Osonwanne Group LLC (“we,” “us,” “our”) operates state sales-tax compliance products, including CactusComply (Arizona), along with related websites and services, and develops and maintains software systems for government agencies and other clients (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.
Last updated: September 30, 2026.
1. Information We Collect
- Account information — name, email, phone, and login credentials (managed by our authentication provider).
- Business and tax information — legal business name, DBA, federal EIN, state taxpayer/permit numbers (e.g., Arizona TPT license), NAICS codes, locations/outlets, jurisdictions, gross and taxable sales, exempt sales, and filed returns and acknowledgments.
- Payment information — processed by our payment processor (Stripe). We do not store full card numbers; we receive limited billing details (e.g., card brand, last four, expiration, billing address) and subscription status.
- Job-site and customer information (contractors) — for businesses that file as contractors: job-site addresses, job names, and the names of the business’s own customers from its jobs, invoices, and accounting exports. We process this as the business’s service provider, only to provide the Services, and never to contact those customers.
- Usage and device data — log data, IP address, browser/device information, and product usage, collected to operate and improve the Services.
2. How We Use Information
- Provide, operate, and improve the Services, including calculating and preparing sales/use tax returns and transmitting filings on your behalf.
- Process subscriptions, add-ons, and payments, and prevent and recover failed payments.
- Provide customer support and send service, security, and transactional communications.
- Maintain security, prevent fraud and abuse, and comply with legal obligations.
3. How We Share Information
We do not sell your personal information. We share it only as needed to provide the Services:
- State tax authorities — to file returns and remit as authorized by you (e.g., the Arizona Department of Revenue).
- Service providers (subprocessors) — payment processing, authentication, hosting/database, and email delivery vendors that process data on our behalf under contract.
- Public address and records lookups — to find an address’s tax jurisdiction we send it to the U.S. Census Bureau Geocoder (OpenStreetMap Nominatim only when Census cannot find it) and ask the state tax authority about the map point only; county assessors’ public parcel services are queried by job-site address. These are public services with their own privacy practices, not our contracted subprocessors.
- Legal and safety — when required by law, subpoena, or to protect rights, safety, and the integrity of the Services.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
4. Data Security
We use industry-standard safeguards, including encryption in transit, access controls, and least-privilege practices. Payment data is handled by a PCI-DSS-compliant processor. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain information for as long as your account is active and as needed to provide the Services, and thereafter as required to comply with legal, tax, accounting, and audit obligations (tax filing records are retained per applicable statutory periods). CactusComply-specific retention periods (contractor job records, cached county parcel records, and the free contractor tax check) are set out in the CactusComply Privacy Policy at cactuscomply.com/privacy.
6. Your Choices and Rights
You may access, update, or request deletion of your account information, and opt out of non-essential communications, by contacting us. Depending on your jurisdiction, you may have additional rights regarding your personal information; we will honor these as required by applicable law.
7. Client and Government Data (Confidential Data)
When we develop, operate, or maintain systems for a government agency or other client, the data in those systems (“Client Data”) belongs to the client. This includes Confidential Data as defined in the client’s contract, such as State of Ohio Contract Data and Confidential Data under the State’s Data Security and Privacy Terms. We access Client Data only as the client authorizes, use it only to perform the contract, do not sell, rent, lease, or disclose it except as the contract or law permits, and keep it in the client’s own environment where the contract requires. We do not enter Client Data into generative artificial intelligence tools or use it to train AI models.
Requests to access, correct, or delete Confidential Data. Because the client controls its data, individuals should normally direct requests to the agency or organization that holds their information. If we receive a request directly, or a client asks us to act on one, we will:
- Record the request and acknowledge it to the requester within five (5) business days;
- Forward it to the client’s designated contact within two (2) business days of receipt, or sooner if the client’s contract requires;
- Act only at the client’s written direction, which may include providing access to, correcting, or deleting the data in the systems we support, subject to legal and records-retention requirements; and
- Confirm completion to the client and keep a record of the request and action taken.
Clients and individuals may send requests to Bon@Osonwanne.com with the subject line “Data Request,” or by phone at the number below.
Return and destruction. At the end of a contract, or when the client requests it, we return Client Data in the format the client designates and securely destroy copies in our possession, except copies we must keep to meet legal, contractual, or record-keeping obligations, which remain protected under the contract for as long as we hold them.
Where a client contract sets stricter requirements, the contract governs.
8. Cookies
Our websites use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings; some features may not function without them.
9. Children’s Privacy
The Services are for businesses and are not directed to children under 13, and we do not knowingly collect their information.
10. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with a revised “Last updated” date.
11. Contact Us
Osonwanne Group LLC
Peoria, AZ 85382, USA
Email: Bon@Osonwanne.com · Phone: (602) 632-9589