Privacy Policy
Last updated: August 11, 2026
This Privacy Policy describes how ClearFormation ("ClearFormation," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit clearformation.com (the "Site"), create an account, purchase services, or otherwise interact with our business formation and compliance platform (collectively, the "Services").
By creating an account, checking the consent box at signup, linking a bank account, purchasing a service, or otherwise using the Services, you consent to the collection, processing, storage, and sharing of your personal information as described in this Privacy Policy. If you do not agree, please do not use the Services.
1. Scope
This policy applies to information we process in connection with ClearFormation's Services, including:
- Formation of LLCs and corporations in U.S. states;
- Registered agent services and related mail handling;
- Federal Employer Identification Number (EIN) application assistance;
- Annual and biennial report filing support;
- Foreign qualification filings;
- Certificates of good standing and related state document requests;
- Accounting and bookkeeping features, including bank account linking through our financial data partner (Plaid) and import of account and transaction data; and
- Customer accounts, dashboards, document portals, and support communications.
ClearFormation is not a law firm and does not provide legal advice. Information you provide may be submitted to government agencies and, in many cases, becomes part of the public record.
2. Information We Collect
2.1 Information you provide directly
Depending on the Services you request, we may collect:
- Account information: name, email address, password (stored in hashed form by our authentication provider), and profile details from sign-in methods you choose (such as Google OAuth).
- Business and formation information: proposed or legal entity name, entity type (e.g., LLC or corporation), state of formation, business and mailing addresses, management structure, officer or member names and titles, responsible party information, and related formation choices.
- Compliance and filing information: states where you operate, filing history, deadlines, approval confirmations, and information needed to prepare annual reports, registered agent changes, foreign qualifications, good standing certificates, and similar filings.
- Tax identification information: information required to prepare IRS EIN applications, which may include responsible party name, address, and identifying numbers where applicable.
- Payment-related information: billing details necessary to process transactions. Payment card data is collected and processed by our payment processor (Stripe); we do not store full payment card numbers on our servers.
- Financial account and transaction information: when you choose to link a bank or financial institution through Plaid, we receive account identifiers, balances, account holder and institution metadata, and transaction history needed to provide accounting features. Bank login credentials are entered in Plaid's interface and are not stored by ClearFormation.
- Communications: messages you send through support channels, scheduling tools, email, or forms on the Site, including call requests and service inquiries.
- Documents: files you upload, documents we receive on your behalf as registered agent, and formation or compliance documents generated or retrieved in connection with your orders.
2.2 Information collected automatically
When you use the Site, we may automatically collect:
- Device and browser type, operating system, and general location derived from IP address;
- Log data such as pages viewed, referring URLs, timestamps, and error reports;
- Session and authentication tokens necessary to keep you signed in; and
- Essential cookies or similar technologies used for security, session management, and basic Site functionality.
We do not currently use the Site to deliver third-party advertising cookies. If that changes, we will update this policy.
3. Consent for Collection, Processing, and Storage
We obtain your consent to collect, process, and store personal information through one or more of the following, depending on how you use the Services:
- An affirmative checkbox at account registration agreeing to our Terms of Service and this Privacy Policy, and authorizing collection, processing, and storage of your data as described here;
- Your voluntary provision of information when placing orders, uploading documents, or using account features;
- Your affirmative action to connect a financial institution via Plaid Link, which authorizes retrieval and storage of account and transaction data for the company you select; and
- Continued use of the Services after we post material updates to this Privacy Policy (we will show a revised "Last updated" date).
Where processing is based on consent, you may withdraw consent by disconnecting bank links in your dashboard, closing your account, or emailing support@clearformation.com. Withdrawal does not affect processing already performed, or processing we must continue under contract, legal obligation, or another lawful basis.
4. How We Use Information
We use personal information to:
- Provide, operate, and improve the Services;
- Prepare, facilitate, and submit filings you authorize with state agencies and, where applicable, the IRS;
- Provide registered agent services, scan and deliver legal and state correspondence, and maintain your document portal;
- Track compliance deadlines and send reminders (including alerts at 90, 60, and 30 days before due dates, where offered);
- Process payments, fulfill orders, and manage renewals or subscriptions;
- Provide accounting features, including synchronizing accounts and transactions, categorization, balances, and related reporting;
- Authenticate users and secure accounts;
- Respond to inquiries and provide customer support;
- Send service-related notices, filing updates, and administrative messages;
- Detect, prevent, and address fraud, abuse, or security issues; and
- Comply with legal obligations and enforce our Terms of Service.
5. Legal Bases for Processing (EEA/UK Users)
If you are located in the European Economic Area or United Kingdom, we process personal data only where we have a lawful basis, including: performance of a contract; legitimate interests (such as operating and securing the Services); compliance with legal obligations; and, where required, your consent.
