Multiply Commerce LLC Privacy Policy

Version 1.0 · Last updated October 23, 2026

This Privacy Policy explains how Multiply Commerce LLC ("Multiply," "we," "us," or "our") collects, uses, shares, and protects personal information in connection with:

• our website at www.multiply.energy and any website of ours that links to this Privacy Policy (the "Website"); and
• the Multiply cloud service, including our web application, AI features, and the filing, registered agent, and mail services we provide through it (the "Product").

Use of the Product is governed by our Terms of Service or by a separate signed agreement with us (in either case, the "Agreement"). Capitalized terms used but not defined here, such as "Customer" and "Customer Content," have the meanings given in the Agreement. If this Privacy Policy conflicts with the Agreement, the Agreement controls.

If you have questions, contact us at team@multiply.energy.

Summary of Key Points

• Two roles. For information about our own website visitors, account users, and business contacts, we decide how that information is used. For information our Customers submit about their entities and the people connected to them (Customer Content), we act as a service provider and process it on the Customer's behalf and under the Agreement.
• What we collect. Business contact and account details; information about Customers' legal entities and their owners, officers, directors, managers, and other responsible parties; billing information; and technical data about how the Product is used, including recordings of sessions in the Product.
• Sensitive information. Where a filing requires it, such as an application for an Employer Identification Number (EIN), we collect a responsible party's Social Security number or other taxpayer identification number. We encrypt it and use it only to make the filing the Customer requests.
• Sources. Mostly from Customers and their users. We also collect from public government records, documents and mail received for Customer entities, and service providers who help us deliver the Product.
• Sharing. With the service providers that run the Product, with government agencies when we make filings, and as required by law. Many filings become public record. We do not sell personal information or share it for targeted advertising.
• AI. We use third-party AI models to help process documents and prepare work product. We do not use Customer Content to train AI models, and a Customer must approve filings before we submit them.
• Your rights. Depending on where you live, you may be able to access, correct, delete, or obtain a copy of your personal information. Email team@multiply.energy.

Contents

1. Information We Collect
2. How We Use Information
3. Customer Content and Our Role as a Service Provider
4. How We Share Information
5. Cookies and Analytics
6. Artificial Intelligence Features
7. How Long We Keep Information
8. How We Protect Information
9. Children
10. Your Privacy Rights
11. Additional Information for Residents of Certain US States
12. Additional Information for the EEA, UK, Switzerland, and Canada
13. Changes to This Privacy Policy
14. Contact Us

1. Information We Collect

Information you or your organization provide to us

Account and contact information. Name, business email address, phone number, job title, employer, mailing address, login details, and communication preferences of Customer users and other business contacts.

Entity and governance information. Information about a Customer's legal entities and the people connected to them, such as names, titles, residential or business addresses, ownership percentages, roles (for example, member, manager, officer, director, authorized signatory, or registered agent contact), and signatures. Much of this information is required for formation documents, annual reports, and other government filings.

Taxpayer and identity information. When needed for a filing the Customer requests, a responsible party's Social Security number, Individual Taxpayer Identification Number, or similar identifier, and, for mail services, the information, signatures, and identity documents the US Postal Service requires (for example, for USPS Form 1583), which we or our mail-services partner may collect.

Documents and communications. Documents uploaded to the Product or sent to our intake addresses (such as docs@multiply.energy), mail received on behalf of Customer entities, and messages with our team, including through Slack or other channels a Customer connects.

Billing information. Billing contact and address, invoices, order and transaction history. Card and bank account details are collected and stored by our payment processor, Stripe, and are not stored by us. Stripe's privacy policy is available at stripe.com/privacy.

Information collected automatically

When you use the Website or Product, we collect technical and usage information (which the Agreement refers to as "Usage Data"), including:

• Log and device data: IP address, browser type and settings, operating system, device identifiers, referring URLs, date and time stamps, and error reports.
• Usage data: pages viewed, features used, actions taken in the Product, and performance information.
• Session recordings: recordings of how you use the Product, such as clicks, scrolling, page changes, and what was shown on screen. See Section 5.
• Approximate location: country, region, or city inferred from your IP address. We do not collect precise device location.

