Privacy Policy

Last updated: August 2026

1. Information We Collect

To prepare your IRS Form SS-4 (EIN application), we collect the following types of information:

Personal identifiers: Full legal name, Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN) of the responsible party.
Business information: Entity name, type, address, state of organization, formation date, and business activity details.
Contact information: Email address, phone number.
Payment information: Processed securely by Stripe. We do not store your credit card number on our servers.
Usage information: Pages visited and steps completed within the application form, plus the referring link if you arrived from one of our emails or texts. Used to see where applications stall, not to build a profile of you.

2. How We Use Your Information

Prepare and submit your IRS Form SS-4 on your behalf.
Communicate with you about your application status.
Deliver your EIN confirmation document.
Process payments and issue refunds.
Comply with legal and regulatory requirements.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Information Sharing

We share your information only in these limited circumstances:

IRS: Your application data is submitted to the IRS as part of the EIN filing process. This is the core purpose of our Service.
Payment processor (Stripe): Payment details are shared with Stripe to process your transaction securely.
Service providers: We use a small number of vendors to run the Service, each receiving only what their function requires: Vercel (website hosting) and Resend (sending our emails, which receives your email address). They act on our instructions and may not use your information for their own purposes.
Legal requirements: We may disclose information if required by law, court order, or government request.

4. Data Security

We take the security of your personal information seriously, especially sensitive data like Social Security Numbers:

All data is transmitted over encrypted connections (TLS/HTTPS).
SSNs are encrypted at rest using industry-standard encryption.
SSNs are never included in auto-saved drafts — they are only transmitted on final submission.
Access to personal data is restricted to authorized personnel on a need-to-know basis.
Payment card data is handled entirely by Stripe and never touches our servers.

5. Data Retention

We retain your application data for as long as necessary to provide our Service and comply with legal obligations:

Active applications: Data is retained until your EIN is delivered and you have confirmed receipt.
Completed applications: Non-sensitive application records are retained for up to 3 years for customer support and legal compliance purposes.
SSNs: Erased as soon as your EIN is confirmed and recorded — usually the same day your application completes. In every other case, including cancellations, they are erased within 90 days.
Usage information: Retained for up to 180 days, then automatically deleted.

6. Your Rights

Depending on your location, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your personal information, subject to legal retention requirements.
Portability: Request your data in a portable format.
Opt-out of sale: We do not sell your personal information. No opt-out is necessary.

To exercise any of these rights, contact us at help@llc-ein.com.

7. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect and how it is used.
Right to delete your personal information.
Right to non-discrimination for exercising your rights.
We do not sell personal information as defined by the CCPA.

8. How We Handle Your SSN

Your Social Security Number is the most sensitive thing we hold, and we treat it differently from everything else. It is encrypted before it is stored, it is never written into the draft your browser saves as you type, and it is sent to us only when you submit your completed application. Within our own systems, only staff working your case can see it.

We ask for it because the IRS requires the responsible party’s SSN or ITIN on Form SS-4. It is used to prepare that form and for nothing else — and once your EIN comes back and is recorded, we erase it. See Data Security and Data Retention above for the specifics.

9. Cookies and Tracking

We use essential cookies required for authentication and session management.

We also record basic usage information ourselves — which pages were visited and which steps of the application form were completed — so we can see where applications stall and fix it. This data stays on our own systems, is not sold or shared for advertising, and is deleted after 180 days.

We do not use third-party advertising or tracking cookies, and we do not run Google Analytics or any advertising pixel. If that ever changes we will update this policy and provide appropriate notice before it takes effect.

10. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The “Last updated” date at the top reflects the most recent revision.

12. Contact Us

For privacy-related questions or to exercise your data rights:

Email: help@llc-ein.com