Preamble & Privacy Scope
This Privacy Policy was last updated on March 16, 2026. We at Nexfyla LLC (“NexFyla,” “we,” “our,” or “us”) value the privacy of individuals who use the NexFyla websites available at https://www.nexfyla.com (the “Site”) and NexFyla products and services (collectively with the Site, the “Services”).
This Privacy Policy explains how we collect, use, protect, and share information from users of our Services (“Users,” “you,” or “your”). Beyond the Privacy Policy, your use of our Services is also governed by our Terms of Service.
1. Information We Collect
We collect information in several ways when you interact with our platform:
A. Information You Provide Voluntarily
- Account & Contact Details: Full legal name, email address, telephone number, international physical address, company name, and login credentials.
- Corporate Incorporation Data: Intended U.S. company name, formation state, business objective, registered agent selections, and corporate ownership structure.
- Customer Identification (KYC/CIP): Passport scans, government-issued photo IDs, proof of residential address (utility bills or bank statements), and tax identification numbers (SSN/ITIN where applicable).
- Payment & Billing Data: Payment card details, billing address, and transaction identifiers, processed securely via PCI-DSS certified payment processors (Stripe, Razorpay).
B. Information Collected Automatically
When you browse our Site, we automatically log browser type, operating system, IP address, device fingerprints, referring URLs, and page navigation patterns through security and session cookies.
2. How We Use Your Information
We process collected information for the following legitimate business purposes:
- Filing official corporate charters, Articles of Organization, and Articles of Incorporation with state Secretaries of State.
- Submitting federal tax identification applications (IRS Form SS-4) and certified tax returns (IRS Form 5472 / 1120).
- Executing statutory Know Your Customer (KYC) and Anti-Money Laundering (AML) sanctions checks in compliance with the USA PATRIOT Act and FinCEN regulations.
- Providing ongoing registered agent representation, statutory legal mail scanning, and annual franchise report alerts.
- Operating, maintaining, enhancing, and securing our digital client portals and payment gateways.
3. How We Protect Your Information
NexFyla implements enterprise-grade technical, physical, and organizational security measures to protect your corporate and personal data:
- End-to-end encryption in transit via TLS 1.3 and at rest utilizing AES-256 encryption vaults.
- Strict role-based access control (RBAC) ensuring only authorized compliance personnel access sensitive KYC identification documents.
- Regular third-party vulnerability scans, automated dependency audits, and continuous security monitoring.
4. International Data Transfers & Global Privacy Rights
NexFyla operates internationally with corporate presence in the United States and India. When personal data originates in the European Economic Area (EEA), United Kingdom, or Switzerland, transfers to the United States are governed by Standard Contractual Clauses (SCCs) pursuant to GDPR Article 46.
Depending on your jurisdiction (including rights under EU/UK GDPR and California Consumer Privacy Act CCPA/CPRA), you have the right to request access to, correction of, portability of, or deletion of your personal data, subject to statutory corporate record-keeping requirements.
5. Data Retention & Deletion
We retain corporate formation records, stamped state certificates, and IRS tax correspondence for the duration of your active business relationship plus mandatory statutory retention periods (generally seven years for corporate and tax records under U.S. federal and state law).
6. Contact & Legal Entities
For any privacy inquiries or to exercise your statutory data protection rights, contact our Data Protection Officer at [email protected] or write to:
Nexfyla LLC
212 N. 2nd St. STE 100, Richmond, KY 40475, United States