Information from other sources

• Public records: entity information from state business registries and other government sources, which we use to set up and keep Customer records current.
• Service providers and partners: filing status, registered agent notices, and mail-handling information from the partners who help us deliver filings and registered agent services.
• Integrations a Customer authorizes: information from tools a Customer connects to the Product, such as cloud storage or messaging apps, limited to what the Customer authorizes.

Information provided to us should be accurate and complete. Customers are responsible for having the right to provide us with information about the people connected to their entities (see Section 3).

2. How We Use Information

We use personal information to:

• Provide the Product: create and secure accounts, authenticate users, maintain entity records, track compliance obligations, prepare and submit filings the Customer approves, provide registered agent and mail services, and deliver notifications.
• Bill and administer: process payments, send invoices and receipts, and manage the Customer relationship.
• Support and communicate: respond to questions, send service and security notices, and send product updates (business contacts can opt out of marketing emails at any time).
• Secure and improve the Product: monitor for fraud, abuse, and security incidents; debug and fix errors; and analyze Usage Data to improve performance and features.
• Comply with law: meet legal, tax, and regulatory obligations; respond to lawful requests; and establish, exercise, or defend legal claims.

We do not use Customer Content for any purpose other than providing the Product to that Customer, as permitted by the Agreement, or as required by law.

3. Customer Content and Our Role as a Service Provider

When a Customer submits information about its entities and the people connected to them, the Customer decides what information to provide and how it is used, and we process that information on the Customer's behalf under the Agreement. For purposes of US state privacy laws, we act as the Customer's "service provider" or "processor" for that information; where the GDPR or similar laws apply, we act as a "processor."

If you are an owner, officer, director, or other person whose information a Customer has submitted, please direct privacy requests to that Customer. If you contact us, we will refer your request to the Customer and help the Customer respond as the Agreement and applicable law require.

Customers that need a data processing agreement can request one at team@multiply.energy.

4. How We Share Information

We share personal information only as described below.

Government agencies and filing offices. To carry out a filing the Customer approves, we submit information to the relevant authorities, such as state Secretaries of State, the Internal Revenue Service, and the US Postal Service. Many filings, such as formation documents and annual reports, become public record, including the names and addresses of officers, directors, managers, registered agents, or other individuals the filing requires. Once filed, that information is controlled by the government agency and we cannot remove it from public records.

Service providers. We use vendors that process information on our behalf under written contracts that limit their use of it. They currently include providers for:

• hosting and infrastructure (Vercel);
• database and authentication (Supabase);
• payments (Stripe);
• transactional email and notifications (Postmark and Knock);
• registered agent, filing, and mail services (Stable);
• AI model services (see Section 6); and
• product analytics, session recording, and error monitoring (PostHog).

At the Customer's direction. With other users in the Customer's account, and with integrations or third parties the Customer chooses to connect or instructs us to share with.

Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of Multiply, our Customers, or others.

Business transfers. In connection with a merger, financing, acquisition, or sale of all or part of our business, subject to confidentiality obligations and this Privacy Policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising. We have not done so in the past twelve months.

5. Cookies and Analytics

We use cookies and similar technologies that are necessary to run the Website and Product, for example to keep you signed in, remember your preferences, and protect against fraud. We also use product analytics and error-monitoring tools to understand how the Product is used and to fix problems.

Session recording. When you use the Product, we record your session: the pages you visit, where you click and scroll, and what is displayed on your screen, which can include information about Customer entities and the people connected to them. Recordings are linked to your account, including your name, email address, and organization, so we can investigate problems you or your organization report. We mask everything typed into form fields, and we mask the Social Security numbers and other personal taxpayer identification numbers displayed in the Product, so they are not captured in recordings. We use recordings only to troubleshoot, secure, and improve the Product, and our analytics provider processes them on our behalf as a service provider.

We do not use advertising cookies or allow third parties to place advertising trackers on the Website or Product.

Most browsers let you block or delete cookies. If you block necessary cookies, parts of the Product may not work.

Do Not Track. Because we do not track users across third-party websites for advertising, we do not change our practices in response to Do Not Track signals. Where required by law, we honor Global Privacy Control signals as an opt-out of sale or sharing, although we do not sell or share personal information.

