Investors: you pay the company. Not StateCF. Offerings are limited to Florida residents.
Legal
StateCF (a DBA of Sprowtt Inc.) collects the information needed to operate a Florida Chapter 517 intermediary: account details, Florida residency attestations and identity seals (hashes, not images), investment brackets and subscriptions, issuer filings and documents, discussions, conference schedules, and the activity records the statute requires us to keep.
We use it to run the portal, to meet OFR record-keeping duties, and to send the notices you asked for. We do not sell investor or issuer lists. A company sees your name, email and activity on its offering only once you are one of its investors in that offering: you have reserved shares, subscribed, or hold its shares. Until then it sees you only within its totals, and it never sees your IP address. Service providers (email delivery, hosting, AI review of issuer content, optional accreditation verification) process data only on our instructions.
Your investors belong to your company. They're nobody else's investors. The personal information of a person who invests in or reserves shares in a company's offering on StateCF can be seen by:
StateCF does not sell investor lists, does not give one company's investors to another company, and does not use one company's investors to promote another company's offering. A question or comment you post on a company's discussion board is shown, with your display name, to other signed-in users who open that board.
When you open a company's deal room we record how it was used: which sections you opened and how long they were open, which documents you opened, which buttons you pressed, and how far through a video you reached. If you go on to subscribe, those records are linked to that subscription.
We do this for two reasons, and only these two. It tells the company which parts of its own material investors read and where they stop, so it can improve them. It tells StateCF whether a deal room is working as it should.
What we do not do with it: we do not sell it, we do not use it to advertise to you, and we do not use it to decide what to show you or to suggest an investment. StateCF is an intermediary and does not make investment recommendations.
If you only look at a company's offering — open its deal room, a section or a document — the company sees you only within totals across all its visitors, such as how many people opened a document and where visits tended to end, never your name, email or IP address. If you reserve shares in, subscribe to, or hold shares of that company, it sees your name, email and activity on its own offering, but still never your IP address. StateCF staff can see individual visits, because someone has to be able to check that the records are right.
Staff activity is not recorded this way. If you would rather we did not keep these records for you, write to info@statecf.com and we will exclude your account.
If you ask StateCF to contact you through a form on the website, such as a request for a walkthrough for your company or your law firm, we keep what you give us: your name, your company or firm, your work email and, if you give them, your phone number, your Florida Bar number, the amount your company is thinking of raising and your answers to any self-check on the form. We also keep the page you were on, the consent wording you agreed to and when, and whether you confirmed your email address.
We use it only to reply to you and to tell you about StateCF's own services. We do not sell it, and we do not give it to any other organization. You can opt out at any time with the unsubscribe link in our emails or by writing to info@statecf.com; your request stays in our records, marked as opted out. The IP address a request came from is kept to stop abuse of the form and is seen only by StateCF staff.
Records required by Chapter 517 are retained after your account closes. You can update notification settings and read every agreement you accepted under Profile → Agreements.
Questions: info@statecf.com · Sprowtt Inc., 3030 N Rocky Point Dr W, Suite 150, Tampa, FL 33607.
The site runs on a private virtual server with its own processing, memory, storage and IP address, separate from other customers' sites, and the hosting network has always-on protection against denial-of-service attacks.
The server sits in a U.S. data center whose operator holds SOC 2 Type II and ISO 27001 certification and PCI DSS compliance, with security staff on site around the clock, biometric or multi-factor entry, camera coverage, backup power and redundant cooling. These certifications belong to the data center facility; they are not a certification of StateCF.