Last Updated: May 18, 2026
Mainstay Filing, LLC and its affiliates (collectively, "Mainstay" "we," "us," or "our") provide business formation, registered agent, compliance, document filing, account management, and related services (the "Services"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with those Services.
This Privacy Policy applies to information we collect when you visit our website, create an account, purchase or use our Services, communicate with us, submit business or filing information, interact with our advertisements or emails, or otherwise provide information to us. This Privacy Policy is incorporated into our Terms of Service. By using the Services, you acknowledge the practices described in this Privacy Policy.
We collect and use personal information that is reasonably necessary and proportionate to provide our Services, operate and protect our business, comply with legal obligations, prevent fraud and misuse, communicate with you, improve our offerings, and conduct permitted marketing. We do not sell personal information for money. However, as described below, our use of advertising, analytics, cookies, pixels, and similar technologies may be considered a "sale," "sharing," or use for "targeted advertising" under certain state privacy laws. You may opt out of those activities as described in this Privacy Policy.
Because our Services often involve preparing, submitting, receiving, maintaining, or forwarding documents for business entities, certain information you provide to us may be included in filings, correspondence, or records submitted to or received from state, federal, local, court, tax, banking, licensing, regulatory, or other third-party systems. Those records may become public or may be handled by third parties outside our control. This Privacy Policy does not apply to information once it becomes publicly available or is independently collected, maintained, disclosed, or used by government agencies, courts, search engines, data brokers, business directories, or other third parties.
If a disability makes this Privacy Policy difficult to read or use, please contact us at [email protected] and we will provide reasonable assistance.
The categories of personal information we collect depend on how you interact with us and which Services you request. We may collect the following categories of information:
Identifiers and Contact Information
We may collect names, aliases, mailing addresses, business addresses, residential addresses, email addresses, telephone numbers, account usernames, IP addresses, device identifiers, cookie identifiers, online identifiers, signatures, tax identification numbers, Federal Employer Identification Numbers, Social Security numbers, driver's license or state identification numbers, passport information, and similar identifiers.
Business and Entity Information
We may collect information about a business entity or proposed business entity, including entity name, entity type, jurisdiction of formation, principal office address, mailing address, registered agent information, organizer information, member, manager, officer, director, shareholder, beneficial owner, incorporator, authorized representative, or control-person information, filing history, annual report information, compliance status, business purpose, industry, merchant category, licenses, permits, and related records.
Transaction, Commercial, and Payment Information
We may collect information about Services purchased, order history, payment status, billing address, invoices, account balances, chargebacks, refunds, payment method details, and information needed to process or verify payments. Full payment card numbers are generally processed by our payment processors and may not be stored by us unless expressly stated or required for a specific Service.
Internet, Device, and Usage Information
When you visit our website or use our online Services, we may collect browser type, operating system, device type, IP address, referring and exit pages, pages viewed, links clicked, session information, approximate location derived from IP address, cookie and pixel identifiers, and other information about your interaction with our website, emails, advertisements, and online Services.
Communications and Support Information
We may collect the contents of emails, chats, forms, support tickets, uploaded documents, call recordings, voicemails, notes from customer-service interactions, and other communications between you and us. We may monitor, record, retain, and review communications for quality assurance, training, dispute resolution, fraud prevention, compliance, and service improvement.
Sensitive Personal Information
Depending on the Services requested, we may collect information that certain laws treat as sensitive personal information, such as Social Security numbers, tax identification numbers, government-issued identification, signatures, financial account or payment information, precise geolocation if you choose to provide it or if a specific Service requires it, account login credentials for our Services, and the contents of communications you send to us. We use sensitive personal information only for purposes permitted by law, including providing the Services, verifying identity, processing transactions, preventing fraud, maintaining security, complying with legal obligations, and supporting our business operations.
Unless a Service expressly requires it, you should not provide us with unnecessary sensitive information, such as health information, biometric data, race, ethnicity, religious beliefs, sexual orientation, union membership, or unrelated financial credentials.
Inferences
We may draw limited inferences from the information we collect, such as preferences, likely interests, service needs, account activity patterns, or fraud-risk indicators.
Publicly Available and Third-Party Information
We may collect information from public records, state business registries, court records, government databases, commercial databases, affiliates, business partners, service providers, advertising partners, fraud-prevention vendors, identity-verification vendors, payment processors, professional service providers, and other lawful sources.
We may use personal information for the following purposes:
We may aggregate, de-identify, or anonymize information and use it for lawful business purposes. We do not attempt to re-identify information that we maintain as de-identified, except as permitted by law to test or confirm de-identification.
We may disclose personal information as described below.
