Privacy Policy

1. Introduction

This Privacy Policy explains how Shojum ("we", "us", "our") collects, uses, and protects information about you when you use our business formation and registered agent services. By using our service, you agree to this policy.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, phone number, country, password (hashed)
• Business information: business name, entity type, state of formation, registered agent address
• Identity information: for international founders, passport number and nationality (used solely for ITIN applications and state filings)
• Payment information: processed by Stripe; we do not store full card numbers
• Usage data: IP address, browser type, pages visited (for fraud prevention and analytics)

3. How We Use Your Information

• To provide our business formation and registered agent services
• To file documents with state agencies on your behalf
• To communicate with you about your orders and account
• To send legal notices we receive as your registered agent
• To process payments and prevent fraud
• To comply with legal obligations

4. Sharing Your Information

We share your information only with:

• State filing agencies — necessary to form your business and maintain compliance
• Northwest Registered Agent — our fulfillment partner for state filings
• Stripe — for payment processing
• Cloudflare — our infrastructure provider
• Law enforcement — only when legally required

We do not sell your information to advertisers or third parties.

5. Data Security

We use industry-standard security measures: HTTPS for all traffic, encrypted storage at rest, password hashing with bcrypt, and tokenized sessions. No system is perfectly secure, but we take reasonable steps to protect your data.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and data (some records may be retained for legal compliance)
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, email us at privacy@shojum.com or use the controls in your account settings.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

8. Data Retention

We retain account data for as long as your account is active. After account deletion, we may retain limited records (e.g., tax filings, financial transactions) as required by law for up to 7 years.

9. Children

Our service is not directed to children under 18. We do not knowingly collect information from minors.

10. International Users

Our infrastructure is hosted on Cloudflare's global network. By using our service, you consent to the transfer and processing of your data in the United States and other jurisdictions where we operate.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions about this policy? Email privacy@shojum.com.