6. How We Share Information
We may share personal information with:
- Service providers that help us operate the Services, including hosting and database providers (e.g., Supabase), payment processors (Stripe), financial data providers (Plaid), identity and authentication providers, filing and document workflow partners, email delivery vendors, and scheduling tools used for consultations.
- Government agencies when you direct us to file documents or when disclosure is required to complete a service you purchased (e.g., secretary of state offices, IRS).
- Professional advisors such as accountants, insurers, or counsel, where reasonably necessary to protect our rights or comply with law.
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
- Law enforcement or regulators when required by law, subpoena, court order, or to protect the rights, safety, and security of ClearFormation, our users, or others.
We do not sell your personal information for money.
7. Public Records and Registered Agent Services
Information submitted in connection with business formation, foreign qualification, annual reports, and similar filings is often filed with state agencies and may become publicly available. If you use our registered agent service, legal and governmental mail sent to our address may be opened, scanned, and made available to you through your account. You are responsible for reviewing time-sensitive notices promptly.
8. Data Retention and Deletion Policy
We maintain a defined data retention and deletion policy intended to comply with applicable U.S. privacy laws (including the CCPA/CPRA where applicable) and other legal or accounting recordkeeping requirements. We retain personal information only as long as reasonably necessary for the purposes described in this policy, then delete or de-identify it, subject to the exceptions below.
8.1 Retention periods
Unless a longer period is required by law or needed for an active dispute, we apply these default periods:
- Account profile and authentication data: for the life of the account, then up to 90 days after account closure or a verified deletion request (to complete teardown and prevent abuse).
- Order, filing, and formation records (including documents submitted to or received from state agencies or the IRS, and registered-agent correspondence we store for you): generally 7 years from the later of fulfillment or last account activity, reflecting common business and tax recordkeeping needs. Public filings may remain available indefinitely through government agencies.
- Payment and billing records: generally 7 years from the transaction date for tax, audit, and fraud-prevention purposes (card numbers remain with Stripe).
- Bank connection and transaction data obtained via Plaid: while your accounting subscription or connection remains active. After you disconnect a bank or cancel the related service, we delete or de-identify that connection's account and transaction records within 90 days, unless you ask us to delete sooner or we must retain a subset for legal, fraud, or accounting purposes.
- Support communications: generally 3 years from the last message in the thread.
- Security and application logs: generally 90 days, or longer if needed to investigate security incidents.
8.2 How deletion works
- You may disconnect a linked bank in your dashboard; we revoke the Plaid Item where applicable and remove stored connection and transaction data according to Section 8.1.
- You may request access, correction, or deletion of personal information by emailing support@clearformation.com. We verify identity before acting and aim to respond within the timeframes required by applicable law (for example, 45 days under the CCPA, subject to permitted extensions).
- We may decline or limit deletion where we must retain information to complete a transaction you requested, detect security incidents, comply with legal obligations, exercise or defend legal claims, or for other exceptions permitted by law.
- Backups may persist for a limited period after deletion until overwritten in the ordinary course of backup rotation.
8.3 Policy review
We review this data retention and deletion policy at least annually, and sooner when we launch material new products, change processors, or applicable privacy laws change. The "Last updated" date at the top of this page reflects the most recent revision of this Privacy Policy, including this Section 8.
9. Security
We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Your Choices and Rights
Depending on your location, you may have the right to:
- Access, correct, or delete certain personal information;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based; and
- Receive a portable copy of information you provided.
You may update account settings through your dashboard where available, or contact us at support@clearformation.com. We may need to verify your identity before responding. Some requests may be limited where we must retain data for legal, filing, or accounting purposes.
11. California Privacy Notice
California residents may have additional rights under the California Consumer Privacy Act (CCPA), as amended, including the right to know categories of personal information collected, the right to delete (subject to exceptions), and the right to opt out of certain sharing that constitutes a "sale" or "sharing" for cross-context behavioral advertising. As stated above, we do not sell personal information for money. To exercise rights, email support@clearformation.com. We will not discriminate against you for exercising privacy rights.
12. International Users
ClearFormation is based in the United States and our Services are directed to U.S. business formation and compliance needs. If you access the Services from outside the United States, you understand that information may be processed and stored in the United States and other countries where our providers operate, which may have different data protection laws than your jurisdiction.
13. Children
The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be posted on the Site; continued use after changes become effective constitutes acceptance of the revised policy where permitted by law. Where required, we will obtain additional consent.
15. Contact Us
Questions about this Privacy Policy or our data practices may be directed to:
ClearFormation
Email: support@clearformation.com
