting firm and does not provide accounting, audit, attest, assurance, tax, legal, investment, or other regulated professional services. Member firms remain responsible for their own professional services, client relationships, client communications, privacy notices, client consents, professional obligations, and compliance with laws and professional rules applicable to their practices.
This policy does not apply to third-party websites, products, or services that we do not own or control, or to information that our business customers control and process on their own behalf.
Scope of this Privacy Policy
This Privacy Policy applies to information we collect before, during, and after a firm signs up for Dovetail, including when you visit our website, request information, schedule a demo, sign up for updates, communicate with us, create or access an account, use DovetailOne or another Dovetail platform, participate in onboarding, connect systems or accounts, receive support, use billing or payment-related features, or otherwise interact with the Services.
In some circumstances, Dovetail processes information in connection with a member firm’s signup, onboarding, platform access, technology provisioning, billing, payment processing, revenue-share calculation, account administration, support, and ongoing use of the Services. For example, a member firm may provide or permit us to access information relating to that firm, its owners, personnel, systems, accounts, revenues, Firm Clients, billing activity, payment activity, connected software, or technology environment. In those cases, the member firm remains responsible for its professional services, client relationships, client notices, client consents, privacy obligations, professional obligations, and compliance obligations, and Dovetail processes information as described in the applicable agreement and this Privacy Policy.
This Privacy Policy does not apply to websites, products, services, applications, platforms, or integrations that are owned or operated by third parties, even if they are linked from or integrated with the Services. Third-party services are governed by their own terms and privacy policies.
For purposes of this Privacy Policy, “member firm” means a firm, company, professional practice, or other customer that signs up for or uses Dovetail’s paid services, platform, onboarding, technology, management, billing, support, or related services, and “Firm Clients” means the clients, customers, or end users of a member firm.
Information We Collect
We may collect information that you provide directly to us, including your name, email address, phone number, mailing address, business address, firm or company name, job title, role, professional license information, states of practice, firm size, firm revenue ranges, business needs, demo requests, support requests, communications, preferences, and any other information you choose to provide through forms, emails, calls, onboarding workflows, or other communications.
If you or your firm uses our onboarding or platform services, we may collect business and operational information about the firm, including legal entity name, EIN or tax identification information where needed for onboarding, registered address, authorized signatories, principal information, staff user information, domain and email information, brand assets, system access information, billing configuration, software stack information, revenue reporting, operational metrics, support history, onboarding status, device provisioning information, and information needed to configure or support DovetailOne or related systems.
We may collect payment, billing, and financial information needed to administer fees and payment mechanics, including billing contacts, bank account verification information, ACH authorization information, payment processor identifiers, invoice and payment history, revenue-share calculations, account connection status, failed-payment information, refunds, security deposit information, and related reconciliation data. We generally use third-party payment processors, banks, Plaid or similar connection tools, Stripe or similar payment infrastructure, accounting platforms, or other providers to process, verify, or support these functions.
We may process information relating to customers or clients of member firms when necessary to provide the Services. This may include names, contact information, billing information, invoice and payment information, engagement-related information, financial or tax information, and other information a member firm provides to us or authorizes us to access. We refer to this information in this Privacy Policy as “Firm Client Information.” Dovetail does not use Firm Client Information to provide professional accounting, tax, audit, attest, legal, investment, or regulated professional services.
We may collect information automatically when you use the Services, including IP address, device identifiers, browser type, operating system, referring pages, pages viewed, links clicked, session activity, date and time of access, approximate location derived from IP address, log files, cookie identifiers, diagnostic data, authentication logs, account activity, feature usage, and other technical or usage information.
We may receive information from third parties, including payment processors, analytics providers, advertising and marketing providers, customer relationship management tools, cloud hosting providers, financial data connection providers, accounting software, tax or practice-management platforms, identity and device-management providers, referral sources, professional contacts, publicly available sources, and other business partners.
Sensitive, Financial, Tax, and Professional Information
Because Dovetail serves accounting, CPA, tax, advisory, and other professional firms, the Services may involve information that is sensitive in a business or professional context. This may include financial account information, tax-related information, business revenue information, professional license information, client billing information, and Firm Client Information. We use such information only as reasonably necessary to provide, support, secure, administer, and improve the Services; comply with applicable law; enforce agreements; and protect Dovetail, member firms, Firm Clients, and others.
To the extent we receive or process “tax return information” within the meaning of Section 7216 of the Internal Revenue Code, we intend to use and disclose such information only as permitted by applicable law, applicable consents, and the relevant agreement with the member firm. Member firms are responsible for obtaining any taxpayer consents, client consents, engagement permissions, or notices required for Dovetail to access or process information in connection with the Services.
