DRAFT - pending professional legal review. Not final. This policy is staged for review and has not been through professional legal review. It does not apply until the service launches. It should be read together with the
Terms of Service and
Refund Policy.
Privacy Policy
State Desk, a service of Altshuler Family Holdings, LLC. Last updated: October 2026.
1. What we collect
- Account information: your name, email address, and plan details when you sign up.
- Entity data you enter: entity names, entity types, formation states, the states where each does business, formation dates, registered agent details, and any deadlines you track. This is business compliance data, and it may include the names of people (for example, registered agents or officers). Enter only data you are authorized to share with us.
- Usage data: pages you visit, checklists you open, and basic technical data (device, browser) needed to operate the service.
- Reminder contacts: to send deadline reminders we store the email addresses of you and any team members or accountants you add as users.
- Cookies: we use session cookies to keep you signed in and basic, privacy-respecting analytics to understand usage. We do not use advertising or cross-site tracking cookies.
- Payments: processed by Stripe. We never see or store your card number; card data goes directly to Stripe under Stripe's privacy policy.
2. How we use data
We use your data to operate State Desk: maintain your account, compute your filing calendar, generate checklists, send reminders and qualification alerts, and improve the service. We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share data only with the service providers listed in Section 3, and only as needed to run the service.
3. Service providers
We use a small set of providers under contracts that limit their use of your data to our instructions:
- Vercel: website and application hosting.
- Stripe: payment processing.
- Resend: transactional email delivery (reminders and alerts).
If this list changes materially, we will update it here and you can ask for the current list at hello@getstatedesk.com.
4. Firm plans and client data
If you use a Firm plan to track entities belonging to your clients, you are the controller of that client data and State Desk acts as your processor, handling it only on your instructions. You are responsible for having each client's authorization before you enter their data. White-label client reports you generate are your responsibility to keep confidential once delivered.
5. Your choices and rights
- Request access, correction, portability, or deletion of your personal data by emailing hello@getstatedesk.com. We respond within 45 days.
- Deleting your account stops all processing immediately: reminders stop and your entity data is removed from our active systems. Backups retain encrypted copies for up to 90 days before they are purged; we do not use backup copies for any active purpose.
- Unsubscribe from marketing emails at any time with the link in the email. Transactional reminders continue while your subscription is active, because they are the service you bought; you can switch them off inside the product if you prefer to check the calendar yourself.
6. Security, breach notification, and retention
We protect data with encryption in transit and at rest, limited internal access, and secure development practices. If a breach exposes your personal data, we will notify you and the relevant authorities as required by law, without unreasonable delay. We retain account and entity data while your account is active and for up to 24 months afterward for fraud prevention, tax records, and legal compliance, then delete it. Backups purge within 90 days as described above.
7. International users
State Desk is operated from the United States and is designed for US businesses. If you use the service from outside the US, your data will be processed in the US.
8. Children
State Desk is a business service and is not directed at children under 13. We do not knowingly collect data from children; if we learn we have, we delete it.
9. Changes
We will post material changes here with a new date at least 30 days before they take effect. Continued use after changes take effect constitutes acceptance.
10. Contact
Privacy questions or requests: hello@getstatedesk.com.