Privacy Policy
Last updated: June 10, 2026
Who we are
Summit Filings (summitfilings.com) is a self-checkout platform for US business formation, compliance, expansion, and exit services, operated by Prodezk INC, 848 Brickell Avenue, Suite 950, Miami, FL 33131, United States.
This policy covers what we collect, why, who else sees it, and what you can ask us to do about it. Questions: info@summitfilings.com.
What you give us
To place an order: your name, email address, phone number, and the company details the service needs, such as the company name, the state, the entity type, the business address, and what the business does.
To complete a filing: details about the people behind the company, which can include owner names, addresses, ownership percentages, titles, and, where a filing requires them, documents you upload.
When you contact us: whatever you write to us, so we can answer and keep a record of it.
What we collect on our own
Our servers log the usual technical details of a visit: IP address, browser and device, pages viewed, and the page that sent you. We use this to keep the site working, to detect abuse, and to see which parts of the site people use.
We record when you sign in, so an account can be secured and unusual access spotted.
Card details we never see
Payments are handled by Stripe. Your card number is sent to Stripe directly and never touches our servers. We keep only what Stripe tells us about a payment: that it succeeded, the amount, the last four digits, and the card brand, so your receipts and your billing page make sense.
SSN, ITIN, and identity documents
We never write a Social Security Number or an ITIN to our database. Where a filing genuinely requires one, it is passed to the system that prepares that filing and is not retained by us. The same holds for an identity document uploaded for a filing that demands one.
Data we do not hold cannot be taken from us, which is the point of doing it this way.
Why we use your information
To do what you paid for: prepare your filings, submit them, and tell you what happened.
To run the business: take payment, issue invoices and receipts, provide support, keep accounting records, and meet our own legal obligations.
To keep the service safe: verify who is doing what, prevent fraud and abuse, and secure accounts.
To improve the site and, where you have agreed to it, to measure our marketing.
Where the law asks for a legal basis, ours are: performing our contract with you, our legitimate interest in running and securing the service, your consent (for analytics and marketing email), and compliance with legal obligations.
The AI assistant
When you type into Sherpa, the words of that message are sent to an external AI provider whose only job is to work out what you meant: which service you are asking about, which state, whether you are answering a question. The answer you get back is then chosen from text published on this site. Your message is used to interpret it and for nothing else, and we do not use conversations to train anything.
We do not send your account with it. Your name, email, phone number, company, documents, order history and payment details are never included in what goes to the provider. If you are signed in, the assistant is told your first name so it can greet you, and that is used on our side only.
A copy of the conversation is kept for eight days so that if something goes wrong we can read what actually happened rather than guess at it. After eight days it is deleted automatically. Anything shaped like a card number or a tax number is removed before it is stored at all, and it is never linked to your account: a conversation is kept as a conversation, with no name attached to it.
In your own browser the conversation lasts only as long as that session, and pressing the restart arrow or closing the tab clears it from there immediately.
Please do not type an SSN, an ITIN, a password, or a card number into it. Nothing we do needs those in a chat window, and any filing that genuinely requires one asks for it in the secure form instead.
Who we share it with
Government agencies. This is the service, so it is named rather than left to a category. To form, change, maintain, or close a company we submit your information to the state and federal agencies the filing goes to. What they do with it is governed by their rules and not by this policy, and a filing is a public act: company names, addresses, and often the names of officers, members, or registered agents become public record.
Our payment processor, Stripe, also named, because it is the reason your card number never reaches us.
Beyond those, we share with the categories of provider it takes to run the service, each only with what its job needs:
Hosting and infrastructure providers, who run the site and store our database.
Business systems providers, meaning the customer, invoicing, and project tools our team prepares and tracks your filings in.
Email delivery providers, who send your receipts, filing updates, and requests for information.
Identity providers, but only if you choose to sign in with one, and only to confirm the address is yours.
Registered agent and mail partners, where the address service in a state is provided by a partner rather than by us.
Analytics and advertising partners, and only where you consented to those cookies. They see that a browser visited certain pages or completed a purchase, which is how we measure whether an advert worked. They never receive the contents of a filing.
Professional advisers such as our accountants and lawyers, and a buyer or successor if the business is ever sold or reorganised, in which case this policy travels with your information.
Law enforcement and regulators, where we are legally required to, or where it is necessary to protect our rights or somebody's safety.
We name categories rather than companies on purpose. Providers change, and a policy that lists yesterday's vendor is a policy that is quietly wrong. If you want to know exactly who holds your information today, ask us at info@summitfilings.com and we will tell you.
We do not sell your personal information for money, and we never sell or hand over the contents of a filing.
Under California law, letting an advertising partner set a cookie counts as SHARING personal information for cross-context behavioural advertising, and that is what our advertising cookies do when you allow them. You can refuse them in the banner, change your mind at any time in cookie settings, or send a Global Privacy Control signal, which we honour automatically. Refusing changes nothing about the service you get.
Where your information is processed
We are a US company, our providers are largely US companies, and your information is processed in the United States. If you are in the EU, the EEA, the UK, or Switzerland, that is an international transfer, and it happens because it is necessary to perform the contract you asked us to perform: a US filing is made to a US agency.
Where a provider offers standard contractual clauses or a comparable safeguard, we rely on them.
How long we keep it
Filing records, invoices, and the documents behind them are kept for at least seven years. They are the evidence that a filing was made and are needed for accounting, tax, and any question a client or an agency raises later.
Portal accounts are kept while the account exists. Support messages are kept for three years. Server logs are kept for up to twelve months. Analytics data follows the retention window set in our analytics service, which is at most fourteen months.
When you ask us to delete your information, we delete what we are free to delete and keep only what a legal obligation requires us to keep, for as long as it requires.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to send it to you in a portable form. Email info@summitfilings.com and we will reply within 30 days. We verify who is asking before we act, which is protection for you.
If the GDPR or the UK GDPR applies to you, you also have the right to object to processing based on legitimate interests, to ask us to restrict processing, to withdraw consent at any time, and to complain to your data protection authority.
If you are a California resident, you have the rights to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will never treat you worse for exercising a right.
You can turn analytics and advertising cookies off at any time from the cookie settings on this site, and unsubscribe from marketing email from any marketing email.
Cookies and analytics
We use essential first-party cookies to keep you signed in and to remember your language and your cart. Those cannot be turned off without breaking the site.
With your consent, we use an analytics service to understand how the site is used, and advertising pixels from the platforms we advertise on, to measure whether an advert brought somebody here who went on to buy.
None of them run until you allow them. Analytics and advertising storage start denied, the banner is what changes that, and declining keeps them off entirely. You can change the choice at any time in cookie settings.
How we protect it
Traffic to the site is encrypted in transit. Passwords are stored as Argon2id hashes and never in a form we could read. Two-factor authentication is available on portal accounts, and changing a password ends every other session.
Access to client data inside our team is limited to the people who need it to do the work, and what they do with it is logged.
No system is perfectly secure. If a breach ever affects your personal information, we will tell you and the relevant authority as the law requires.
Children
Summit Filings is for adults running businesses. It is not directed at anyone under 18 and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will remove it.
Changes to this policy
We update this policy when what we do changes. The date at the top says when it last changed, and material changes are announced by email or in your portal before they take effect.
Contact
Prodezk INC, 848 Brickell Avenue, Suite 950, Miami, FL 33131, United States. Email info@summitfilings.com.
