Privacy Policy
Last updated: October 2026
1. What we collect
We collect the information you give us to form your company — names, addresses, contact details, and entity details — plus basic account and payment information, and standard usage data (such as pages visited) to improve the Service.
2. How we use it
We use your information to prepare and file your formation documents, fetch your EIN, deliver your documents, provide support, process payments, and keep you informed about your order and compliance dates. We do not sell your personal information.
3. Who we share it with
We share information only as needed to deliver the Service — for example, with state agencies and the IRS to make filings, and with service providers such as our payment processor and registered-agent partner. They may use it only to perform those services.
4. Data security and retention
We use reasonable technical and organizational measures to protect your data, and we retain formation records as required to provide the Service and meet legal obligations.
5. Your choices
You may request access to, correction of, or deletion of your personal information, subject to records we are required to keep. Email us to make a request.
6. The order form and the FilingDesk MCP connector
This section explains what happens to the information you give us when you place a formation order on our website (filingdesk.com/start/) or through the FilingDesk MCP connector, which lets AI assistants such as Claude look up formation data and submit an order on your behalf (see filingdesk.com/mcp/).
- What an order contains: your business name, state, entity type, an optional short description of the business, and your full name, email address, and phone number. We add an order reference (FD-…), which channel the order came from (website or MCP), and, for website orders, the result of the automatic naming-rule check. An MCP order carries the same fields. The connector refuses to create an order unless your assistant calls submit_order indicating that you approved the order preview. Anything you tell your AI assistant is also handled by that assistant's provider under its own privacy policy; FilingDesk receives only what is sent to the connector's tools.
- Where it is stored: each order is submitted to Netlify Forms, our hosting provider's form service, which notifies FilingDesk by email and filters spam. We also save an order record in Netlify Blobs (storage on the same host), keyed by the order reference, with the order's status history and, if a payment is recorded against it, the payment's amount, date, and Stripe reference. On the website, your browser also keeps your order reference, business name, state, and email in session storage so the confirmation page can show them; that copy stays on your device and is cleared when the browser tab's session ends.
- Order status: anyone who has an order reference can open that order's status page. It shows only the business name, state, entity type, and status timeline, never your email, phone number, or description.
- Payments: nothing is charged when you submit an order. A specialist reviews it and then emails you a secure Stripe payment link. Stripe collects and processes your card details when you pay; FilingDesk never sees or stores your card number.
- Email: a FilingDesk specialist emails you about your order. If an email delivery provider is configured, we also use it to send automatic order and payment confirmations to you and a copy to FilingDesk, so it processes the order details those messages contain.
- Name checks and data lookups: the name check on our website and the MCP connector's lookup tools (fees, annual-report deadlines, cost comparisons, formation-option comparisons, the list of filing states, name checks, and order previews) do not save what you send them. Proposed names, states, and other inputs are used only to answer that request; they are not written to our order store and are not logged during normal operation. If a request fails, a technical error message may be written to our hosting provider's function logs. Only the MCP submit_order tool creates an order. MCP test orders whose business name starts with "TEST-REVIEW" are checked but never recorded.
- IP addresses: to prevent abuse, the name check and the MCP connector limit how many requests each IP address can make (for example, 3 MCP orders per hour). These counters exist only in the memory of the running server function. They are not written to storage and are discarded when that function instance shuts down. For website orders, Netlify Forms also records the IP address and browser information sent with the submission and uses them to filter spam. Netlify, as our host, also processes IP addresses to deliver the site.
- Purpose and sharing: we use order information only to review, price, and fulfil your order, to contact you about it, and to meet our legal obligations. We do not sell your personal information. The service providers that process it for us include Netlify (hosting, forms, and storage), Stripe (payments), our email and inbox providers, and our registered-agent partner. When we file for you, we send the required details to the state filing office and, for your EIN, to the IRS; if you choose bank setup, to the bank you pick.
- Keeping and deleting it: we keep order information for as long as we need it to fulfil your order and meet our legal obligations. You can ask us to delete it at any time by emailing hello@filingdesk.com with your order reference. We will delete everything we are not legally required to keep. Information filed with a state becomes part of that state's public record and cannot be removed by us. Stripe keeps its own payment records under its own privacy policy. Asking us to delete an order that is still in progress cancels it.
7. Contact
Questions about privacy? Email hello@filingdesk.com.
This policy is a starting template and will be finalized with counsel before public launch.