Privacy Policy

At nycfile.com, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

This policy is compliant with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• LLC Information: Business name, EIN, formation date, business address
• Beneficial Owner Information: Names, dates of birth, addresses, ID numbers
• Documents: Copies of identification documents, licenses (encrypted)
• Communications: Messages you send us via contact forms or live chat

1.2 Automatically Collected Information

• Usage Data: Pages viewed, time spent, features used
• Device Information: Browser type, operating system, IP address
• Cookies: We use essential cookies for authentication and preferences

2. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Help you prepare your NY BOI filing
• Send deadline reminders and important notifications
• Respond to your inquiries and provide support
• Improve our service and user experience
• Comply with legal obligations
• Prevent fraud and ensure security

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: You have given clear consent for us to process your data
• Contract: Processing is necessary to provide our service
• Legal Obligation: We must process data to comply with the law
• Legitimate Interest: Processing is in our legitimate business interests

4. How We Share Your Information

We do NOT sell your personal information.

We may share your information with:

• Service Providers: Trusted third parties who help us operate (hosting, email, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger or acquisition

All service providers are bound by strict confidentiality agreements and GDPR compliance.

5. Data Security

We implement industry-standard security measures:

• Encryption: All data is encrypted in transit (HTTPS) and at rest (AES-256)
• Access Controls: Strict access limitations and authentication
• Regular Audits: Security reviews and vulnerability assessments
• Secure Infrastructure: Data stored on secure, compliant servers

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information:

• As long as your account is active
• For up to 7 years after account closure (for legal compliance)
• Unless you request earlier deletion (see Your Rights below)

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Data Portability: Receive your data in a machine-readable format
• Restrict Processing: Limit how we use your data
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time
• Opt-Out of Marketing: Unsubscribe from promotional emails

To exercise these rights, contact us at: privacy@nycfile.com

We will respond to your request within 30 days (GDPR) or 45 days (CCPA).

8. International Data Transfers

Your data may be transferred to and stored in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: To understand how you use our service (with your consent)

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

11. Third-Party Services

We use the following third-party services:

• Vercel: Hosting and infrastructure
• Supabase: Database and authentication
• Resend: Email delivery
• Tawk.to: Live chat support
• Google Analytics: Usage analytics (anonymized)

Each service has its own privacy policy. We ensure all providers are GDPR-compliant.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website. Continued use after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

14. GDPR: Right to Lodge a Complaint

If you are in the European Economic Area (EEA) and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.