Privacy Policy

Founders 8 is operated by Founders 8 LLC, a limited liability company formed in Wyoming, United States. Founders 8 LLC is the controller of the personal data described here, and is the entity you contract with.

Requests about your data go through our contact form, or by post to the address above.

• Account data — your name, email address and the answers you give during setup.
• Company data — entity details, EIN, registered-agent appointment, filing history and the documents that evidence them.
• Identity documents — passports, national IDs and supporting papers, where you upload them for a formation, bank application or residency matter.
• Financial data — the account and transaction detail needed for bookkeeping and filings, plus your subscription and payment status. Card numbers are entered directly with our payment processor and never reach our servers.
• Location and travel data — the countries and dates you record, used to compute day counts and residency positions.
• Technical data — IP address, device and browser information, and pages visited, used to keep the service secure and working.
• Analytics and session recordings — pages visited, and page interactions captured by our analytics providers, with the text you type into form fields masked in the browser before anything is sent. Not collected once you turn analytics off.

We collect this from you directly, except technical data and session recordings, which are generated as you use the site, and status updates returned to us by a partner or an authority working on your matter.

Where the UK GDPR or EU GDPR applies to you, these are the bases we rely on:

We do not sell your personal data, we do not share it for cross-context behavioural advertising, and we do not use it to train models.

Only where it is needed to do the work, and only the part that is needed:

• Qualified partners — formation agents, registered agents, CPAs, bookkeepers and immigration counsel, limited to the matter you engaged them for.
• Government authorities — where a filing requires it, or where we are legally compelled.
• Service providers — hosting, payment processing, document storage, email delivery and analytics, under contract and only to run the service.

Partners see what a specific service requires and no more. They do not receive your wider document vault. The service providers we use are named in the subprocessor list.

If the business is ever sold or merged, your data moves with it. We will tell you before that happens, and the buyer is bound by this policy until it gives you notice of its own.

Data is stored on servers in the United States and the European Union. Where personal data moves out of the UK or EEA, we rely on the UK and EU standard contractual clauses, together with the UK International Data Transfer Addendum. Documents are encrypted in transit and at rest, and access to them is logged.

Account and company records are kept for as long as your account is open, and for seven years afterwards where they relate to a filing — tax and corporate record-keeping periods are long, and deleting early would leave you unable to answer a query about your own return. Identity documents are deleted on request once the matter they were uploaded for has closed, unless a partner or a law requires them to be retained. Session recordings and analytics data are kept for 13 months. Backups roll off within 90 days of the record being deleted from the live system.

Depending on where you live, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to a particular use, ask us to restrict a use, withdraw a consent you gave, or ask us to send it to another provider. Ask us and we will do it: we respond within 30 days, we will not charge you for it, and we will not treat you differently for asking.

Withdrawing consent does not undo what was done while it was in force. Some requests we cannot fully meet — we will not delete a filing record the IRS can still ask you about — and where that happens we will say which records we kept and why.

If you are in the UK or EEA and are unhappy with our response, you have the right to complain to your national data protection authority. In the UK that is the Information Commissioner’s Office.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what we collect and why, to get a copy, to correct it, to delete it, and to limit the use of sensitive personal information. The categories we collect are set out in section 2; identity documents and government identifiers are sensitive personal information, and we use them only to provide the service and to meet a legal obligation — never to infer characteristics about you.

In the twelve months before the date on this page we did not sell personal information and did not share it for cross-context behavioural advertising, and we do not do either now. We do not knowingly collect personal information from anyone under 16. You may use an authorised agent, and we may ask you to verify that authority. Exercising any of these rights will not get you a worse price or a worse service.

We use a session cookie to keep you signed in. Analytics runs unless you turn it off — once you do, the script is never loaded. We do not run advertising trackers and we do not share browsing data with ad networks. What is set, and how to change your answer, is in the Cookie Policy.

Documents are encrypted in transit and at rest, the document store has no public URL, session cookies are signed and HTTP-only, and access to customer records is limited to staff who need it for a matter in front of them. No system is perfect. If a breach affects your personal data and is likely to put you at risk, we will tell you and the relevant authority within the time the law allows — 72 hours to a supervisory authority under the GDPR.

Founders 8 is for adults running a business. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.

We do not make decisions about you by automated means that produce legal effects. The plan we recommend at checkout is a suggestion computed from your own answers, and you can pick a different one.

We may update this policy. If a change materially affects how we use data you have already given us, we will tell you by email before it takes effect. The date at the top is the date of the current version.

Privacy questions, access requests and complaints go through our contact form, or by post to Founders 8 LLC at the address in section 1.