Service Providers and Contractors
We may disclose personal information to service providers, contractors, vendors, agents, affiliates, and professional advisers that perform services for us or on our behalf, such as payment processing, cloud hosting, website operation, customer support, email delivery, document storage, scanning and mailing, identity verification, fraud prevention, analytics, security, accounting, legal, compliance, tax, registered-agent, business filing, and software services.
Government Agencies, Filing Offices, Courts, and Public Records
Because our Services include business formation, registered-agent, compliance, filing, and document-handling services, we may disclose information to secretaries of state, departments of revenue, tax authorities, licensing agencies, courts, law enforcement, federal agencies, local agencies, banks, payment processors, beneficial-ownership reporting systems, and other recipients involved in the Services you request. Information included in these filings, notices, records, or correspondence may become public or may be retained, disclosed, or used by those recipients according to their own rules and practices.
Advertising, Analytics, and Marketing Partners
We may disclose identifiers, device information, cookie identifiers, pixel identifiers, internet activity, and similar information to advertising, analytics, and marketing partners to measure, improve, and deliver advertising for our Services. Depending on the law and the specific technology used, these disclosures may be considered a "sale," "sharing," or use for "targeted advertising." You may opt out as described in Sections 5 and 6.
Professional Service Providers
We may disclose information to attorneys, accountants, compliance consultants, tax professionals, auditors, insurers, lenders, and other professional advisers when reasonably necessary for the Services, our business operations, compliance, dispute resolution, or legal protection.
Business Partners and Third-Party Services You Request
If you request, purchase, authorize, or interact with a third-party product or service through us, we may disclose information reasonably necessary to provide, evaluate, complete, support, or facilitate that product or service. Third-party services may be governed by their own terms and privacy policies.
Legal, Compliance, Safety, and Enforcement Purposes
We may disclose information when we believe disclosure is necessary or appropriate to comply with law, respond to lawful requests, enforce our agreements, protect rights, property, or safety, prevent fraud or abuse, investigate security incidents, or defend legal claims.
Business Transfers
We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, transfer of accounts, or similar transaction involving all or part of our business.
With Consent or Direction
We may disclose information when you direct us to do so or otherwise consent.
Our Services may require us to collect, use, disclose, receive, forward, store, or maintain information in connection with business filings, registered-agent records, legal notices, tax notices, compliance deadlines, service of process, government correspondence, and related matters.
You understand that:
Where available and appropriate for the Service, we may use our business address, registered-agent address, or other business contact details in filings to reduce the need to publish your personal residential address. We do not guarantee that your personal information will never appear in public filings or third-party records, especially where the law, the requested Service, or information you provide requires disclosure.
We and our partners may use cookies, pixels, tags, beacons, SDKs, local storage, and similar technologies to operate the website, remember preferences, secure accounts, analyze usage, measure performance, improve Services, deliver or measure advertising, and understand how visitors interact with our website and emails.
Types of Technologies We Use
Advertising and analytics partners may include Meta, Google, Microsoft, Taboola, and similar providers. These partners may collect or receive identifiers, device information, IP address, browser information, and information about your interactions with our website, ads, or emails.
We do not knowingly sell personal information for money. However, disclosure of online identifiers and activity information to advertising partners may be considered a "sale," "sharing," or "targeted advertising" under certain state privacy laws.
Your Choices
Where available, you may manage cookies and similar technologies through:
Cookie and device-based choices are often specific to the browser, device, or account you use. If you clear cookies, use a different browser, use a different device, or are not logged in, you may need to renew your preferences. We honor legally required opt-out preference signals in the manner required by applicable law.
Blocking or rejecting certain technologies may affect website functionality, account access, checkout, personalization, or service availability.
Depending on where you live and whether an applicable privacy law applies to us and to the information at issue, you may have some or all of the rights described below:
To submit a request, contact us at [email protected]. We may provide additional request methods where required by law.
We will verify your request before responding. Verification may require matching information you provide with information we maintain, asking for additional information, requesting signed authorization, or using other lawful verification methods. We may deny, limit, or decline to process a request if we cannot verify it, if the request is fraudulent or abusive, if an exception applies, or if we are legally permitted or required to retain the information.
You may authorize an agent to submit a request on your behalf where permitted by law. We may require proof of authorization and may require you or the agent to verify identity.
We respond to privacy requests within the time required by applicable law. If permitted, we may extend the response period and will notify you when we do so.
The rights described in this section apply only to residents of the relevant state and only where the applicable law applies to us, to the resident, and to the personal information at issue. Some laws contain thresholds, exemptions, entity-level exclusions, data-level exclusions, employment or business-contact exclusions, and other limitations. Nothing in this Privacy Policy waives any right, defense, exemption, exception, limitation, or other protection available to us under applicable law.
California
If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), applies to us and to your personal information, this section supplements the rest of this Privacy Policy.
