Privacy Policy
Your privacy is foundational. IntroAlignment handles some of the most sensitive information a family can share — financial structures, estate values, family relationships, and legal architecture. We treat this information with the same discretion we apply to all sovereign matters. This Policy explains what we collect, why, how we protect it, and your rights under Canadian and US law.
Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- AI Systems and Your Data
- Information Sharing
- Data Retention
- Data Security
- Canadian Privacy Rights (PIPEDA)
- US Residents — Your Privacy Rights
- Cookies and Tracking
- Cross-Border Data Transfers
- Children's Privacy
- Changes to This Policy
- Contact and Complaints
1. Who We Are
IntroAlignment is a legal architecture consulting practice operating as part of The Sovereign Economy. We provide document preparation, legal architecture consulting, registered agent services, dynasty trust coordination, entity formation, and legal education to clients in Canada and the United States.
For all privacy matters, our Privacy Officer can be reached at: jordan@introalignment.com
2. Information We Collect
We collect information you provide directly and information generated through your use of our services. This includes:
- Identity information — full legal name, date of birth (where required for state filings or registered agent purposes)
- Contact information — email address, phone number, mailing address, and preferred communication method
- Financial and legal information — estimated estate value, asset descriptions and categories, business ownership details, existing entity structures, debt obligations relevant to architecture planning
- Family and succession information — citizenship and residency status, family structure, beneficiary information, succession goals, and generational wealth planning details
- Payment information — all payment processing is handled by Stripe under their own privacy and security policies. IntroAlignment does not store, transmit, or have access to full payment card numbers
- Portal and communication data — client portal activity, document access logs, email communications, and AI chat interactions with JORDAN and HAZEL
- Technical data — IP address, browser type and version, device type, referring URL, and pages visited, collected automatically when you access our website or portal
- Intake questionnaire responses — all information submitted through our consultation and service intake forms
We collect only information that is necessary to deliver our services or to comply with our legal obligations. We do not collect sensitive personal information such as health data, racial or ethnic origin, political opinions, or religious beliefs unless you voluntarily provide such information in the context of your legal architecture planning.
3. How We Use Your Information
We use the information we collect for the following purposes, each of which is necessary to deliver our services or fulfill a legal obligation:
- To deliver the specific services you have engaged us to provide, including generating architecture documents, coordinating entity filings, managing registered agent obligations, and delivering educational content
- To operate our AI systems — JORDAN and HAZEL — to analyze your situation and generate architecture summaries, compliance analyses, and recommendations
- To coordinate with licensed attorneys, state registered agent authorities, and government filing systems on your behalf
- To send service communications including engagement confirmations, document delivery notifications, compliance deadline reminders, portal access links, and membership renewal notices
- To maintain your compliance calendar and monitor filing deadlines for entities under IntroAlignment management
- To process payments and maintain billing records
- To improve our services, AI systems, and educational content using anonymized and aggregated data only — never using identifiable client data for product development without explicit consent
- To comply with legal obligations including state registered agent reporting requirements, tax obligations, and applicable regulatory requirements
- To detect and prevent fraud, unauthorized access, and violations of these Terms
We do not use your personal information for advertising or marketing to third parties. We do not sell, rent, or trade your personal information. We do not share it with data brokers, marketing platforms, or analytics companies that would use it for their own purposes.
4. AI Systems and Your Data
IntroAlignment uses AI systems — including JORDAN (legal architecture analysis) and HAZEL (dynasty advisory) — to process information you provide and generate architecture documents, summaries, compliance analyses, and educational responses.
When you submit information through our intake forms, consultation forms, or client portal, that information is processed by these AI systems to produce your deliverables. The following commitments govern how your data is used in AI processing:
- Your personal and financial data is not used to train external AI models
- AI processing occurs within controlled, access-restricted environments
- AI-generated outputs are treated as drafts subject to human review before delivery
- We maintain data processing agreements with any third-party AI infrastructure providers governing the protection of your information
- No AI output constitutes legal advice under any circumstances
- AI interactions through the portal are logged and may be reviewed by IntroAlignment staff for quality assurance and compliance purposes
5. Information Sharing
We share your personal information only in the following strictly limited circumstances:
- Licensed attorneys: When your engagement requires attorney review, drafting, or execution, we share relevant documents and information with the coordinating attorney. You will be informed of this sharing as part of your engagement agreement
- State and government authorities: For entity formations, registered agent services, and EIN applications, we submit required information to state agencies, the IRS, and equivalent Canadian authorities as directed by your engagement
- Payment processing: Stripe processes all payments on our behalf under their own privacy policy and PCI-DSS compliance framework. We share only what Stripe requires to process your transaction
- Service delivery contractors: We may engage trusted contractors (document reviewers, compliance coordinators) who access your information solely to assist in delivering your contracted services, under confidentiality obligations no less protective than this Policy
- Legal requirements: We may disclose information if required by applicable law, court order, regulatory authority, or to protect the rights, property, or safety of IntroAlignment, our clients, or others
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of IntroAlignment's assets, your information may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer
We do not share your information with any other parties without your explicit written consent.
