This policy explains what personal data BorderlessFilings collects, why we use it, who we share it with, how long we keep it and what rights you have. It applies to our website, our client portal and our filing services. It was last updated on 27 September 2026.
Who we are
BorderlessFilings is operated by 95 Solutions LLC, a US limited liability company owned by Muhammad Mustafa. 95 Solutions LLC is the controller of your personal data for the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws. You can contact us about anything in this policy at support@borderlessfilings.com.
The personal data we collect
Data you give us
- Account data: your name, email address, country, and phone or WhatsApp number if you choose to give one, plus your password (stored only as a one-way hash).
- Order and intake data: the answers you give for a service, such as company names and details, the names, addresses, dates of birth and nationalities of owners, members, directors and shareholders, and details of your business activity.
- Identity documents: copies of passports or other ID, and proof of address, where a filing or agency requires them.
- Company and tax identifiers: for example an EIN, ITIN, Social Security number, company number, Unique Taxpayer Reference (UTR), VAT number or government authentication codes, and letters from agencies that contain them.
- Financial information needed for a filing: for example transaction details for a Form 5472, bank statements or records for annual accounts and tax returns.
- Payment records: invoices, amounts, dates, the payment method and the transaction reference. Card payments are handled by PayPal (and by Stripe if we add it); we never receive or store your full card number.
- Messages: messages you send through the portal, the contact form or by email, and our replies.
Data collected automatically
- Technical and security data: our hosting provider's servers log IP addresses, browser details and requests, as almost all web servers do. Our own system records sign-ins and sensitive actions, and uses a hashed (scrambled) form of your IP address to apply rate limits.
- Analytics: our cookie-free analytics record the page viewed, the referring website, device type, browser, operating system and an approximate country. The country is worked out from your IP address, but the IP address itself is not stored. Visits are counted with a code that changes every day and cannot be used to follow you over time or across other websites.
Data about other people
Filings often need details of other people, such as co-owners or directors. If you give us their data, you confirm that you are allowed to do so and that you have told them it will be used to prepare and submit the filing, and pointed them to this policy.
We do not ask for data about health, religion, ethnicity, political opinions or other special categories. If a document you upload happens to contain such information, we use it only as part of the document needed for the filing.
How we use your data and our legal bases
| Purpose | Legal basis (GDPR and UK GDPR) |
|---|---|
| Creating and running your account and portal | Performance of our contract with you |
| Preparing, submitting and tracking the filings you order, and delivering your documents | Performance of our contract with you |
| Taking payments, issuing invoices and handling refunds | Performance of our contract; legal obligation (accounting and tax records) |
| Order emails, portal messages and replies to your questions | Performance of our contract; our legitimate interest in answering people who contact us |
| Deadline reminders for companies you add to your portal | Performance of our contract (part of the service); you can turn reminders off at any time |
| Keeping the site and your data secure, preventing fraud and identity misuse | Our legitimate interests in security and fraud prevention; legal obligation where it applies |
| Cookie-free analytics to understand which pages are useful | Our legitimate interest in improving the site, using data that does not identify you |
| Keeping records and responding to authorities, and defending legal claims | Legal obligation; our legitimate interest in establishing or defending legal claims |
| Marketing emails about new services | Your consent, only if you opt in. We do not send marketing emails otherwise. |
Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (see "Your rights" below). We do not make decisions about you that are based solely on automated processing and that have legal or similarly significant effects.
If you do not give us the information a filing requires, we cannot complete that filing. Government forms set most of what is required.
Who we share your data with
We share personal data only as needed to provide our services, and we never sell it or share it for advertising.
- Our filing partner: a specialist company that prepares and submits filings for us. It receives only the information and documents needed for your order, through time-limited, order-specific links, and may use them only to provide the service.
- Government agencies you ask us to file with: for example the IRS, a US state office, Companies House or HMRC. What these agencies do with your data is governed by their own rules, and some filings, such as a company's register entries at Companies House or a US state, become public records.
- Payment processors: PayPal (and Stripe if we add it) for card and PayPal payments, and the banks, Wise or Payoneer when you pay by transfer. They act under their own privacy policies.
