Privacy Policy

Brave Bull™ provides business formation, credit, and launch services under the Business in a Box™ program. Throughout this policy, “we,” “us,” and “our” refer to Brave Bull™.

• Identity and contact details: name, email address, phone number, and mailing address.
• Business formation details: proposed entity name, state of formation, ownership structure, and information required to obtain an EIN.
• Account information: login credentials and activity within the Brave Bull™ Client Portal.
• Payment information: processed and stored by Stripe, our payment processor. We never store full card numbers on our systems.
• Credit-related information you voluntarily submit through the Success Pass™ intake, which is transmitted directly to our credit service provider.
• Technical data: IP address, browser type, device type, and pages visited, collected through cookies and analytics.

• To form your entity, obtain your EIN, and complete the services you purchased.
• To create and secure your Client Portal account.
• To process payments and issue receipts, refunds, and invoices.
• To communicate about your order, your launch progress, and support requests.
• To meet legal, tax, and anti-fraud obligations.
• To improve our services and website performance.

We do not sell your personal information, and we do not share it with advertisers.

We share information only with service providers who help deliver what you purchased: state filing agencies and the IRS for formation and EIN work, Stripe for payment processing, our registered agent and virtual address partners, our telephony and website providers, our credit service provider for Success Pass™ enrollment, and our email delivery provider. Each receives only the information required to perform its role.

We may also disclose information when required by law, subpoena, or to protect against fraud.

Our website and Client Portal are served over SSL/TLS encryption. Portal data is stored in an access-controlled database with row-level security so that each client can only read their own records. Payment card data is handled entirely by Stripe, a PCI-DSS Level 1 certified processor.

We retain formation and financial records for as long as required by tax and corporate record-keeping law, generally seven years. Portal account data is retained while your account is active. You may request deletion of information we are not legally required to keep.

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of information not subject to a legal retention requirement.
• Opt out of marketing email at any time using the unsubscribe link or by emailing us.
• Residents of California and other states with comprehensive privacy laws may exercise the additional rights those laws provide, including the right not to be discriminated against for exercising them.

Our services are intended for adults aged 18 and over. We do not knowingly collect information from children.

If we make material changes we will update the date at the top of this page and, where appropriate, notify active clients by email.