Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Amerady (amerady.com), operated by 36.941.976 BRUNO DANIEL PETROPOULEAS, Brazilian taxpayer ID (CNPJ) 36.941.976/0001-06, located at Centro, Campinas/SP, Brazil (ZIP 13010-151).

The contact channel for the data protection officer (encarregado/DPO) is contato@amerady.com. Use this address for any question or request about your data.

2. Data collected

Amerady collects only the data needed to provide the service. You provide most of it; some is generated when you use the website or make a payment.

The order and intake form data are required to provide the service: without them, the LLC cannot be formed.

Amerady does not ask for sensitive personal data, such as health information, religion, political opinions or biometrics.

The data collected is:

• When you place an order: name, e-mail, WhatsApp number, chosen plan and state, language, order amounts and exchange rate, the date and time you accepted the Terms and, when available, how you reached the website (for example, the link or campaign that brought you there).
• At payment: payment method, number of installments, amount paid, payment status, transaction identifier and receipt, as reported by InfinitePay. Amerady never sees your full card number.
• In the intake form: full name, date of birth, address, ID document or passport, name options for the LLC and a description of the business.
• For plan-specific services, such as compliance and ITIN: the information required by IRS forms, such as your Brazilian tax identification number (CPF), countries of citizenship and residence, and information about financial transactions between you and the LLC.
• In support: messages exchanged by e-mail and WhatsApp.
• Technical data: IP address, browser and device type, date and time of access, recorded by the website’s infrastructure for security and operation.

3. How the data is used

Amerady does not sell your personal data and does not make automated decisions about you.

If you start an order and do not complete payment, Amerady may contact you about that order, to help you complete it or answer questions. If you do not want to be contacted, just let Amerady know.

The data is used for the purposes below, each with its corresponding legal basis under the LGPD:

• Providing the service: forming the LLC, obtaining the EIN, preparing the documents and delivering the other items in the plan. Legal basis: performance of a contract (art. 7, V).
• Supporting you and communicating about your order, including orders started but not paid. Legal basis: performance of a contract and preliminary procedures at the data subject’s request (art. 7, V).
• Complying with legal and regulatory obligations, such as keeping tax and consumer records and responding to requests from authorities. Legal basis: compliance with a legal or regulatory obligation (art. 7, II).
• Preventing fraud and protecting the website’s security. Legal basis: legitimate interest (art. 7, IX).
• Defending Amerady’s rights in legal proceedings and payment disputes. Legal basis: regular exercise of rights (art. 7, VI).

4. Who the data is shared with

Amerady shares only the data needed for each step, with:

• the Secretary of State, or the equivalent agency, of the chosen state, to form the LLC;
• the IRS, to obtain the EIN and, when the plan includes it, to file returns and apply for the ITIN;
• the U.S. formation and registered agent partner company, to file the formation and receive the LLC’s official mail;
• the partner accountant in the United States, when the plan includes compliance or an ITIN;
• InfinitePay, to process payment;
• Cloudflare, for website hosting and data storage;
• WhatsApp (Meta), for support messages;
• the e-mail provider, to send and receive e-mails;
• public authorities, when required by law or court order, and Amerady’s advisers, such as its attorney and accountant, when needed to comply with the law or defend rights.

5. Public record and the role of each third party

Please note: the LLC’s state filing is a public record. Names and addresses included in the filing may appear in public searches and on websites that republish this information. After the filing, this data is controlled by the state government, and Amerady cannot remove it.

Some third parties process data following Amerady’s instructions, such as the hosting provider. Others, such as government agencies, InfinitePay and the U.S. partners, have their own obligations and also process data under their own rules and policies.

When you apply for an account with a bank or payment platform yourself, you send your data directly to those institutions, which follow their own privacy policies.

If you would like to know the name of each partner your data is shared with, just ask at contato@amerady.com.

6. International data transfers

Because the service consists of forming a company in the United States, your data must be sent there: to the state, the IRS, the formation partner, the registered agent and, where applicable, the partner accountant.

In addition, Cloudflare and other technology providers, such as WhatsApp and the e-mail provider, may store or process data on servers located in other countries, including the United States.

These transfers are made under article 33 of the LGPD: mainly because they are necessary to perform the service you purchased and, for technology providers, under the contractual safeguards they offer. The laws of other countries may protect data differently from Brazilian law.

7. How long the data is kept

Amerady keeps data only for as long as needed for the purposes in this policy and to comply with the law. At the end of each period, the data is deleted or anonymized.

The retention periods are:

• Client data (order, payment, intake form, documents and support messages): for the duration of the service and for 5 years after it ends. Five years is the period Brazilian tax law gives the tax authorities to audit and the period the Consumer Protection Code allows for damage claims; during that time, Amerady needs these records to prove what was done.
• Orders started but not paid: up to 6 months, so you can resume your purchase.
• Technical access logs: up to 6 months, for security purposes.
• If a lawsuit, complaint or payment dispute is pending, the related data is kept until it is resolved.

8. Your rights

Under the LGPD (art. 18), you may at any time:

• confirm whether Amerady processes your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• request portability of your data to another provider;
• request deletion of data processed on the basis of your consent;
• find out which public and private entities your data is shared with;
• be informed about the possibility of not giving consent and its consequences, and withdraw any consent you have given;
• object to processing carried out in breach of the law;
• file a complaint with the Brazilian National Data Protection Authority (ANPD).

9. How to exercise your rights

Send your request to contato@amerady.com. To protect your data, Amerady may ask you to confirm your identity before acting on it.

Requests are handled free of charge, and Amerady responds within 15 days.

Some requests have limits: data the law requires Amerady to keep can only be deleted after the legal period ends, and data already sent to the state or to the IRS is controlled by those agencies.

10. Security

No system is completely secure, but Amerady adopts technical and administrative measures to protect your data. If a security incident occurs that may create a relevant risk or harm to you, Amerady will notify you and the ANPD, as required by the LGPD.

These measures include:

• an encrypted connection (HTTPS) across the entire website;
• access to data restricted to those who need it to provide the service;
• accounts protected with strong passwords and two-step verification;
• card data processed only by InfinitePay, without passing through Amerady;
• sharing with each partner only the data needed for the step it performs.

11. Cookies

The website uses only essential cookies and similar technologies, which are needed for it to work and stay secure. You can block them in your browser settings, but parts of the website may stop working.

Amerady does not use advertising cookies or third-party tracking tools. If it starts using audience analytics or advertising tools, this policy will be updated beforehand, and your consent will be requested where the law requires it.

12. Minors

The website and services are not directed at anyone under 18. Amerady does not knowingly collect data from minors; if it finds that this has happened, the data will be deleted.

13. Residents of the European Union (GDPR)

If you are in the European Union and the General Data Protection Regulation (GDPR) applies to the processing of your data, you also have the rights it provides: access, rectification, erasure, restriction of processing, portability and objection, as well as the right to lodge a complaint with the data protection authority in your country.

Your data is processed mainly because it is necessary to perform the contract with you and on the basis of legitimate interests, such as fraud prevention. Transfers of your data to Brazil and the United States take place because they are necessary to perform the service you purchased.

14. Changes and contact

Amerady may update this policy. The date at the top of this document shows the last update. If a change is significant, you will be notified on the website or by e-mail.

Questions or requests about privacy: contato@amerady.com.