- Our email hosting provider: which carries emails between you and us, including order and reminder emails.
- Our website hosting provider: which stores our site, database and encrypted documents.
- Professional advisers and authorities: where we must by law, or to establish, exercise or defend legal claims.
- A buyer or successor: if the business is sold or reorganized, the new owner may receive your data, subject to this policy.
International transfers
95 Solutions LLC is a US company, and your data is processed in the United States and in the other countries where our providers and filing partner operate. Filings with US agencies necessarily send data to the US, and filings with UK agencies send it to the UK. These countries may not have the same data protection laws as yours.
When we transfer personal data out of the European Economic Area or the UK, we rely on one of the safeguards the law allows: an adequacy decision for the destination country, standard contractual clauses approved by the European Commission (with the UK addendum or UK agreement where needed), or, for filings you ask us to make with a foreign agency, the fact that the transfer is necessary to perform our contract with you. You can ask us for more information about the safeguard that applies to a transfer.
How long we keep your data
- Documents you upload: deleted automatically a set period after your order is completed (30 days unless we tell you otherwise when you order), unless you ask us to keep them longer for an ongoing service or we need them to deal with a query from an agency.
- Documents we deliver to you: such as certificates and filed forms, kept in your portal while your account is open so you can download them again. You can ask us to delete them sooner.
- Account and order records: kept while your account is open. When you close your account, we delete or anonymize them, except what we must keep by law.
- Invoices, payment records and records of the filings we made: kept for as long as tax, accounting and company law requires, and for as long as needed to deal with possible legal claims.
- Messages: kept with your account, or for contact form messages, as long as needed to answer and follow up.
- Analytics: page view records are deleted after about 13 months.
- Security records: kept only as long as needed for security, and sign-in attempt counters are cleared within a day.
How we protect your data
Uploaded documents and intake answers are encrypted with AES-256-GCM and stored in a private folder outside the public website where our host allows it. Downloads are checked against the signed-in client, access for our filing partner is limited and time-bound, our admin area uses two-factor authentication, and sign-ins are rate limited. Our security page describes these measures in more detail.
Your rights
Depending on where you live, you have some or all of these rights over your personal data:
- to be told how we use it (this policy) and to get a copy of it (access);
- to have inaccurate data corrected (rectification);
- to have it deleted (erasure), where we have no legal reason to keep it;
- to restrict how we use it while a complaint is resolved (restriction);
- to object to uses based on our legitimate interests, and to object at any time to direct marketing;
- to receive the data you gave us in a common, machine-readable format, or have it sent to someone else (portability);
- to withdraw consent at any time, where we rely on consent, without affecting what we did before.
To use any of these rights, send a message from your portal or email support@borderlessfilings.com. We may need to confirm your identity, usually by asking you to make the request while signed in. We reply within one month, and tell you if we need longer for a complex request, as the law allows. There is normally no charge.
Deleting data we have already filed with a government agency is outside our control: the agency keeps its own records under its own rules.
Cookies
We use only the cookies needed for the site to work:
- a session cookie that keeps you signed in to your portal while you use it, and protects forms against misuse;
- if you choose "keep me signed in", a cookie limited to the portal that keeps you signed in on that device for up to 30 days;
- a separate session cookie for our own staff when they use the admin area.
These cookies are strictly necessary, so they do not need your consent. Our analytics use no cookies. When you pay with PayPal, PayPal's checkout may set its own cookies under PayPal's cookie policy.
We do not use Google Analytics or advertising cookies. If we add Google Analytics or another tool that uses cookies or similar technology, we will update this policy to say so and ask for your consent first where the law requires it.
Children
Our services are for adults running a business. We do not knowingly collect personal data from anyone under 18 except where a filing for an adult client needs it, such as a dependent listed on a tax form. If you think a child has given us personal data, contact us and we will delete it.
Changes to this policy
We will update this policy when our services or the law change. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell clients by email or in the portal before it takes effect.
Complaints
If you are unhappy with how we handle your data, please contact us first at support@borderlessfilings.com so we can try to put it right. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work or where you think the problem occurred. In the UK this is the Information Commissioner's Office (ICO); in the European Union it is the data protection authority of your member state.