We do not intentionally collect consumer health information, precise geolocation information, biometric information, government-issued identification numbers, or other highly sensitive personal information through our public website unless you voluntarily provide it or it is required for a specific onboarding, verification, compliance, support, or contractual purpose.
Cookies and Similar Technologies
We and our service providers may use cookies, pixels, tags, scripts, local storage, SDKs, log files, and similar technologies to operate the Services, remember preferences, authenticate users, measure site performance, understand usage, improve functionality, secure accounts, detect fraud or misuse, and evaluate marketing performance. You may be able to control cookies through your browser settings or device settings. If you disable cookies or similar technologies, some features of the Services may not function properly. Where required by law, we will provide additional notice or choices regarding cookies and similar technologies.
How We Use Information
We use information to provide, operate, maintain, administer, secure, and improve the Services, including to respond to inquiries, schedule demos, process onboarding, configure accounts, provision users, manage access, provide support, operate DovetailOne, administer payment and revenue-share mechanics, calculate fees, generate reports, reconcile transactions, troubleshoot issues, and communicate with users and member firms.
We use information to manage our business relationship with current and prospective customers, member firms, vendors, referral sources, and business partners. This includes evaluating fit for the Services, preparing proposals, sending service communications, providing updates, managing contracts, processing payments, collecting amounts owed, enforcing agreements, and maintaining business records.
We use information to protect the security, integrity, availability, and proper operation of the Services. This includes authenticating users, monitoring account activity, detecting and preventing fraud, misuse, unauthorized access, security incidents, payment failures, and violations of our terms or agreements. We may use information to improve our platform, workflows, support processes, analytics, reporting, benchmarking, products, services, marketing, and business operations. When practical, we use aggregated or de-identified information for analytics, benchmarking, and service improvement.
We may use contact information to send transactional, administrative, legal, billing, support, security, onboarding, and service-related communications. We may also send marketing communications, newsletters, event invitations, product updates, and other promotional messages where permitted by law. You may opt out of marketing communications, but we may continue to send non-marketing communications related to the Services, your account, billing, security, or legal matters.
We may use information to comply with legal obligations, respond to lawful requests, enforce our rights, resolve disputes, perform audits, maintain compliance records, and protect the rights, property, and safety of Dovetail, users, customers, member firms, Firm Clients, and others.
How We Disclose Information
We may disclose information to service providers, vendors, contractors, consultants, and professional advisors who perform services for us or on our behalf, including hosting, cloud infrastructure, analytics, customer support, payment processing, ACH and banking support, Plaid or similar financial connection tools, Stripe or similar payment tools, accounting software, email delivery, CRM, cybersecurity, identity management, device management, legal, accounting, insurance, and other operational support services. These recipients are permitted to use information only as reasonably necessary to provide services to us, subject to applicable contractual and legal obligations.
We may disclose information to third-party platforms, integrations, and tools that you or your firm choose to connect to, authorize, or use in connection with the Services. This may include accounting software, tax or practice-management software, payment processors, banks, financial data aggregators, payroll or HR tools, password management tools, identity providers, communication platforms, device-management tools, and other systems used to deliver the Services.
We may disclose information within Dovetail and to our affiliates, managers, members, officers, employees, contractors, representatives, and agents as reasonably necessary for the purposes described in this Privacy Policy and any applicable agreement.
We may disclose information when required or permitted by law, legal process, subpoena, court order, governmental request, regulatory inquiry, or professional obligation, or when we believe disclosure is reasonably necessary to protect rights, safety, security, property, prevent fraud, enforce agreements, collect amounts owed, investigate misuse, or defend against claims.
We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, diligence process, corporate transaction, or similar business transaction involving Dovetail or its assets.
We may disclose aggregated, anonymized, or de-identified information that does not reasonably identify you, your firm, or Firm Clients. We may use such information for analytics, benchmarking, reporting, service improvement, research, marketing, and other business purposes.
We do not sell personal information in the ordinary sense of exchanging it for money. We also do not knowingly sell or share personal information of children under 16. Some privacy laws define “sale” or “sharing” broadly to include certain advertising or analytics activities; where applicable, we will provide required rights or opt-out mechanisms.
Firm Client Information and Business Customer Data
Dovetail’s customers and member firms may provide or authorize access to Firm Client Information. In those circumstances, the member firm is responsible for determining the lawful basis for collection, use, disclosure, and processing of such information, including providing any required notices and obtaining any required consents from Firm Clients.
Dovetail processes Firm Client Information to provide the Services, administer payment and billing support, support onboarding and platform functions, provide operational and technical support, comply with applicable law, secure the Services, and perform obligations under applicable agreements. Dovetail does not claim ownership of Firm Client Information and does not use Firm Client Information for unrelated marketing to Firm Clients.
If you are a Firm Client of one of our member firms and have questions about your information, you should contact the member firm directly. We may not be able to respond directly to requests relating to Firm Client Information unless authorized by the relevant member firm or required by law.
