GREY TAURUS LLC — PRIVACY POLICY

Effective Date: August 27, 2026

1. Information We Collect

Through the intake system, we collect:

• Identity information: legal name, email address, phone number.
• Business information: desired business names, entity preferences, business history, revenue information.
• Self-reported credit information: approximate credit score range, credit bureau, general credit description, and your preferences regarding credit-related support. We do not pull your credit report ourselves — any credit report is obtained by you directly through a third-party service, at your election.
• Funding objective information: target funding amount, timeframe, and personal-guarantee preference.
• Documents and photos you choose to upload (e.g., bank statements, tax documents, business photos).
• Payment information, processed by our third-party payment processor (Stripe). We do not store your full card number.
• Technical/audit information, including IP address, browser/device information, and timestamps, captured specifically at the time you sign a Services Agreement, as part of the electronic-signature audit trail described in that Agreement.

2. How We Use Your Information

We use the information you provide to:

• Assess your business-infrastructure and funding-readiness needs and prepare a proposed engagement (Cost Summary).
• Deliver the services described in a signed Services Agreement, once you accept one.
• Process payment for accepted services.
• Communicate with you about your submission, proposal, or engagement.
• Refer you, at your election, to third-party services (a credit-reporting service, or a credit-improvement partner) — only when you affirmatively choose that option.

We do not sell your information.

3. How We Store Your Information

Your submission, including uploaded documents and photos, is stored on infrastructure operated by Grey Taurus (a self-hosted database and object storage system), not shared with a third-party data broker. Access is limited to Grey Taurus staff involved in reviewing and fulfilling your engagement.

4. Third-Party Sharing

We share information only as follows:

• Stripe, to process payment, receiving only the information necessary to complete a transaction.
• Our email delivery provider (Resend), to send you and our internal team notifications about your submission — receiving your email address and the content of that specific notification only.
• IdentityIQ, only if you click through to that service yourself — at that point, information you provide to IdentityIQ is governed by IdentityIQ's own privacy policy, not this one.
• A credit-improvement referral partner, only if you affirmatively opt in to that referral, and only the information necessary to make that referral.
• As required by law, or to protect the rights, property, or safety of Grey Taurus or others.

All third-party service providers are subject to data protection obligations at least as protective as those set forth in this Policy.

5. Data Retention

We retain your information for seven (7) years from the date of completion of the engagement (or from the last communication if no engagement occurred), or for such longer period as required by law, after which we securely delete or anonymize it, except for records necessary to demonstrate our compliance with this Policy. This includes the electronic-signature audit trail for any signed Agreement, retained for the duration required by applicable record-keeping obligations. You may request deletion of your information as described in Section 6, subject to our need to retain records of a completed paid engagement.

6. Your Choices

You may request access to, correction of, or deletion of the personal information you've submitted by contacting us using the information in Section 11. We will respond within a reasonable time. Deletion requests for information tied to an active or completed paid engagement may be limited where we have a legal or contractual obligation to retain records.

California Residents. If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the third parties with whom it is shared, as well as to request deletion (subject to exceptions). To exercise these rights, contact us via the information in Section 11. We do not sell personal information and have not done so in the past 12 months.

7. Data Security

We apply reasonable administrative and technical safeguards to protect your information, including access controls on our internal systems and encrypted transmission of data submitted through the Service. No system is completely secure, and we cannot guarantee absolute security.

8. Data Breach Notification

If we become aware of a breach of security compromising your personal information, we will notify you and take steps consistent with applicable law, within 30 days of discovery, unless a law enforcement agency requests a delay.

9. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect information from anyone under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date above.

11. Contact

Questions about this Privacy Policy, or requests regarding your information, can be directed to greytaurus718@gmail.com.

International Users. If you are located outside the United States, please note that your information may be transferred to and processed in the United States. By using our Service, you consent to such transfer.