Privacy Policy · LLCroad

Who is responsible for your data

The controller of your personal data is ALTRIX - FZCO, a company registered in IFZA free zone, Dubai, United Arab Emirates (registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai 342001, United Arab Emirates), which operates LLCroad. For any question about your data, contact us through our contact page.

Our representative in the European Union

As we are not established in the European Union, we designate a representative there under Article 27 of the GDPR. You and the supervisory authorities can contact them about any question on your data. Our representative: to be appointed.

The data we collect

Depending on how you use LLCroad, we collect:

Identity data: first and last name, date and place of birth, nationality.
Contact data: email address, phone number, residential address.
Passport data and photo: the photo of your passport you upload after payment, and the information it contains, which we need for the EIN application and for the identity checks carried out by banks.
Company data: proposed company name, members, activity, addresses and the documents issued for your company.
Payment data: information Stripe sends us about your payments (amount, date, status, card brand and last digits). Your full card details are handled by Stripe and never stored by us.
Messages: what you send us through the contact form, by email or in your client space, and your electronic signatures.
Technical data: connection logs, IP address, browser type and security events, and, only if you agree, analytics data about how you use the website.

Why we use your data and on what basis

We only use your data for clear purposes, each with a legal basis:

To provide the services you ordered (forming your company, the registered agent, the EIN application, help opening a bank account, filings and annual plans, your client space and our exchanges with you): necessary to perform our contract with you.
To meet our legal obligations (accounting, tax records, responding to lawful requests from authorities, information our registered agent partner must keep): legal obligation.
To keep our services secure and improve them (fraud prevention, security logs, handling disputes, service quality): our legitimate interest, balanced against your rights.
To measure our audience and our advertising (analytics and advertising conversion tags): your consent, which you can withdraw at any time.

Who receives your data

We never sell your data. We share it only with those who need it to deliver the service, under contracts that require them to protect it:

Stripe, for payments.
Supabase, which hosts our database and files in the European Union (Paris region).
Vercel Inc., which hosts our website in the United States.
Resend, which sends our transactional emails.
Anthropic, whose Claude API reads the photo of your passport to fill in your details automatically, so you do not have to type them.
Our fax provider, which transmits your EIN application to the IRS.
Our registered agent partner in Wyoming, which receives official mail for your company.
The State of Wyoming, to form your company and file its annual report. Some information filed with the State, such as the company name and the registered agent address, becomes part of the public record.
The IRS, for your EIN application and the annual information return.
Partner banks such as Mercury, Relay or Wise, only when you ask us to help you open an account with them.
Analytics (PostHog) and advertising partners, only if you have accepted the corresponding cookies.

International transfers

Our database is hosted in the European Union, but some of our providers, as well as the State of Wyoming, the IRS and US banks, are located in the United States. Transfers to providers outside the European Economic Area are covered by the European Commission’s Standard Contractual Clauses or, where the provider is certified, by the EU-US Data Privacy Framework.

Transfers to US authorities and banks are necessary to perform the service you asked for: forming a US company and obtaining its tax number cannot be done without them.

How long we keep your data

We keep your data for as long as our contract with you lasts, then for the period required by law or needed to establish, exercise or defend legal claims, in line with applicable limitation periods.

Identity documents, including your passport photo and data, are kept for the life of your company, because the State of Wyoming, the IRS, banks and our registered agent partner can ask us who owns and controls it, then for the retention period required by law after the company is closed or leaves us. Messages sent through the contact form without an order are deleted after a reasonable period. Analytics data is kept for a limited time.

How we protect your data

Identity documents are encrypted at rest and stored in a private space. They are only shown through short-lived signed links, and every access to them is logged. Access to client data is limited to the people who need it to handle your file.

Our providers are selected for their security standards, and we review who has access to what on a regular basis.

Your rights

If you live in the European Union, the European Economic Area or the United Kingdom, you have the right to:

access your data and receive a copy of it;
have inaccurate data corrected;
have your data erased, unless we must keep it to meet a legal obligation or defend a claim;
restrict how we use it;
receive the data you provided in a structured, commonly used format (portability);
object to processing based on our legitimate interest;
withdraw your consent at any time, for example from the cookie settings, without affecting what was done before;
lodge a complaint with a supervisory authority, such as the CNIL in France or the authority of the country where you live.

How to exercise your rights

Send your request through our contact page. We may ask you to confirm your identity before answering, to make sure we never disclose your data to someone else. We answer within the time limits set by law.

Clients who live elsewhere can also contact us with any request about their data: we will do our best to help.

Automated processing

Reading your passport photo with the Claude API only serves to pre-fill your details, which you can check and correct. We do not make any decision about you based solely on automated processing that has legal or similarly significant effects.

Children

Our services are intended for adults. We do not knowingly collect data from minors.

Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date of the latest update is shown on this page, and we will inform clients of any significant change.