Privacy Policy
Last updated: July 6, 2026
1. Data we collect
To form your business entity, we collect the information you enter into our 7-step wizard: business name, entity type, state of formation, registered agent details, owner and partner names, contact information, immigration status, tax IDs (SSN or ITIN), and financial estimates.
2. How we use it
Formation filings with the Secretary of State, EIN obtainment with the IRS, Operating Agreement generation, expert advisory, and communications about your application. We never sell your data to third parties.
3. How we protect it
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Sensitive fields (SSN, ITIN) are additionally encrypted with AES-256-GCM before they are written to our database, and are never sent back to the browser — staff access requires authentication and is audit-logged. Payment card data never touches our servers — Stripe handles it directly, PCI-DSS Level 1 certified.
4. Your rights (CCPA / GDPR)
You have the right to request access to, correction of, or deletion of your personal data. Email support@papercounsel.com. We’ll respond within 30 days.
5. Cookies
We use necessary cookies for authentication and session management. With your consent, we also use analytics cookies (Google Analytics 4, Hotjar) to improve the experience.
6. Third parties
We share data with: Stripe (payments), Supabase (hosting), Brevo (email), and state Secretaries of State (filings). Each has independent data protection commitments.
7. Contact
Questions about privacy? Email support@papercounsel.com.