What this website collects when you visit
This website does not use advertising trackers or third-party analytics. We do run our own privacy-friendly statistics: when you view a page our server records which page, the kind of device and browser, your approximate location (country and city, taken from the connection; we do not store your IP address), the website you came from, where you click, and how long you stay and how far you scroll. For this we set no cookie, visitors are counted with an anonymous code that changes every day and cannot be traced back to you, we ignore browsers that send Do Not Track or Global Privacy Control, and these statistics are deleted after 400 days.
Almost all scripts and fonts are served from our own server. The site is delivered through Cloudflare, which provides network and security services and therefore sees the requests your browser makes. Pages with a calculator or the order form also load Stripe's script (payments) and, where bot-protection is on, Cloudflare's Turnstile check; when they load, those providers receive your IP address and browser data and may set technical cookies (Stripe uses cookies such as __stripe_mid and __stripe_sid for fraud prevention).
What your browser keeps on your device
- Order form draft. While you fill in the order form, your answers (name, email, phone, owner and agent addresses, business details, notes and your choices, including the optional message and email boxes) are saved in your browser's local storage on your own device for up to 7 days, so a refresh or a later visit does not lose them. The draft is not sent to us by itself: what we receive is described below. The Start over button, finishing the order, or clearing this site's data in your browser removes it.
- Business name from the home page. If you type a business name in the home page tool and continue to the order form, the name is handed over in your tab's session storage and removed as soon as the order form reads it.
- Chat. A random chat session identifier is kept in local storage so you can resume a chat; we do not use it to track you across other sites.
- Client portal. If you sign in we set a session cookie that is strictly needed to keep you signed in.
What you give us
When you fill in the order form, we save your name, email, phone, country and the choices you made on our servers as soon as you complete the contact step, before you pay, so we can follow up if you do not finish. If you email us or use the chat, we keep what you send, including any documents you attach. To start a chat we ask for your name and email address and create a contact record for you; by writing in the chat you agree that we may reply to you by email, and we use those details only to answer you.
Calls. When you call us, an AI voice assistant answers; we tell you at the start of the call that it is recorded. We keep the audio recording, transcript and a summary for up to 24 months to answer your request and improve our service, and you can ask us to delete them at any time. If you give us your contact details on the call and agree to be contacted, we may use them to create a contact record so a team member can reply.
Text messages and WhatsApp. We send texts only if you tick the optional box on the order form (or otherwise agree) and give us a phone number. The messages are order updates and reminders; frequency varies. For US and Canadian numbers we first send one text asking you to reply YES to confirm. Message and data rates may apply. Reply STOP to cancel and HELP for help. Consent is not a condition of buying anything. We do not share your phone number with third parties for their marketing. We keep a log of the messages we send you.
Marketing emails. Only if you tick the optional box. Every marketing email has an unsubscribe link, and an address that unsubscribes is kept (as a one-way hash) only so that it is never mailed again. Not required to buy.
AI-assisted translation
For a certified translation, the document you upload is stored encrypted on Amazon Web Services and sent to Amazon Bedrock, an AI service of Amazon Web Services in the United States, to prepare a first draft. A human translator then reviews and corrects the draft and signs the certificate, and our team releases the translation to you; nothing generated by the AI reaches you without that review. We use your documents only to provide the service you ordered and we do not use them to train AI models.
Who processes your information
We use these service providers to run the business, and they receive only what they need:
- Stripe: card payments. Card numbers go to Stripe and never reach us.
- Amazon Web Services: encrypted private storage of the documents you upload and of our backups, and Amazon Bedrock for AI translation drafts.
- Cloudflare: delivers and protects this website and, where it is turned on, the bot check on forms.
- Google: only if you choose Sign in with Google once it is available (see below).
- Our email provider: the messages we send you.
- Our messaging provider: texts and WhatsApp messages, if you ask for them.
- Our voice-AI provider (Vapi): phone calls.
- Our registered-agent network: when Coral Filings acts as your registered agent, the partner that provides the agent address in your state receives your company name and contact details so it can accept legal papers and forward them.
If you sign in to the client portal we set a session cookie that is strictly needed to keep you signed in. We keep a security log of sign-ins and actions (including email, IP address and browser type) for up to three years, because it is a tamper-proof record we cannot edit; when you sign a document electronically we record your name, email, IP address and the time. Where a bot-check is enabled on a form, a bot-protection provider also sees that request. We do not sell your personal information and we do not share it for advertising.
Sign in with Google
Once Google sign-in is switched on for the client portal, you will be able to use a Google account instead of an email link. If you do, Google tells us your email address and whether Google has verified it; we use it only to find your existing client account and sign you in. We never receive your Google password and no account is created through Google. Google handles that sign-in under its own privacy policy.
Filings and public records
To file an LLC we need information the state requires, such as names and addresses. Filings become public record on the state's business registry (for example Sunbiz in Florida). If you use us as registered agent, the agent address is the one listed for that role; other addresses you provide for the filing, such as the principal or mailing address or a manager or member address, may still appear on the public record.
How long we keep it
We keep order, payment and invoice records for as long as tax, accounting and filing rules require. Other personal information, such as notes and uploaded documents, is kept while we provide the service and afterward until you ask us to erase it. Website chats from visitors who never become clients are deleted after 12 months, the details of people who filled in the order form but never bought anything are deleted after 90 days, call recordings, transcripts and summaries are deleted after 24 months, and website statistics after 400 days. The order form draft in your browser lasts at most 7 days.
Your choices and privacy rights
You can ask us at any time to see, correct or delete your information. Clients can start a deletion request from the client portal. We will erase what we are not legally required to keep and tell you what we kept and why. Encrypted backups are not edited; a backup made before your request can keep a copy of your data for up to 30 days, until it expires automatically.
Depending on where you live (for example California under the CCPA/CPRA, or Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may also have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; to opt out of its sale or sharing, of targeted advertising and of profiling; to limit the use of sensitive information; and not to be treated worse for using these rights. We do not sell or share personal information and we do not use it for targeted advertising or profiling. The sensitive information you may give us, such as an ID or passport you upload, is used only to provide the service you asked for. To use a right, write to the email address in the footer. We may need to verify who you are first, and you can use an authorized agent. If we refuse a request, you can reply to ask us to reconsider and, where your state allows it, contact your state's attorney general.
Coral Filings is a US business and processes information in the United States, including when you contact us from another country.
Contact
Questions about privacy can be sent to the email address in the footer. This policy is a draft pending legal review.