This Privacy Policy explains how CloudBiz (“CloudBiz,” “we,” “us,” or “our”) handles personal data when you visit cloudbiz.cc, use app.cloudbiz.cc, or buy formation, registered agent, EIN, or related services. It should be read with our Terms of Service, KYC / AML Policy, and Disclaimer.
We serve founders worldwide. Depending on where you live, you may have rights under US state privacy laws, the EU/UK GDPR, or other rules. If you have questions, write to hi@cloudbiz.cc.
1. Who is responsible
CloudBiz is the controller of personal data collected through the website and dashboard for our own business operations (accounts, billing, marketing of our services, and compliance). When we submit information to a state agency or the IRS at your request, those agencies process the data for their own statutory purposes.
2. Data we collect
We collect information you provide, information generated by your use of the Services, and information from vendors we use to verify identity or process payments.
Identity and contact. Name, email, phone, residential or mailing address, nationality, date of birth, and government ID details (such as passport or national ID) when needed for formation or verification.
Company information. Proposed or existing company name, state of formation, business purpose, member/manager details, ownership percentages, and documents you upload or import.
Payment. Billing name, payment method tokens, and transaction history. Full card numbers are handled by our payment processor, not stored by us in ordinary operation.
Technical data. IP address, device and browser type, pages viewed, approximate location derived from IP, and cookie identifiers.
Support. The content of emails and messages you send to us.
3. How we use data
We use personal data to:
- Create and secure your account
- Prepare and file formation and EIN documents you request
- Import existing companies into the dashboard
- Provide registered agent notice handling and the compliance dashboard
- Verify identity, screen for fraud, and meet KYC/AML obligations
- Process payments, prevent chargebacks, and keep accounting records
- Send service messages (filing status, renewals, security alerts)
- Improve the website and dashboard
- Comply with law and respond to lawful requests
We do not sell your personal data.
4. Legal bases (where GDPR or similar law applies)
We process data as needed to perform a contract with you, to take steps before a contract (for example, starting an order), to comply with legal obligations (tax, sanctions, recordkeeping), and for legitimate interests such as securing the Services, preventing fraud, and understanding how the site is used. Where we rely on consent (certain cookies or optional marketing), you may withdraw it at any time.
5. Sharing
We share data only as needed to complete the product or service you ordered, or when the law requires it. We do not sell personal data and we do not give it to third parties who have no role in that process, except under compulsory judicial or legal process. See the Disclaimer for that limit in plain language.
- Government agencies, including the Secretary of State in the company’s formation state and the Internal Revenue Service, when you ask us to file
- Registered agent and formation vendors who help us complete the Services
- Identity, KYC, and sanctions-screening providers
- Payment processors
- Hosting, email, and analytics providers that process data on our instructions, including Google Analytics after you accept the privacy notice
- Professional advisers (legal, accounting) under confidentiality
- Authorities when required by a court order, subpoena, warrant, or other binding legal process, or to protect rights, safety, or the Services
If we are involved in a merger, acquisition, or asset sale, personal data may transfer as part of that transaction, subject to this Policy.
6. International transfers
Our team, vendors, and servers may be located in the United States or other countries. If we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as standard contractual clauses where required, together with any necessary supplementary measures.
7. Retention
We keep account and formation records for as long as you have an account and for a period afterward as needed for tax, dispute, and legal-compliance purposes—typically at least five years for KYC-related records, and longer if a filing or legal hold requires it. Website logs are kept for a shorter operational period unless needed for security investigations.
8. Security
We use administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, access controls, and vendor review. No method of transmission or storage is completely secure. You should use a strong unique password and protect access to your mailbox.
9. Cookies
We use cookies and similar technologies that are necessary to run the site (session, security, load balancing). After you accept the privacy notice, we load Google Analytics (gtag.js) to understand traffic. Google may set its own cookies and process data in the United States. You can control cookies through your browser. Blocking some cookies may affect site function.
The marketing site shows a privacy notice until you press Accept. That choice is stored on your device for seven days so the notice — and Google Analytics — do not run again during that period. After seven days, or if you clear site data, the notice is shown again until you accept. Analytics does not load until you accept.
10. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You may also lodge a complaint with a supervisory authority in your country.
To exercise rights, email hi@cloudbiz.cc from the address on your account. We may need to verify your identity before fulfilling a request. We may decline requests that would prevent us from completing a filing you asked us to make, from keeping legally required records, or from defending a claim.
11. Children
The Services are not directed to children under 18. We do not knowingly collect personal data from children.
12. Changes
We may update this Policy by posting a new version on this page and changing the “Last updated” date. If changes are material, we may also notify you by email.
13. Contact
Privacy questions: hi@cloudbiz.cc.