Privacy Policy

At Sedes, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. We have written it in plain English because we believe you should actually understand how your data is handled.

By using Sedes, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

• Account information: Name, email address, phone number, and password when you create an account.
• Business information: Business name, business type, member/manager details, business address, and other formation details you provide during the conversation with our AI.
• Payment information: Credit card or other payment details, processed and stored securely by Stripe. We do not store your full card number on our servers.
• Communications: Messages you send to our support team, feedback, and survey responses.
• Identity documents: When required for certain filings, such as copies of government IDs or tax identification numbers.

Information We Collect Automatically

• Browsing data: IP address, browser type, device information, operating system, and pages visited on our website.
• Usage data: How you interact with our platform, features you use, time spent, and conversation flow data (anonymized).
• Cookies and similar technologies: See Section 5 below for details.

2. How We Use Your Information

We use your information to:

• Provide our services: Process your business formation filings, generate documents, and manage your account.
• Improve our product: Analyze usage patterns to make Sedes better. We may use anonymized conversation data to improve our AI, but never share identifiable business details.
• Compliance reminders: Send you notifications about upcoming deadlines, annual reports, and other compliance requirements for your business.
• Marketing: With your consent, send you product updates, educational content, and promotional offers. You can opt out at any time by clicking "unsubscribe" in any marketing email or updating your preferences in your account settings.
• Security and fraud prevention: Detect and prevent unauthorized access, abuse, or fraudulent activity.
• Legal compliance: Meet our legal obligations, respond to lawful requests, and enforce our Terms of Service.

3. Who We Share Your Information With

We do not sell your personal information. We share data only in these limited circumstances:

• Stripe: Our payment processor. They receive your payment information to process transactions securely. See Stripe's Privacy Policy.
• Firebase (Google): We use Firebase for authentication and secure data storage. See Firebase Privacy and Security.
• State agencies: We submit your business information to the relevant Secretary of State and other government agencies as required to complete your filings.
• Legal requirements: We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of Sedes, our users, or the public.

4. Data Retention

We retain your information for as long as your account is active and as needed to provide our services. After you close your account:

• We retain business formation records, tax-related documents, and filing records for 7 years after account closure, as required for legal and tax compliance purposes.
• We delete or anonymize personal browsing data, usage data, and marketing preferences within 90 days of account closure.
• Payment records are retained as required by financial regulations.

5. Cookies and Tracking

We use cookies and similar technologies to:

• Essential cookies: Keep you logged in, remember your preferences, and ensure the site functions properly.
• Analytics cookies: We use Google Analytics and Firebase Analytics to understand how visitors use our website and where we can improve. This data is aggregated and does not personally identify you.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our Service.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Data portability: Request a copy of your data in a structured, machine-readable format.
• Opt out: Unsubscribe from marketing communications at any time.

To exercise any of these rights, contact us at privacy@sedesra.com. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You can request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request deletion of your personal information, with certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• We do not sell personal information: We have not sold personal information in the preceding 12 months and do not intend to do so.

To make a CCPA request, email privacy@sedesra.com with the subject line "CCPA Request."

8. European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies:

• Legal basis: We process your data based on: (a) your consent, (b) the necessity to perform a contract with you, (c) our legitimate business interests, or (d) compliance with legal obligations.
• Data transfers: Your data may be transferred to and processed in the United States. We use appropriate safeguards such as Standard Contractual Clauses to protect your data during transfer.
• Additional rights: You have the right to restrict processing, object to processing, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

Our Data Protection contact can be reached at privacy@sedesra.com.

9. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, regular security audits, and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you become aware of a security incident, please contact us immediately.

10. Children's Privacy

Sedes is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us: