1.Who we are
This policy explains how Reggae Registered Agents Inc. ("Registate", "we", "us"), [Registered business address], handles personal information when you use registate.com, the Registate dashboard and our services. We are the controller of that information.
For privacy questions or requests, write to help@registate.com or support@registate.com. [EU/UK representative, if required under GDPR Article 27]
2.Information we collect
Information you give us
- Account: email address, first and last name, password, and optionally how you heard about us, a phone number and a profile picture.
- Company and order details: company type, state, company name and designator, business description, website, the package, add-ons and filing speed you choose, authorised capital where the state requires it, and the address you choose for the company (including your own address if you enter one).
- EIN and tax filings: whether you need an EIN and whether you have a US Social Security Number. When we apply for an EIN for you, the application form in your dashboard asks for the responsible party's Social Security Number or ITIN, as the IRS requires, and other filings may ask for a tax ID. We store these numbers encrypted and send them to CorporateTools, our filing partner, which submits the application to the IRS. In your dashboard the number is only ever shown masked.
- Address, lease and proof-of-address orders: name, email, phone, company name and current address, registered agent, whether you want to switch it, and the country of the main shareholder.
- Documents you upload: for lease and proof-of-address services, your company's formation document, IRS EIN letter and a government-issued photo ID (for example a passport or driving licence).
- Mail services: the information on USPS Form 1583 and the two forms of identification USPS requires before a mail receiving agency can accept mail for you, and the mail we receive for you (for example envelope images and, when you ask, scans of contents).
- Support: the subject, description, messages and attachments of support tickets and emails you send us.
Information from payments and signatures
- Payments are taken by Stripe. Card details go directly to Stripe; we receive a payment reference, the amount, status and limited card details such as brand and last four digits.
- Lease agreements are signed through DocuSign, which receives the signer's name and email and records the signing.
Information collected automatically
- Security signals: Google reCAPTCHA v3 runs when you submit forms and other changes. It collects information about your device and browser behaviour (such as IP address, browser details and interaction data) to tell people from bots.
- Technical data: like every website, our hosting receives your IP address, browser type and request details. Our servers log errors and events, and these logs can include your email address. When a sign-in session is renewed we record its IP address and browser with it. To stop password guessing we keep your IP address with failed sign-in attempts and delete it after 24 hours without further attempts. [Server log retention]
We do not use analytics, advertising or social media tracking tools on this website.
Information from others
State filing offices and the IRS send us documents about your company (for example approved formation documents and your EIN confirmation). Someone in your company may add you as a user or give us your details for a filing.
3.How we use information and our legal bases
If you are in the EEA or UK, the GDPR requires us to say which legal basis applies to each use.
| Use | Legal basis |
|---|---|
| Create and run your account; prepare and submit filings, EIN applications, leases and mail services you order; take payment | Performance of a contract |
| Verify identity for USPS Form 1583 and lease or proof-of-address services; keep records the law requires; respond to lawful requests | Legal obligation |
| Prevent spam, fraud and abuse (including reCAPTCHA); keep the service secure; defend legal claims | Legitimate interests |
| Answer support requests and send service emails (order updates, reminders, receipts) | Performance of a contract, or legitimate interests |
| Marketing emails, if we send them [confirm whether marketing email is sent] | Consent, which you can withdraw at any time |
Some information is needed to provide a service: without it we cannot file your company, apply for an EIN or accept mail for you. We do not make decisions with legal effects about you solely by automated means. reCAPTCHA may block a request that looks automated; if that happens to you, contact us.
6.International transfers
Registate operates in the United States and most of our providers process data there. If you are outside the US, your information is transferred to the US. Where the GDPR or UK GDPR applies, we rely on [transfer mechanism, e.g. EU-US Data Privacy Framework certification of the provider or Standard Contractual Clauses]. Contact us for a copy of the relevant safeguards.
7.How long we keep information
We keep personal information only as long as we need it for the purposes above:
- Account and company records: while your account is open and for [retention period] after it closes.
- USPS Form 1583 records: USPS rules require a mail receiving agency to keep them for at least 6 months after the service ends. [Confirm actual period]
- Identity documents: [ID document retention period].
- Payment and invoice records: as long as tax and accounting law requires, [period].
- Support tickets: [period].
- Form progress in your browser: until you finish, log out or clear it.
Filings already made with a state stay on the public record; we cannot remove them.
8.Security
We use encryption in transit (HTTPS), encrypt Social Security Numbers, ITINs and two-step verification secrets where we store them, keep sign-in tokens out of reach of page scripts, upload files through short-lived signed links, show Social Security Numbers in your dashboard only masked, show identity documents only to your company's owners, officers and admins, and use reCAPTCHA against automated abuse. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9.Your rights and choices
You can view and update most account details in your dashboard settings. You can also ask us to:
- give you a copy of your personal information, or a portable copy;
- correct information that is wrong;
- delete information, unless we must keep it by law (for example Form 1583 or tax records);
- restrict or object to a use based on legitimate interests;
- withdraw consent you gave, without affecting earlier processing.
EEA and UK
You have the rights above under the GDPR or UK GDPR, and you may complain to the data protection authority where you live or work. We would appreciate the chance to address your concern first.
California and other US states
Where California or another state privacy law applies, you have the right to know what we collect and why, to access, correct and delete it, and not to be treated differently for using these rights. We do not sell or share personal information and do not use sensitive personal information to infer characteristics about you. You may use an authorised agent to make a request.
How to make a request
Email support@registate.com from your account email. We may ask for information to confirm it is you. We will reply within one month (GDPR) or 45 days (California), and tell you if we need longer as the law allows.
10.Children
Registate is for people aged 18 and over. We do not knowingly collect information from children.
11.Changes to this policy
We will update this policy when our services or providers change. The date at the top shows the current version. If a change is significant, we will tell you by email or in your dashboard before it takes effect.
12.Contact
Privacy questions: help@registate.com or support@registate.com. Post: Reggae Registered Agents Inc., [Registered business address]. You can also use our contact page.
Related policies