Unicorn by Unicorn Software Solutions, Inc.

Privacy Policy

Last updated October 21, 2026

Unicorn is practice-management software made by Unicorn Software Solutions, Inc. (“Unicorn Software Solutions”, “we”) for bookkeeping, payroll and tax firms. Firms use Unicorn to work with their own clients. This policy explains what information Unicorn holds, how it is used and how it is protected.

Who controls your information

If you are a client of a firm that uses Unicorn, that firm decides what information it collects about you and how it uses it. We process that information only on the firm's behalf, to provide Unicorn to the firm. Questions about your records should go to your firm first.

Information we hold

Account information: names, email addresses, phone numbers and sign-in security settings for firm staff and client contacts.
Information firms and their clients enter or upload: business and personal details, tax identification numbers, financial account numbers, payroll and tax information, documents and messages.
Security records: sign-in times, device and network information, and a log of security-related actions.

How information is used

Only to provide, secure and support Unicorn for the firm: storing records, sending the notices and requests a firm or user sets up, keeping accounts secure, and meeting legal obligations. Tax return information is used only to provide the service to the firm that entered it, as Internal Revenue Code section 7216 requires. We do not sell personal information, and we do not use it for advertising.

Text messages

Unicorn sends text messages only to people who chose to receive them, for example payroll information requests, document upload links and security codes. See the Text Message Terms for details. Reply STOP to any message to stop texts, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third parties, except the text-messaging provider that delivers the messages.

Who we share information with

Only service providers that help run Unicorn, under contracts that require them to protect it: cloud hosting and storage (Render, Amazon Web Services), email and text delivery (Amazon SES, Twilio), electronic signatures (BoldSign), and error and uptime monitoring (Sentry, Better Stack), which receive no client records. We also disclose information when the law requires it. We never give one firm access to another firm's information.

How information is protected

Every user signs in with two-factor authentication. Information is encrypted in transit and at rest, and the most sensitive details are encrypted again with a key that belongs to each firm. Each firm's information is kept separate from every other firm's. We follow a written information security program based on IRS Publication 5708 and the FTC Safeguards Rule, and tell affected firms promptly about any security incident involving their information.

How long information is kept

Each firm sets how long its records are kept, following its own legal and professional requirements. When a firm stops using Unicorn, its information is returned on request and then deleted, including from backups within 35 days.

Your choices

Change how you receive notices (email, text or both) in the Payroll area of your client portal, or ask your firm.
Reply STOP to any text message to stop texts.
To see, correct or delete information about you, contact your firm. We will help the firm respond.

Changes and contact

We will post any changes to this policy here with a new date. Questions about this policy or Unicorn's security: security@unicornsoftware.biz.