6. Data Retention
We retain personal information for the following periods, after which it is securely deleted or anonymized:
- Client engagement files and architecture documents — 7 years from the date of last service delivery, consistent with standard professional practice and limitation periods
- Entity formation and registered agent records — for the life of the entity plus 7 years, or as required by applicable state law, whichever is longer
- Payment and billing records — 7 years for tax, accounting, and regulatory compliance purposes
- Portal access tokens — deleted immediately upon first use or upon expiry (24 hours), whichever occurs first
- Inquiry submissions that did not result in an engagement — 2 years from submission date
- AI interaction logs — 12 months, after which they are anonymized for quality improvement purposes
- Website technical data — 12 months
- Education course access records — duration of active membership or course license plus 2 years
Upon written request, we will delete personal information that is no longer required for legal, regulatory, or contractual obligations, subject to the retention periods specified above.
7. Data Security
IntroAlignment maintains technical and organizational security measures appropriate to the sensitivity of the information we handle, including:
- Encrypted data transmission (HTTPS/TLS 1.2+) for all website, portal, and API communications
- Secure, access-controlled private server infrastructure — not shared hosting
- Time-limited, single-use magic link authentication for portal access — no passwords stored or transmitted
- Role-based internal access controls — only personnel who require your information to deliver services have access to it
- No storage of full payment card numbers — all payment data handled exclusively by Stripe under PCI-DSS
- Regular security reviews of our infrastructure and access controls
No security system is impenetrable. In the event of a data breach that poses a real risk of significant harm to you, we will notify you and relevant regulatory authorities as required by applicable law — within 72 hours of becoming aware of the breach under Canadian law, and within applicable state timeframes under US law. We will provide information about what occurred, what data was affected, and what steps we are taking.
8. Canadian Privacy Rights (PIPEDA)
This section applies to residents of Canada under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including BC's Personal Information Protection Act (PIPA) and Alberta's PIPA.
As a Canadian client, you have the following rights regarding your personal information:
To exercise any of these rights, contact our Privacy Officer at jordan@introalignment.com. We will acknowledge your request within 5 business days and respond substantively within 30 days. If we cannot fulfill your request, we will explain why in writing.
Office of the Privacy Commissioner of Canada: priv.gc.ca | 1-800-282-1376
9. US Residents — Your Privacy Rights
This section applies to all residents of the United States. Rather than enumerate rights state by state — which changes as new state privacy laws take effect — IntroAlignment grants all US residents the full set of privacy rights below, regardless of which state you reside in. This includes rights under the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Texas Data Privacy and Security Act (TDPSA), Montana Consumer Data Privacy Act (MCDPA), Oregon Consumer Privacy Act (OCPA), Utah Consumer Privacy Act (UCPA), Nevada SB220, and all other applicable state privacy laws now in effect or taking effect.
As a US resident, you have the following rights regarding your personal information:
To exercise any of these rights, submit a written request to jordan@introalignment.com with the subject line "Privacy Rights Request" and your full name, email address on file, state of residence, and the specific right(s) you wish to exercise. We will verify your identity before processing your request.
We will respond to verified requests within 45 days. We may extend this period by an additional 45 days where reasonably necessary, with notice. We will not charge a fee for requests unless they are manifestly unfounded, excessive, or repetitive.
You may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization and may verify your identity directly.
If you believe we have not responded to your request appropriately, you may file a complaint with your state's Attorney General or applicable data protection authority.
10. Cookies and Website Tracking
Our website uses only technically necessary cookies — those required for basic website functionality and client portal session management. We do not use advertising cookies, behavioral tracking cookies, retargeting pixels, or third-party analytics services that share your browsing data with outside parties.
We do not participate in cross-site tracking, interest-based advertising networks, or data broker ecosystems. The only third-party service that may set cookies through our website is Stripe, for payment processing purposes, governed by Stripe's own privacy policy.
You may disable cookies in your browser settings. Disabling cookies will affect client portal functionality, including the magic link authentication system.
11. Cross-Border Data Transfers
IntroAlignment serves clients in both Canada and the United States. Your information may be processed and stored on servers located in either country. For Canadian clients whose data is transferred to the United States for processing, we maintain contractual protections equivalent to Canadian privacy law standards. For US clients whose data may be processed in Canada, equivalent protections apply.
By engaging our services, you acknowledge and consent to cross-border transfers of your information as necessary to deliver our services. We will not transfer your information to jurisdictions that do not provide adequate privacy protections without your explicit consent and appropriate safeguards.
12. Children's Privacy
IntroAlignment's services are designed for and directed to adults aged 18 and older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at jordan@introalignment.com and we will promptly delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will notify active clients of material changes via email to the address on file at least 14 days before the changes take effect. Non-material clarifications take effect upon posting. The "Last updated" date at the top of this page always reflects the most recent revision.
If you disagree with a material change to this Policy, you may request deletion of your personal information (subject to legal retention obligations) or terminate your engagement before the effective date of the change.
14. Contact and Complaints
For all privacy inquiries, access requests, correction requests, deletion requests, or complaints about how we handle your personal information:
Privacy Officer — IntroAlignment
jordan@introalignment.com
Part of The Sovereign Economy
We will acknowledge all privacy inquiries within 5 business days and respond substantively within the timeframes specified in this Policy.
Canadian clients:
Office of the Privacy Commissioner of Canada
priv.gc.ca | 1-800-282-1376
US clients — California:
California Privacy Protection Agency: cppa.ca.gov
US clients — all other states:
Contact your state Attorney General's office for privacy complaints. Links to all state AG offices are available at naag.org.
This Privacy Policy was last reviewed and updated in March 2026. IntroAlignment recommends that you retain a copy of this Policy for your records.