Data Access, Plaid, ACH, Payment, and Account Connections
The Services may involve connections to bank accounts, payment processors, accounting software, tax software, practice-management tools, or other systems. These connections may be used to verify accounts, support ACH authorization, read revenue or transaction data, calculate fees, reconcile payments, operate dashboards, provide reporting, or support onboarding and ongoing operations.
When you connect an account through Plaid or a similar provider, Stripe or a similar payment processor, QBO or another accounting platform, TaxDome or another practice-management platform, or any other third-party service, your information may be collected and processed by that third party under its own terms and privacy policy. Dovetail is not responsible for the privacy or security practices of third-party services.
You should not provide or connect any account, data source, or system unless you have authority to do so and your use is consistent with applicable law, professional obligations, client obligations, and any agreement governing that account or system.
Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect information within our control against unauthorized access, use, disclosure, alteration, or destruction. These safeguards may include access controls, authentication, logging, encryption where appropriate, vendor review, device-management practices, password-management practices, security policies, and other measures appropriate to the nature of the information and the Services.
No method of transmission, storage, processing, or security is completely secure. We cannot guarantee absolute security, and you are responsible for using appropriate safeguards when accessing the Services, including protecting credentials, limiting user access, securing devices, and promptly notifying us of suspected unauthorized access or security incidents.
Data Retention
We retain information for as long as reasonably necessary to provide the Services, operate our business, maintain records, comply with legal, tax, accounting, contractual, and professional obligations, resolve disputes, enforce agreements, collect amounts owed, maintain security, and protect our rights and interests.
Retention periods may vary depending on the type of information, the purpose for which it is processed, legal requirements, contractual obligations, backup cycles, security needs, and operational requirements. When information is no longer needed, we take reasonable steps to delete, de-identify, aggregate, or securely retain it in accordance with our practices and applicable law.
Your Choices and Rights
You may choose not to provide certain information, but doing so may limit your ability to use the Services or may prevent us from providing requested services. You may also ask us to update or correct certain information by contacting us.
You may opt out of marketing emails by using the unsubscribe link in the applicable email or by contacting us. Even after opting out, you may continue to receive transactional, administrative, support, billing, security, legal, and service-related messages. Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, portability of, or restriction of certain personal information. You may also have rights to object to certain processing or opt out of certain sales, sharing, targeted advertising, or profiling. We will respond to verified requests as required by applicable law.
We may need to verify your identity and authority before responding to a privacy request. If you submit a request on behalf of another person or entity, we may require proof that you are authorized to act on their behalf. We will not discriminate against you for exercising privacy rights protected by applicable law.
U.S. State Privacy Disclosures
Certain U.S. state privacy laws may require additional disclosures. The categories of personal information we may collect include identifiers, business contact information, internet or electronic network activity information, commercial information, professional or employment-related information, financial and payment-related information, account access information, and inferences drawn from such information. We collect these categories from you, your firm, your authorized users, member firms, Firm Clients where provided by a member firm, service providers, business partners, third-party integrations, and automatically through the Services.
We use and disclose these categories for the business and commercial purposes described in this Privacy Policy, including providing and improving the Services, onboarding customers, processing payments, supporting platform access, securing the Services, communicating with users, marketing, compliance, and enforcement. We may disclose these categories to service providers, affiliates, professional advisors, third-party integrations, payment processors, cloud and software providers, and other parties described in this Privacy Policy.
We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law, unless we provide the required notice and choice. We do not knowingly sell or share personal information of individuals under 16 years of age.
International Users
Dovetail is based in the United States, and the Services are intended for use by individuals and businesses located in the United States. We do not intentionally market or direct the Services to individuals located outside the United States. If you access or use the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where our business and service providers are located. By accessing or using the Services from outside the United States, you acknowledge that the laws of the United States may differ from the laws of your location. If you are located outside the United States, you are responsible for determining whether your access to and use of the Services complies with local law.
Dovetail Mgmt, LLC. | Marketing@dovetailone.com
This document is a general template provided for convenience and does not constitute legal advice. Please have it reviewed by qualified legal counsel before publishing.
Children’s Privacy
The Services are intended for business professionals and are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so that we may take appropriate action.
Third-Party Links and Services
The Services may include links to or integrations with third-party websites, products, services, applications, platforms, or tools. We do not control those third parties and are not responsible for their privacy practices, security practices, content, terms, or policies. You should review the privacy policies and terms of any third-party service before using it or providing information to it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we update it, we will revise the “Last Updated” date above. If changes are material, we may provide additional notice as required by law or as we deem appropriate. Your continued use of the Services after an updated Privacy Policy is posted means that you acknowledge the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, you may contact us via email at Marketing@dovetailone.com.