Back to home

Privacy Policy · FORA (Foreign as a Service)

Last updated: August 2, 2026

This Privacy Policy describes how FORA (FOREIGN AS A SERVICE), hereinafter "FORA" or "CONTROLLER," collects, uses, stores, and shares the personal data of its clients and users ("DATA SUBJECT"), in accordance with the Brazilian General Data Protection Law (Lei nº 13.709/2018, LGPD), the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws depending on the DATA SUBJECT's country of residence.

1. Personal Data Collected

1.1. Contact data: full name, email, phone number, country of residence.

1.2. Identification and address data: date of birth and full address (country, state, city, street, postal code), collected after purchase to enable the LLC filing and the opening of a bank account with partner institutions.

1.3. Data related to the company to be formed: desired company name, business segment/category, business description.

1.4. Payment data: processed directly by Stripe Inc.; FORA does not store the DATA SUBJECT's full credit card number.

1.5. Uploaded files: for clients who purchase website, logo, brand identity, and photography services.

1.6. Browsing data: cookies and similar technologies for analytics and marketing purposes (e.g., Meta Ads, Google Analytics), when and if used.

2. Data Collection Regardless of Purchase Completion

2.1. When filling in contact details at checkout (name, email, phone), this data may be stored by FORA even if the DATA SUBJECT does not complete payment. This collection serves to enable later contact, including, without limitation: (i) assistance in resuming an incomplete purchase; and (ii) sending marketing communications about FORA's services. The DATA SUBJECT may request deletion of this data at any time, under Clause 6.

3. Purpose of Processing

3.1. Personal data is processed for the following purposes: (i) performance of the purchased services; (ii) communication about order progress; (iii) compliance with legal, accounting, tax, and regulatory obligations, including before authorities in the United States and Brazil; (iv) fraud prevention and defense in the event of a payment dispute; (v) marketing and remarketing activities, subject to the DATA SUBJECT's right to object.

4. Data Sharing

4.1. FORA shares personal data, to the extent strictly necessary to provide the Services, with: (i) the Registered Agent in the United States; (ii) partner banking institutions, for account-opening purposes; (iii) Stripe Inc., for payment processing; (iv) Google LLC, when professional email or Google Business Profile services are purchased.

4.2. FORA does not sell its clients' personal data to third parties for purposes unrelated to providing the Services.

5. Storage and Security

5.1. Personal data is stored on infrastructure with technical and administrative security measures consistent with usual market standards, including restricted access control and encryption in transit.

6. Data Subject Rights

6.1. Data subjects in Brazil: under LGPD, the DATA SUBJECT has the right to confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, and withdrawal of consent.

6.2. Data subjects in the European Union and United Kingdom: under GDPR, the DATA SUBJECT has the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing, and not to be subject to automated decisions that produce significant legal effects, as well as the right to lodge a complaint with the competent data protection authority.

6.3. Data subjects residing in California: under CCPA, the DATA SUBJECT has the right to know what personal data is collected, to request deletion of their data, to opt out of the sale or sharing of their data (FORA states that it does not sell personal data, per Clause 4.2), and not to be discriminated against for exercising these rights.

6.4. The rights set out in this Clause may be exercised by contacting the channel indicated in Clause 9, regardless of the DATA SUBJECT's country of residence.

7. Data Retention

7.1. FORA retains client and lead data for as long as necessary to fulfill the purposes described in this Policy, including the ongoing provision of Services, compliance with legal, accounting, and tax obligations, defense in the event of a payment dispute (Clause 3.1, item iv), and maintenance of the business relationship — which, in practice, may amount to an extended period for as long as that relationship or purpose continues.

7.2. If the DATA SUBJECT requests deletion of their data and no legitimate purpose or legal obligation justifies retaining it, FORA will comply with the request under applicable law.

8. Cookies

8.1. The Platform may use cookies and similar technologies to improve the user experience and measure the effectiveness of marketing campaigns. The DATA SUBJECT can manage cookie use in their browser settings.

9. Changes and Contact

9.1. This Policy may be updated periodically; occasional review is recommended.

9.2. To exercise the rights set out in this Policy or ask questions: hello@startfora.com.