Legal
Privacy policy
Last updated: October 2026. This is a plain-language draft, pending review by a licensed attorney. Formation work requires identity documents — this policy says exactly what we do with them.
1. What we collect
- Contact and intake details: name, email, country of residence, business type, and state choice — from the quiz, checkout, and contact form.
- Identity documents: where a filing requires them (for example, a passport for the EIN workflow), we collect the document images you provide and nothing more.
- Business details: the company name, address, and filing information needed to prepare your paperwork.
- Payment details: processed by our payment provider at checkout — we never see or store your full card number.
- Mail and documents: business mail we receive, scan, and route to your portal on your behalf.
- Site usage: basic, non-identifying analytics about how the site is used (pages visited, device type) to keep it working.
2. Why we collect it
To do the job: prepare and track your filings, act as (or coordinate) your registered agent, scan and route your mail, host and care for your website, remind you of deadlines, bill you, and support you. We collect the minimum needed for each purpose, and identity documents are collected only when a filing requires them.
3. How we protect identity documents
- Encryption in transit: every page and API call runs over HTTPS.
- Least-privilege access: only the people who need your documents to do the work can see them.
- Single-use sign-in: portal sign-in links work once, expire after 15 minutes, and repeated requests are rate-limited.
- Deletion, not hoarding: documents are kept only as long as the work or the law requires, then deleted. We don't keep your passport "just in case."
- Partner safeguards: partners who touch your data (registered-agent partner, CPA, payment processor) receive only the data their part of the work requires — never our client list. Data-protection terms are a condition of any partner engagement that handles identity documents.
- Breach response: if we learn of a breach affecting your data, we will notify you and the authorities as the law requires.
4. Who we share data with
- Government agencies — the state and the IRS receive exactly what your filings require, with your confirmation before submission.
- Service partners — the payment processor, the wholesale registered-agent partner (all states), the partner CPA, and the bookkeeping referral partner — only the data their part of the work requires.
- Legal obligations — where we're required by law, subpoena, or court order.
We never sell your personal data. We never share it for someone else's marketing.
5. Voicemail transcription
The Hosted plan's US number transcribes voicemail. Pennsylvania law requires all parties' consent to record calls, so the number's greeting announces that voicemail may be transcribed before the caller speaks. Transcripts are stored as your business records and protected like your other data.
6. Your rights
- Access: ask what personal data we hold about you.
- Correction: ask us to fix what's wrong.
- Deletion: ask us to delete your data where the law and the work allow — some records (like filed state documents) can't be un-filed, and we'll say so plainly.
- Portability: ask for a copy of your data in a usable format.
To exercise any of these, contact us from the email on your account.
7. Cookies and tracking
We use only what's needed to run the site: session cookies for sign-in and basic analytics to keep pages working. No advertising trackers, no data brokers.
8. Changes
We'll update this policy as the attorney review completes or our practices change, and we'll date each version. Material changes will be communicated before they take effect.
Sethhost is not a law firm and does not provide legal or tax advice. Registered agent services are provided by our wholesale registered-agent partner, disclosed by name in your service agreement.