Privacy Policy | BorderlessKit

BorderlessKit is a product of Thinking Systems, LLC, a Wyoming limited liability company ("we," "our," "us"), which is responsible for your personal information. This Privacy Policy explains what personal information we collect through borderlesskit.com (the "Site"), why we collect it, who we share it with and the choices you have. For cookies and similar technologies, see our Cookie Policy.

1. Information We Collect

When you book a call. Our scheduling page uses Cal.com. We receive your name, email address, any notes or answers you add, the time you choose, and the campaign tags in the link that brought you to the page (for example utm_source or ref). Calls are held on Google Meet.

When you create an account and order. In the order area under /apply and your dashboard under /dashboard we collect:

your email address; sign-in uses an emailed link, not a password;
order details: your package and formation state, full legal name, country of residence and citizenship, phone number, home address, whether you have an American Express card issued in your country, who will own the company (and, if it's your company, its legal name, country, registration number, registered address, directors and owners of 25% or more), company name choices and a description of the business;
documents you upload after paying: your passport photo page and, if you choose, proof of your home address, and for a company owner its registration certificate and, if you choose, its shareholder register;
when you accepted the service agreement, and which version;
the status of your order, our progress notes and their history, your payment status and any refunds;
the messages, change requests and close-down requests you send us in your dashboard, and our replies.

BorderlessKit accounts are separate from accounts on our other products. Sign-in links expire after five minutes; sessions last up to seven days. To limit abuse, we store short-lived, hashed request identifiers rather than raw IP addresses in the application database.

Documents we give you. Documents we prepare or receive for your company, such as the filed articles of organization and the IRS letter with your company's tax ID, are kept in your dashboard as your company records for as long as you have an account, and are deleted with it.

Your documents. We use your uploaded documents only to prepare your filings and applications, for example to copy your passport details onto IRS Form W-7 and to check your bank applications. They are stored privately and encrypted with Cloudflare, separate from the website, and only BorderlessKit staff can open them. We delete them once your setup no longer needs them, and at the latest 30 days after your setup is complete or your order is cancelled. Upload documents only on your order page; never send them by email.

We do not ask for Social Security or ITIN numbers, payment-card numbers, bank passwords or verification codes. Banks and our partner Certifying Acceptance Agent may still ask to check your identity themselves.

When you pay. Payments are processed by Stripe. We receive the payment amount and status, not your full card details.

When you contact us. We keep the emails you send and our replies.

When you browse the Site. Our analytics tool (Rybbit) records pages viewed, the referring site, browser and device type, approximate location derived from your IP address and when a call is booked, and may record the campaign tags in the link. It does not use cookies and does not record your screen or keystrokes. The Meta Pixel tells Meta when you view a page or book a call (see section 4). Our hosting provider, Cloudflare, processes your IP address and request details to deliver and protect the Site.

2. How We Use Your Information

To hold the call you booked and follow up about it.
To check your order, provide the services you ask for, manage your order and keep you updated.
To process payments and keep the records the law requires.
To understand which pages and campaigns bring visitors and bookings, and to improve the Site.
To keep the Site and your account secure and prevent fraud.

We do not send marketing newsletters. If we start, we will ask before adding you.

3. Legal Bases (EEA, UK and Similar Laws)

Contract: to provide a booked call, your account and the services you request.
Legal obligation: to keep payment and tax records.
Legitimate interests: to measure and improve the Site and keep it secure, and to measure our advertising outside the EU, EEA and UK.
Consent: to use the Meta Pixel for visitors in the EU, EEA and UK, who must turn it on first. You can withdraw consent at any time under “Ad measurement” at the bottom of any page.

4. Who We Share It With

We do not sell your personal information. We share it only with service providers that help us run BorderlessKit:

Cal.com (scheduling) and Google (Google Meet video calls).
Meta Platforms (advertising measurement through the Meta Pixel). Meta may link these events to your Facebook or Instagram account under its own policy. Under some U.S. state laws this can count as "sharing" for advertising; you can limit it as described in our Cookie Policy or by contacting us.
Stripe (payments and yearly upkeep subscriptions).
Cloudflare (website hosting, security, storage of BorderlessKit accounts and orders in D1, and private storage of uploaded documents in R2).
Fastmail (support correspondence). Cloudflare also sends our sign-in emails.
Our own analytics server (Rybbit).

If you engage our done-for-you service, we share the information needed for each step only with the parties involved in that step and as you instruct, such as a state filing office, the IRS, our registered agent provider, our partner Certifying Acceptance Agent or, for yearly upkeep, our partner tax preparer. We share a copy of your passport only with a party that needs it for a step in your setup. Banks and other financial providers receive your information when you apply to them directly.

We may also disclose information when the law requires it, or to protect our rights or someone's safety.

5. International Transfers

Our providers may process your information in the United States and other countries whose data-protection laws differ from yours. Where required, we rely on the safeguards those providers offer, such as standard contractual clauses.

6. How Long We Keep It

We keep booking information for as long as we need it to follow up. We delete uploaded documents as described in section 1. We keep account and order information while you use our services, and afterwards for as long as needed for tax, accounting and legal obligations or to resolve disputes. Analytics data is kept in aggregated reports. You can ask us to delete your information earlier, subject to those obligations.

7. Security

We use access controls, encrypted connections, encrypted storage and limited data collection to protect your information. No system is completely secure, so never send passwords, verification codes or full ID numbers by email.

8. Your Rights

Depending on where you live, you may have the right to:

access the personal information we hold about you;
correct it;
delete it;
object to or restrict how we use it;
receive a copy in a portable format;
opt out of advertising "sharing"; and
complain to your local data-protection authority.

To use these rights, email us at the address below. We will not treat you differently for doing so.

9. Children

Our services are for adults. We do not knowingly collect information from anyone under 18.

10. Changes

We will update this policy when our practices change and revise the date above.

11. Contact Us

Questions or requests about your information: privacy@borderlesskit.com, or Thinking Systems, LLC, 2093 Philadelphia Pike, Claymont, DE 19703, USA.