Prepare and file Form 1099-R (Distributions From Pensions, Annuities, Retirement Plans) with the IRS via IRIS. We don't keep recipient SSNs or amounts after filing (review drafts from your API tools are encrypted and deleted when you pay or after 7 days) — save your data locally as JSON to re-file.
Terms of Use · Privacy Notice
Draft pending legal review. Bracketed items will be completed before production filing opens.
Privacy Notice — 1099-R E-Filing Service
Version 2026-10-16 · Draft pending legal review
This notice explains how Omnia Inc ("we") collects, uses, shares, and protects information in the PensionResource 1099-R e-filing service. It is intended to meet the Gramm-Leach-Bliley Act privacy notice requirements for financial institutions and to describe our handling of tax return information.
What we collect
| Category | Examples | Why |
|---|
| Account information | Username, email, password (stored only as a hash), multi-factor settings, and when and from what IP address the account was created | Sign-in, security, and preventing fake accounts |
| Filer profile | Your name, company, role, phone, address | Identify who is filing; contact you about a filing |
| Payer information | Payer name, last 4 digits of the payer EIN, a one-way keyed fingerprint of the EIN, your relationship to the payer | Record your authority to file |
| Filing records | Tax year, number of forms, fee, status, IRS Transmission ID (UTID) and Receipt ID, IRS error codes, your state filing choice and the number of forms per state | Track and support your filings |
| Payment information | Handled by Stripe; we receive only a payment reference and status | Collect the fee |
| Technical and security records | IP address, browser type, time of sign-ins, terms acceptance, and actions such as payments and transmissions | Security, fraud prevention, and evidence of agreement |
| Recipient information on returns | Recipient names, TINs, addresses, distribution amounts | Processed only to validate and transmit your returns; not stored on our servers after transmission, except in an encrypted review draft (below) |
| Recipient email addresses (optional) | An email address you enter on a form so we can email that recipient a copy | Used only to send the copy you ask us to send; it passes through our email provider and is not stored on our servers (see Emailed copies below) |
| Review drafts | Forms that software you authorized (for example an AI assistant using your API key) prepared for you to review | Let you review, pay for, and file them; encrypted, and deleted when you pay or after 7 days |
| Support requests | What you write on the Help page, the filing you pick, your browser type, and any AI chat conversation you choose to attach. Numbers shaped like an SSN or EIN are masked to the last 4 digits | Answer your question; deleted 2 years after the request is closed |
| AI assistant usage | How many chat messages you sent each hour. We don't store the conversation | Limit use; deleted after 2 days |
How we use it
To provide and secure the Service, transmit your returns to the IRS, report acknowledgements, process payments, prevent fraud, meet legal obligations, and contact you about your account or filings. We use return information only to prepare and file the returns you submit.
Who we share it with
- The IRS, to file the returns you submit.
- State tax agencies, through the IRS. When you choose Automatic state filing (Combined Federal/State Filing), the IRS forwards each accepted form whose state participates in that program to the state's tax agency, unless you opt the form out. We don't send returns to states directly.
- Service providers that run parts of the Service for us under confidentiality obligations: Stripe (payments), our hosting provider, our email provider, and OpenAI (the AI assistant, below).
- As required by law, such as a subpoena, or to protect against fraud or security threats.
We do not sell personal information, share it for others' marketing, or share it with affiliates for marketing. Because we do not share information in ways that require an opt-out under federal law, there is no opt-out form.
How we protect it
Encrypted connections (HTTPS), multi-factor sign-in, access limited to your own filings, hashed passwords and keys, encrypted multi-factor secrets, an audit trail, and a written information security program. Recipient data is not kept after transmission.
Review drafts prepared by your software or AI assistant
If you give an API key with the "prepare drafts" permission to software or an AI assistant, it can send us forms it prepared for you. We keep them, encrypted, so you can review them: the assistant gets a one-time review link, and only you, signed in with multi-factor authentication, can open it. The draft can't be decrypted without that link, which we don't store. Nothing is filed until you review the forms, pay, and file them yourself. The encrypted draft is deleted from our servers when you pay for the filing, when the assistant deletes it, or after 7 days, whichever comes first. We record only that a draft was created, opened, or deleted, with its form count. The assistant's own handling of your data is governed by its provider's terms, not ours.
Emailed copies (optional)
After you file, you can ask us to email recipients a copy of their Form 1099-R, and to email yourself the payer copy. Each copy is a PDF built in memory when you click send, encrypted with AES-256, and handed to our email provider for delivery; we don't keep the PDF or the recipient's email address. A recipient's PDF opens with the last 4 digits of their taxpayer ID followed by their 5-digit ZIP code, and shows only the last 4 digits of their TIN. The email itself contains no TINs, amounts, account numbers, or addresses; replies go to you. For filings in the IRS test system, every email goes to your own address instead. Our security log records only the filing number, which form was sent, and whether it was sent, never the email address. Once delivered, the email is in the recipient's mailbox and is governed by their email provider.
The AI assistant
Signed-in users can ask the site's AI assistant questions. What you type, the last few messages of the conversation, and the name of the page you are on are sent to OpenAI to generate the answer; nothing from your filings or account is sent. Before sending, we mask numbers shaped like an SSN or EIN. Don't enter recipient names, tax IDs or amounts. We don't keep the conversation on our servers; it stays in your browser tab until you close it, unless you choose to attach it to a support request. OpenAI handles the messages under its API terms (it does not use API data to train its models by default and may keep it for up to 30 days for abuse monitoring). The assistant's answers are general information, not tax advice.
Forms saved in your browser (optional)
If you check Save my progress in this browser, the forms you are preparing are encrypted and kept in your web browser's local storage on your computer so they survive a refresh. They are never sent to or stored on our servers. The encryption key is issued to your signed-in account and is not stored with the forms, so the saved copy can't be opened from the browser alone or by another account on the same computer. Anyone who can use your computer while you are signed in could see them, so don't turn this on for a shared or public computer. Unchecking the box, or choosing Start new filing, removes the saved copy.
How long we keep it
Filing records without recipient data are kept for the life of your account and for IRS correction periods. Email addresses on filing records are removed after about 4 years, IRS error details after about 13 months, and IP addresses in security logs after about 4 years. Sign-up requests that are never confirmed are deleted after 7 days. Encrypted review drafts are deleted when you pay or after 7 days; their non-identifying record (form count, dates) 90 days after that. Support requests are deleted 2 years after they are closed. See our retention policy for details.
Your choices
You can view and update your filer profile at any time. To request a copy or deletion of your account information, contact support@pensionresource.website. We may keep records we are required to keep by law. Depending on your state, you may have additional rights; contact us to exercise them.
Children
The Service is for businesses and their representatives and is not directed to children.
Changes
We will post updated versions with a new date and notify account holders of material changes.
Contact
Omnia Inc, 2404 West 51st Avenue, Kennewick, WA 99337-5051 · support@pensionresource.website