Privacy Policy

This Privacy Policy explains how Matthew7 Enterprises LLC, doing business as Intrepid Citizen (“Intrepid Citizen,” “we,” “our,” or “us”), collects, uses, stores, protects, and shares personal information when you visit intrepidcitizen.com (the “Site”), engage our services, or use our secure client portal (together, the “Services”).

Intrepid Citizen is a premier advisory firm specializing in residency and citizenship by investment. Our work requires us to handle sensitive personal, financial, and identity documents on behalf of our clients and their family members. We take this responsibility seriously and have designed the practices described in this policy accordingly.

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide directly

When you contact us, request a program guide, or engage our services, you may provide information such as your name, email address, phone number, country of residence, the residency or citizenship programs you are interested in, and the contents of messages you send us through the Site or client portal.

Client engagement information

When you become a client, we collect the personal, financial, identity, and supporting documentation required to evaluate and submit your application for residency or citizenship. This commonly includes legal name, date of birth, place of birth, nationality, passport details, photographs, biometric data, criminal record certificates, marriage certificates, proof of funds and source of wealth documentation, professional credentials, health and insurance information, and other materials specific to the program you have selected.

Information about family members and dependents

Residency and citizenship applications frequently include the primary applicant’s spouse, children, and other dependents. For these family members, we collect documents and information necessary for the application, provided to us by the primary adult applicant.

Information about minors.When a minor is included as a dependent on a family application, we collect the minor’s full legal name, date of birth, passport details, photograph, and birth certificate. This information is provided to us by the minor’s parent or legal guardian as part of the family application. Minors do not access the Site or client portal directly, and we do not knowingly collect information from minors outside of this context. If you believe we have inadvertently collected information about a minor outside of this context, please contact us so we can delete it.

Information collected automatically

When you visit the Site, our service providers automatically collect certain technical information, including your IP address, browser type and version, device information, operating system, referring URLs, pages viewed, time spent on pages, and similar usage data. We use Google Analytics 4 and Microsoft Clarity for this purpose. Microsoft Clarity may record mouse movements, clicks, and scroll behavior to help us understand how visitors use the Site.

Cookies and similar technologies

The Site uses cookies and similar technologies that are necessary for the Site to function (such as authentication cookies for the client portal) and for analytics. You can control cookies through your browser settings; disabling certain cookies may affect site functionality, including login.

2. How We Use Your Information

We use personal information to:

• Provide our advisory services, including evaluating, preparing, submitting, and managing your application for residency or citizenship in your chosen jurisdiction
• Operate, maintain, and improve the Site and client portal, including delivering documents you upload or download
• Communicate with you about your engagement, send transactional emails (such as account creation, magic-link login, password reset, and document notifications), and respond to your inquiries
• Deliver requested program guides and, on an occasional basis, send marketing communications about Intrepid Citizen’s services, program updates, and relevant regulatory developments. You can opt out at any time (see Section 6)
• Comply with legal, regulatory, and contractual obligations, including know-your-customer (KYC), anti-money-laundering (AML), and immigration program requirements
• Detect, investigate, and prevent fraud, security incidents, and misuse of the Services
• Analyze usage of the Site to understand which content and programs visitors find useful, and to improve our content and user experience

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

Service providers

We use a small set of trusted technology service providers to operate the Services. These providers process information on our behalf under contractual obligations of confidentiality and security:

• Vercel– website and application hosting
• Neon– database hosting (client portal account records, messages, and lead capture data)
• Dropbox– secure document storage for client files
• Resend– transactional email delivery (login links, password resets, notifications)
• Calendly– meeting scheduling
• Google Analytics and Microsoft Clarity– website analytics

Government and immigration authorities

To submit and progress a residency or citizenship application, we share client information with the relevant immigration, residency, and citizenship authorities of the country in which the application is being made. This is required for the application to proceed and is a fundamental purpose of the engagement.

Program operators and partners

Many residency and citizenship programs require involvement of third parties such as investment fund managers, real estate developers, regulated escrow agents, citizenship-by-investment program offices, or local counsel. Where a specific program requires it, we share client information with those parties to the extent necessary to complete the application.

Authorized professional advisors

With your authorization, we may share information with professionals working on your behalf, such as your tax accountant, attorney, or financial advisor.

Legal and compliance

We may disclose information when required by law, court order, subpoena, or regulatory request, or when necessary to comply with KYC/AML obligations, protect our rights, enforce our agreements, or prevent fraud or harm.

4. Data Retention

We retain personal information for as long as necessary to provide the Services and to comply with our legal, regulatory, and professional obligations.

• Active clients: we retain client documents and account information for the duration of our engagement.
• Former clients: after the engagement ends, we retain client documents for a period of five (5) years to comply with professional, regulatory, KYC/AML, and tax recordkeeping obligations. After this period, we delete or anonymize the information unless a longer retention period is required by law.
• Lead and inquiry data: contact form submissions and program guide download records are retained while the lead or client relationship is active, and deleted upon request.
• Analytics data: retained in accordance with the default settings of our analytics providers (typically 14 months for Google Analytics 4 and shorter for Microsoft Clarity).

If a client portal account is deleted, the associated database record and messages are removed, but documents stored in Dropbox are preserved for the retention period described above to satisfy our recordkeeping obligations.

5. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. These include transport-layer encryption (HTTPS) for all communications with the Site, encryption at rest for stored documents and database contents, salted password hashing for portal accounts, single-use and time-limited login and password-reset tokens, restricted access to client documents on a need-to-know basis, and audit logging of sensitive administrative actions.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

6. Your Choices

Marketing communications

If you receive marketing emails from us, you can opt out at any time by replying to the email with “unsubscribe” or by contacting us at info@intrepidcitizen.com. We will continue to send transactional and engagement-related communications necessary to provide the Services (for example, login links, document notifications, and updates about your active application).

Account information

Active clients can update certain account information directly from within the client portal. For any other changes, contact us at info@intrepidcitizen.com.

Access, correction, and deletion

You can request access to, correction of, or deletion of personal information we hold about you by contacting us at info@intrepidcitizen.com. We will respond within a reasonable timeframe, subject to our legal and professional retention obligations described in Section 4.

Cookies and analytics

You can control cookies through your browser settings. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available from Google.

7. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), provides you with specific rights regarding your personal information. These include:

• The right to know what categories of personal information we collect, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it
• The right to request access to the specific pieces of personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of personal information, subject to certain exceptions including our legal and professional retention obligations
• The right to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising purposes
• The right not to be discriminated against for exercising these rights

To exercise these rights, contact us at info@intrepidcitizen.com. We will verify your identity before responding to your request, typically by confirming details only the account holder would know.

8. International Transfers

Intrepid Citizen is based in the United States and our service providers are predominantly US-based. By using the Services, you understand that your information will be processed in the United States. When we submit applications on your behalf, your information will additionally be transferred to the country whose residency or citizenship you are pursuing, and may be processed by its government authorities and program operators in accordance with that country’s laws.

9. Children

The Site and client portal are intended for adults. We do not knowingly allow children under the age of 18 to create accounts or interact with the Site or client portal directly. Information about minor family members is collected only from the parent or legal guardian as part of a family application, as described in Section 1.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice through the Site or by email. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us: