EntityEngine Privacy Policy

1. Information We Collect

We collect information that you provide directly to us and information we collect automatically when you use the Services.

A. Information You Provide

• Account registration details (name, email, password).
• Business information (entity name, incorporator details, registered agent info, addresses).
• Payment information (processed securely through third-party providers such as Stripe; we do not store full credit card numbers).
• Communications with us (support requests, feedback, surveys).

B. Information We Collect Automatically

• Usage data (log files, IP address, browser type, pages visited, timestamps).
• Device and technical data (operating system, device identifiers, cookies, analytics).

2. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Services.
• Facilitate state filings and document generation.
• Process payments and manage subscriptions.
• Communicate with you about your account, filings, and updates.
• Send you transactional and promotional communications (you may opt out of marketing).
• Monitor performance, security, and fraud prevention.
• Comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers – With trusted third parties that perform services on our behalf (e.g., Stripe for payments, hosting providers, analytics).
• State Agencies – To file business formation documents or other compliance filings you authorize.
• Legal Compliance – When required by law, regulation, subpoena, or legal process.
• Business Transfers – In the event of a merger, acquisition, or sale of assets.
• Consent – With your consent or at your direction.

4. AI Usage & Data Handling

EntityEngine uses artificial intelligence (AI) technologies to provide and improve its Services, including generating legal-ready documents, assisting with filings, and guiding users through entity formation.

• Private AI Use – Your data is only used within EntityEngine's secure systems. We do not use customer data to train public or third-party AI models.
• Service Improvement – We may use de-identified and aggregated data internally to enhance our AI workflows, improve accuracy, and develop new features.
• Confidentiality – Sensitive personal or business information is never shared with third parties for AI training purposes.
• User Control – You may request deletion of your data from our systems in accordance with Section 8 (Your Rights).

5. Data Retention

We retain your information as long as your account is active or as needed to provide the Services. We may also retain information to comply with legal obligations, resolve disputes, or enforce agreements.

6. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including encryption of sensitive data in transit and at rest. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences.
• Authenticate users.
• Measure performance and analytics.
• Deliver relevant content and advertising.

You may adjust your browser settings to block or delete cookies, but some Services may not function properly.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Accessing, updating, or deleting your information.
• Opting out of marketing communications.
• Requesting a copy of your data.
• Restricting or objecting to certain processing.

To exercise your rights, contact us at [Insert Email].

9. Data Processing Addendum (DPA)

For customers requiring additional data protection assurances under laws such as the GDPR, UK GDPR, or CCPA, EntityEngine offers a Data Processing Addendum (DPA).

• The DPA outlines our commitments as a Processor when handling personal data on behalf of Customers.
• It covers subprocessors, data security, international transfers, audit rights, and breach notifications.
• The DPA is available upon request and may be executed as part of your agreement with EntityEngine.

To request a copy of our DPA, please contact us at [Insert Email].

10. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will delete it.

11. International Users

If you access the Services from outside the United States, note that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" or by other means as required by law.

13. Contact Us

If you have questions about this Privacy Policy or would like a copy of our Data Processing Addendum, please contact us at:

EntityEngine, LLC
[Insert Address]
[Insert Email]