6. Artificial Intelligence Features

The Product uses AI models to help read and classify documents, extract information, draft documents and plain-language explanations, and automate workflows ("AI Features").

• Providers. We currently use models from Anthropic, OpenAI, and xAI. Inputs to and outputs from AI Features, which may include Customer Content, are sent to these providers to generate results.
• No training on Customer Content. We do not use Customer Content to train AI models, and our agreements with AI providers do not permit them to use it to train their models.
• Human approval. AI output may be inaccurate. Filings and other actions that have legal effect are reviewed and approved by the Customer before we submit them. We do not make decisions with legal or similarly significant effects about individuals solely by automated means.

7. How Long We Keep Information

We keep personal information for as long as the Customer's account is active and as needed to provide the Product, and afterward for as long as required or permitted by law, by the Agreement, or by a Customer's instructions. After the Agreement ends, we delete Customer Content within 60 days of the Customer's request, as the Agreement provides. For example, we may keep filing records and related correspondence to meet legal, tax, and recordkeeping obligations and to resolve disputes.

Taxpayer identification numbers are kept only as long as needed to support the filings a Customer requests. A Customer can ask us to delete them at any time by contacting us, and we delete them when the Customer's account is closed.

When we no longer need personal information, we delete or de-identify it. Information in backups is isolated from further use and deleted on our normal backup schedule.

8. How We Protect Information

We use administrative, technical, and physical safeguards designed to protect personal information. These include encryption in transit, encryption at rest for taxpayer identification numbers and other sensitive fields, access controls limiting who can view sensitive information, and authentication controls on user accounts. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored in the Product.

9. Children

The Website and Product are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact team@multiply.energy and we will delete it.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• know whether we process your personal information and access a copy of it;
• correct inaccurate personal information;
• delete your personal information;
• receive your personal information in a portable format;
• opt out of marketing communications, sale or sharing (we do neither), or certain profiling; and
• not be discriminated against for exercising these rights.

How to make a request. Email team@multiply.energy. Account users can also update much of their information in the Product's settings. If a Customer submitted your information, see Section 3.

Verification and authorized agents. We will verify your identity before acting on a request, using information we already hold where possible. You may use an authorized agent; we may require proof of the agent's authority and may ask you to verify your identity directly.

Appeals. If we deny your request, you may appeal by emailing team@multiply.energy with "Privacy Appeal" in the subject line. We will respond in writing with our decision and reasons. If we deny your appeal, you may contact your state attorney general.

Marketing. You can unsubscribe from marketing emails using the link in any such email. We will still send service-related messages needed to administer your account.

11. Additional Information for Residents of Certain US States

Residents of California and other states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may have the rights described in Section 10, subject to the exceptions in those laws.

In the past twelve months we have collected the following categories of personal information, from the sources described in Section 1, for the purposes described in Section 2:

We use sensitive personal information only to provide the services requested, for security and fraud prevention, and as otherwise permitted by law. We do not use it to infer characteristics about anyone. We disclose each category above to the service providers and government agencies described in Section 4, for the business purposes described in Section 2.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

12. Additional Information for the EEA, UK, Switzerland, and Canada

The Product is designed for US entities, and we store and process information in the United States. If you are in the European Economic Area, the United Kingdom, Switzerland, or Canada, the following also applies.

Legal bases. Where we decide how your information is used, we rely on: performance of a contract (to provide the Product); our legitimate interests (to operate, secure, and improve our business and communicate with business contacts); compliance with legal obligations; and consent, where we ask for it, which you may withdraw at any time. In Canada, we rely on express or implied consent, or on exceptions permitted by law.

International transfers. Your information will be transferred to and processed in the United States, which may not have the same data protection laws as your country. Where required, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

Additional rights. You may also have the right to restrict or object to our processing and to complain to your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk; in Switzerland, the Federal Data Protection and Information Commissioner). We would appreciate the chance to address your concerns first. We will acknowledge complaints within 30 days and keep you informed of the outcome.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will change the "Last Updated" date above, and if the changes are material, we will notify Customers by email or through the Product before they take effect.

14. Contact Us

Email: team@multiply.energy

Mail:
Multiply Commerce LLC
2261 Market Street STE 79870
San Francisco, CA 94114
United States