Privacy Policy

1. Who We Are

MSA Registered Agent ("we," "us," or "our") operates this website and provides registered agent services. We are backed by MindShift Agency. This Privacy Policy describes how we collect, use, and protect your personal information when you use our services or visit our website.

2. Data We Collect

We may collect the following categories of information:

• Account information: Email address, password (stored in hashed form).
• Profile information: First and last name, phone number, forwarding address, and similar contact or delivery details.
• Consent and preferences: Your consent to receive registered agent services and marketing communications, along with timestamps of when you gave consent.
• Entity and company data: Company name, formation state, formation date, state ID/file number, entity type, current registered agent, and other details related to entities for which we act as registered agent.
• Payment-related data: Billing is processed by Stripe. We do not store full credit card numbers on our systems. We may store Stripe customer identifiers and subscription status to provide and manage your service.
• Usage and technical data: Information about how you use our website and portal (e.g., IP address, browser type, pages visited) to the extent we use such data for security or improving our services.

3. Why We Collect This Data

We use your information to:

• Provide registered agent services (receiving and managing legal and government documents on your behalf).
• Create and manage your account and client portal access.
• Process payments and manage subscriptions.
• Comply with legal and regulatory obligations.
• Send you service-related communications and, where you have consented, marketing communications.
• Improve our services, security, and user experience.

4. Third-Party Sharing

We do not sell your personal information. We may share your information with:

• Supabase: We use Supabase for authentication and database hosting. Your account and profile data are stored and processed by Supabase in accordance with their privacy practices. Data is encrypted in transit and at rest.
• Stripe: We use Stripe for payment processing. When you pay, your payment data is handled by Stripe in accordance with Stripe's Privacy Policy.
• Service providers: We may use other providers necessary to operate our business (e.g., hosting, email delivery). We require them to protect your data and use it only for the purposes we specify.
• Legal and safety: We may disclose information when required by law, court order, or to protect our rights, your safety, or the safety of others.

5. Retention

We retain your account, profile, and entity data for as long as your account is active and as needed to provide services and comply with legal obligations. After you cancel your account, we may retain certain information for a reasonable period for legal, regulatory, or dispute-resolution purposes. Document and scanning retention practices are described in our Terms of Service.

6. Security

We use industry-standard measures to protect your data, including HTTPS, access controls, and secure storage. While we strive to protect your personal information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Request deletion of your personal information.
• Opt out of marketing communications at any time (e.g., via unsubscribe links or by contacting us).
• Data portability (e.g., receive a copy of your data in a structured format).

You can exercise many of these rights through your account settings or by contacting us at the email below. We will respond to valid requests in accordance with applicable law.

8. State-Specific Rights (e.g., California, Virginia, Colorado)

If you are a resident of a state with comprehensive privacy laws (such as California, Virginia, Colorado, Connecticut, Utah, and others), you may have additional rights, including the right to know what personal information we collect and how it is used, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. To exercise your rights, please contact us at the email below.

9. Children

Our services are not directed to individuals under 16 (or under 13 where applicable). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may notify you by email or a notice on our website. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at: support@mindshiftagency.com.