Privacy Policy

1. Who We Are

Wi Filings is a trade name of Vivid Resources LLC, a Wisconsin limited liability company located at 790 N. Milwaukee Street, Suite 300, Milwaukee, WI 53202. Billing for our services is administered by an affiliate, Wi Filings LLC. Both entities are owned and operated by Darius F. Sanders. You can reach our privacy team at [email protected] or (414) 262-6010.

2. Information We Collect

From everyone who uses our services:

• Identity & contact: name, email, phone, mailing address.
• Business information: LLC name, business purpose, member names & ownership percentages, principal office address.
• Payment information: processed by Stripe; we do not see or store your full card number. We retain Stripe's tokenized payment ID and the last four digits for receipts and renewals.
• Usage data: standard server logs (IP, user-agent, page accessed, timestamp) used for security and abuse prevention.

If you order our EIN service:

• Sensitive identifier (SSN or ITIN): the responsible party's tax ID required by IRS Form SS-4. It is collected only after verified payment on an isolated HTTPS authorization page that does not load advertising, analytics, session replay, or third-party assets. The full identifier is authenticated-encrypted for restricted fulfillment access, is never placed in Stripe metadata or ordinary email, and is scheduled for automatic purge upon fulfillment or 72 hours after authorization. It is used only to prepare and submit the EIN application and is disclosed only to the IRS as authorized by the customer.

3. How We Use Your Information

• Prepare and submit filings to the Wisconsin Department of Financial Institutions (DFI), the IRS, and FinCEN on your behalf.
• Provide registered agent service: receiving and forwarding legal documents and state correspondence.
• Send service updates, filing confirmations, renewal reminders, and account-related communications.
• Process payments and manage autopay renewals you have authorized.
• Improve our service quality and protect against fraud and abuse.

4. Subprocessors & Third Parties

We share information only with vendors that support our service delivery:

• Stripe — payment processing (card data, billing address, email).
• Resend — transactional email delivery (recipient email and message contents).
• Twilio — SMS and voice communications (phone number, message content).
• Railway — application and database hosting (encrypted at rest and in transit).
• Cloudflare — DDoS protection and content delivery (request metadata).
• Google (Gemini API) — powers our Wifiya chatbot (your chat input and our system prompt). Operated under Google Cloud's Data Processing Addendum; your inputs are not used to train Google's models.
• Google Analytics (optional) — if you choose to allow analytics, measures visits to public pages and verified purchase returns. We send public page paths, general traffic sources, a pseudonymous analytics identifier, and purchase value, currency and service category with an anonymous transaction reference. We do not send names, contact details, form fields, tax identifiers, raw Stripe IDs or URL query strings. Google receives ordinary connection information when your browser contacts its service. Advertising features and enhanced measurement are disabled.
• Wisconsin DFI, IRS, and FinCEN — government agencies that receive your filings (this is the entire purpose of our service).

We do not sell or rent personal information to anyone. We do not share information with advertisers.

5. Retention

• Customer records: retained for the duration of your active service plus seven (7) years for tax, audit, and statute-of-limitations purposes.
• SSN / ITIN: stored only as a short-lived encrypted authorization payload, never in an ordinary email or dedicated plain-text database field, and automatically purged upon fulfillment or within 72 hours after authorization. The final four digits may remain in the audit record to identify which authorization was used.
• Payment records: retained per Stripe's terms and our tax-record obligations.
• Server logs: 90 days, then deleted.
• Marketing email opt-ins: until you unsubscribe.

6. Your Rights

Regardless of where you live, you can email [email protected] to:

• Access a copy of the personal information we hold about you.
• Correct any inaccurate information.
• Delete your account (subject to legal retention requirements above).
• Opt out of marketing emails.
• Cancel autopay and ongoing services.

California residents (CCPA/CPRA): you additionally have the right to know what categories of personal information we collect, the right to delete, the right to correct, the right to limit the use of sensitive personal information (including SSN/ITIN), and the right to opt out of "sale" or "sharing" — though we do neither. We do not knowingly process the personal information of consumers under 16. We respond to verifiable requests within 45 days.

EU/UK residents (GDPR/UK GDPR): our legal basis for processing is contract performance for filings, legitimate interest for service security, and consent for marketing. You have rights of access, rectification, erasure, restriction, portability, and objection. You can lodge a complaint with your local supervisory authority. Cross-border transfers to U.S. subprocessors rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

7. Security

All data is transmitted over TLS (HTTPS). Database connections are encrypted in transit and at rest. Payment card data is handled exclusively by Stripe (PCI DSS Level 1 certified) — we never see or store full card numbers. EIN taxpayer identifiers are protected with application-level authenticated encryption, restricted administrative access, no-store/noindex controls on the authorization page, and automatic purging. Administrative access requires a strong password. We use Cloudflare for DDoS protection and rate limiting. Despite these measures, no system is impenetrable; if a breach occurs, we will notify affected individuals as required by applicable law.

8. Cookies & Optional Analytics

Essential first-party cookies maintain your session. Google Analytics loads only after you select Allow analytics; choosing No thanks does not affect any service or payment. Analytics uses first-party cookies for up to 180 days. We remember your choice for up to 180 days and keep anonymous receipt markers to avoid counting the same purchase twice. You can change or withdraw your choice using Analytics preferences at the bottom of public pages. Withdrawing stops further measurement and removes the Google Analytics cookies accessible to this site; it does not erase reports already collected.

We do not load the new analytics script on checkout forms, document payment forms, dashboards or secure EIN authorization pages. A consented return from Stripe may record a purchase only after a separate read-only payment check. Analytics does not control checkout or fulfillment. We honor Global Privacy Control and Do Not Track by disabling this optional measurement. Advertising personalization and Google signals are off. See Google's Privacy Policy for its handling of analytics data.

9. Children

Our services are intended for adults forming or maintaining a business in the United States. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as our practices evolve or as regulations change. The effective date at the top reflects the most recent revision. For material changes affecting your rights, we will notify active customers via email at least 14 days before the change takes effect.

11. Contact

Privacy questions, requests, or breach concerns:

• Email: [email protected]
• Phone: (414) 262-6010
• Mail: Wi Filings — Privacy, 790 N. Milwaukee Street, Suite 300, Milwaukee, WI 53202