Corply Privacy Policy

1. Scope

This Privacy Policy explains how 0Lumen Labs Corp. d/b/a Corply collects, uses, discloses, retains, and protects information when you visit our websites, create an account, use Corply products, communicate with us, or authorize company formation, filing, document, approval, payment, or support workflows.

This policy applies to Corply's services. It does not apply to websites, portals, banks, registered agents, government agencies, payment processors, identity providers, attorneys, accountants, or other third-party services that operate under their own privacy policies.

2. Information We Collect

• Account and contact information, including name, email address, phone number, login metadata, team membership, role, and support communications.
• Founder and company information, including proposed company names, entity details, addresses, founder names, ownership details, equity context, officer/director/incorporator information, tax and filing facts, and workflow instructions.
• Documents and records you provide or generate, including formation documents, founder approvals, signatures, uploaded files, generated drafts, filing evidence, receipts, audit logs, and company memory records.
• Payment and billing information, including checkout details, transaction IDs, billing status, renewal status, and limited payment metadata. Full card details are processed by payment providers, not stored directly by Corply.
• Usage, device, and security information, including IP address, browser type, device identifiers, session data, pages viewed, product events, error logs, authentication events, and anti-abuse signals.
• AI and automation workflow inputs and outputs, including prompts, extracted facts, summaries, generated drafts, task state, review notes, and operational decisions needed to provide the service.

3. Sources of Information

We collect information directly from you, from other users who invite you or act for the same company, from product usage, from documents you upload, from service providers that support approved workflows, and from public or government sources when needed to complete or verify company workflows.

4. How We Use Information

• Provide, operate, personalize, and improve Corply.
• Prepare, route, review, submit, track, and store company formation, filing, approval, document, registered-agent, EIN, compliance, payment, and support workflows you request or authorize.
• Maintain company records, audit trails, receipts, evidence, deadlines, and workflow history.
• Authenticate users, administer accounts, manage access, prevent fraud and abuse, debug issues, monitor reliability, and protect security.
• Communicate about account activity, support requests, approvals, filings, payments, policy changes, security notices, and service updates.
• Analyze product usage and business performance in aggregated or de-identified form.
• Comply with legal obligations, enforce our Terms of Use, respond to lawful requests, and protect Corply, users, third parties, and the public.

5. AI Providers and Model Training

Corply may use AI providers and automation systems to draft, extract, summarize, classify, check, route, and suggest actions. We use those systems to provide the product and operate approved workflows.

We do not use customer company data, founder documents, uploaded records, or private workflow content to train Corply foundation models or third-party foundation models. When we use AI vendors, we configure and contract for business use cases where customer content is not used to train vendor models.

AI outputs can be incomplete or wrong. Privacy protections do not change your responsibility to review documents, facts, filings, approvals, and instructions before relying on them.

6. How We Share Information

• With service providers that host, secure, analyze, support, or operate Corply, including cloud infrastructure, databases, authentication, payments, email, logging, customer support, analytics, and AI providers.
• With workflow participants you authorize or that are necessary for an approved workflow, including cofounders, company admins, signers, registered agents, filing providers, government agencies, payment processors, banks, counsel, accountants, or other third parties you involve.
• With other users connected to the same company or workspace, according to product permissions and company administration needs.
• With authorities, courts, regulators, or other parties when we believe disclosure is required by law, necessary to protect rights or safety, or needed to investigate fraud, security, abuse, or policy violations.
• In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality protections.

7. No Sale of Personal Information

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws.

8. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, security, fraud prevention, preferences, analytics, and product reliability. You can control cookies through your browser settings, but disabling cookies may prevent parts of Corply from working.

9. Retention

We retain information for as long as needed to provide Corply, maintain company records and audit trails, comply with legal and tax obligations, resolve disputes, enforce agreements, protect security, and operate our business.

Company formation and approval records may be retained longer than ordinary account data because founders, companies, investors, banks, accountants, counsel, and diligence reviewers may later need evidence of what was approved, signed, filed, paid, or received.

10. Security

We use technical, organizational, and administrative safeguards designed to protect information, including access controls, encryption in transit, cloud security controls, logging, and least-privilege operational practices.

No system is perfectly secure. You are responsible for protecting your credentials, limiting access to your account, reviewing invited users, and maintaining your own copies of important company documents.

11. International Users

Corply is operated from the United States and is built for U.S.-connected company workflows. If you use Corply from outside the United States, you understand that your information may be processed in the United States and other jurisdictions where our providers operate.

12. Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain personal information, or to object to certain processing. These rights may be limited where information is needed for company records, legal obligations, security, fraud prevention, or completed workflows.

To make a privacy request, email founders@corply.dev with the subject line Privacy Request and include the email address connected to your Corply account. We may need to verify your identity and authority before acting on a request.

13. Children

Corply is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided information to Corply, contact us so we can review and delete it where appropriate.

14. Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date. If changes are material, we may provide additional notice through the product or by email.

15. Contact

For privacy questions or requests, contact founders@corply.dev.