Categories Collected
In the past 12 months, we may have collected the following CCPA categories of personal information:
Sources
We collect personal information from you, your authorized representatives, business partners, affiliates, service providers, contractors, advertising and analytics partners, public records, government agencies, payment processors, identity-verification vendors, fraud-prevention vendors, and other lawful sources.
Purposes
We collect and use personal information for the purposes described in Sections 2, 4, and 5, including providing LLC formation, registered-agent, compliance, filing, account, payment, customer-support, security, legal, analytics, and marketing services.
Disclosure, Sale, and Sharing
We may disclose personal information to the categories of recipients described in Section 3. We do not sell personal information for money. However, use of certain advertising, analytics, cookies, pixels, and similar technologies may be considered a sale or sharing of identifiers and internet or electronic network activity information under the CCPA. You may opt out of sale or sharing by using cookie preference tools, or by contacting us at [email protected].
We do not knowingly sell or share personal information of consumers under 16.
Sensitive Personal Information
We use sensitive personal information for purposes permitted by the CCPA and its regulations, including providing Services requested by you, verifying identity, processing payments, preventing fraud, maintaining security, complying with law, and supporting business operations. If we use or disclose sensitive personal information for purposes that trigger a right to limit under the CCPA, we will provide a method to exercise that right.
Retention
We retain personal information for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy, including to provide Services, maintain accounts, comply with legal and registered-agent obligations, retain filing and transaction records, resolve disputes, prevent fraud, enforce agreements, maintain security, and satisfy tax, accounting, corporate, legal, and regulatory requirements. Retention periods vary by category, Service, jurisdiction, and legal obligation.
California Rights
California residents may have the right to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, receive a portable copy, and be free from unlawful discrimination. To submit a request, contact [email protected].
We will confirm receipt and respond within the time required by law. We may deny all or part of a request where an exception applies, including where information must be retained for legal, compliance, registered-agent, tax, accounting, security, fraud-prevention, dispute-resolution, or public-record purposes.
Shine the Light
California Civil Code Section 1798.83 permits California residents to request information about certain disclosures of personal information to third parties for their own direct marketing purposes. To submit such a request, contact [email protected].
Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Nebraska, Indiana, Kentucky, Rhode Island, Florida, Nevada, and Other States
Residents of certain states may have rights to access, confirm, correct, delete, port, opt out of sale, opt out of targeted advertising, opt out of certain profiling, appeal denials, or exercise other rights under applicable law. These rights vary by state and may be subject to exemptions, limitations, verification, and applicability thresholds.
To exercise a state privacy right, contact [email protected]. If your request is denied and your state provides an appeal right, you may appeal by replying to our denial notice or using the appeal method described in that notice. If we deny your appeal, you may contact your state attorney general or other privacy regulator where applicable.
Nevada residents may submit a request to opt out of the sale of covered information under Nevada law by contacting [email protected].
Our Services are intended for adults and business users. They are not directed to, marketed to, or intended for anyone under 18. We do not knowingly collect personal information from children under 13. If you are under 18, do not use the Services or submit information to us. If you believe a child has provided personal information to us, contact [email protected] and we will take appropriate steps as required by law.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction. These safeguards may include access controls, authentication, encryption where appropriate, vendor review, employee training, monitoring, and other measures.
No website, network, system, transmission, or storage method is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized access or security issue.
We retain personal information for as long as reasonably necessary and proportionate to fulfill the purposes described in this Privacy Policy, including providing and supporting Services, maintaining records, complying with registered-agent, business-formation, tax, accounting, corporate, legal, and regulatory obligations, resolving disputes, preventing fraud, enforcing agreements, maintaining security, and supporting legitimate business operations.
Retention periods vary depending on the type of information, the Service requested, the jurisdiction involved, legal requirements, customer relationship, filing status, dispute status, account activity, and business need. Some information may remain in backups, archives, legal files, accounting systems, public records, government databases, email systems, or third-party systems even after it is deleted from active customer-facing systems.
We may retain information after Services end where retention is required or permitted by law, reasonably necessary for our business, or necessary to protect our rights or the rights of others.
Our Services are intended primarily for users in the United States. If you access the Services from outside the United States, you understand that your information may be collected, used, processed, transferred, and stored in the United States or other jurisdictions where privacy laws may differ from those in your location.
Our website, emails, or Services may link to third-party websites, platforms, tools, payment processors, government sites, professional services, or partner services. We are not responsible for the privacy practices, content, security, availability, or policies of third parties. Your interactions with third parties are governed by their own terms and privacy policies.
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date. Where required by law, we will provide additional notice or request consent. Changes are effective when posted unless a later effective date is stated. Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated policy.
If you have questions, concerns, comments, or privacy requests, contact us at:
If your state provides a right to contact your state attorney general or privacy regulator after an appeal denial, you may do so using the information provided by that regulator.