Privacy Policy
Last updated:
1. Who is responsible
This Privacy Policy explains how EXPRESSFORMATIONS LLC ("Dottie", "we") collects and uses personal information when you use dottieagent.com, app.dottieagent.com and the Dottie agent inside third-party AI assistants.
2. What we collect
Account data: name, email address and profile photo from Google or the email you use to sign in, your language and country.
Company data: company names, members and owners, ownership percentages, addresses, business purpose, identification details required by states or the IRS, and the documents and signatures needed for your filings.
Conversations: the messages you exchange with the Dottie agent and with our support team.
Payment data: payments are processed by our payment provider; we receive the payment status and limited details, never your full card number.
Technical data: basic logs such as IP address, device and browser type, used for security and to keep the Service working.
3. How we use it
To provide the services you order: form and maintain your company, request your EIN, act as registered agent, file annual reports and prefill tax forms.
To run the AI agent: your messages are processed by AI model providers only to generate Dottie’s responses.
To bill you, send reminders about deadlines and renewals, answer support tickets, prevent fraud and comply with legal obligations.
We do not sell your personal information and we do not use it for third-party advertising.
4. Who we share it with
Government agencies (state offices and the IRS), strictly as needed for the filings you request.
Service providers acting on our behalf and under confidentiality obligations: cloud hosting, payments, email delivery, AI model providers and the operations team that processes filings for Dottie.
Authorities when required by law.
5. International transfers
Your information is processed in the United States and in other countries where our providers operate. We use safeguards required by applicable law for these transfers.
6. How long we keep it
We keep your information while your account is active and afterwards for as long as needed to meet legal, tax and record-keeping obligations related to your company. Drafts started from ChatGPT or Claude that are never linked to an account are deleted automatically 30 days after they are created.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information, and to object to or restrict certain uses. Write to hello@dottieagent.com or ask Dottie in the app. Some information must be kept to comply with the law.
8. Security
We use encryption in transit, access controls and audited access for our team. Documents are stored privately and shared with you only through temporary secure links.
9. Children
The Service is not intended for people under 18 and we do not knowingly collect their information.
10. Changes and contact
We may update this policy and will notify you of material changes in the app or by email.
Contact: hello@dottieagent.com.
11. Connected AI assistants
Connecting ChatGPT, Codex or another compatible assistant is optional. Dottie shows the requesting application and permissions before you authorize access. The assistant can identify your Dottie account and read only LLC formations already contracted by that account.
Information returned to a connected assistant can include your account ID, name and email; formation and company names, state and status; member names, countries and ownership percentages; business purpose, progress, missing information, deadlines and whether a document needs a signature. The MCP does not return document files, signatures, government identifiers, payment details or internal staff notes.
If you grant write access, the assistant can update supported intake details before operations review begins. Dottie records the account, order, changed field names and time of the update. The plugin cannot create a purchase, change fees, make payments, sign documents or submit government filings.
The assistant provider receives the information returned through the authorized tools and handles it under its own privacy policy and your account settings. Disconnecting Dottie stops future access; it does not automatically delete information already present in conversations with that provider. You can review and revoke connections at app.dottieagent.com/connections.
OAuth access tokens expire after at most one hour, and connections and refresh tokens expire after at most 30 days. Connection requests expire after 10 minutes and authorization codes after one minute. Dottie stores only hashes of tokens and codes. Expired temporary OAuth records are scheduled for daily cleanup. Application registration metadata is retained separately and contains no account password or access token. Disconnecting does not delete your Dottie account or formation records; contact support for a data request.