How to form a company in the US while keeping founder information private? Suppose that I want to form a company in the US while keeping my information and that of my co-founders private. How could I go about doing it?
Get a corporate lawyer. The standard practice is to create two LLCs (usually in Delaware, which offers some of the best protections): A holding company owned by the individuals, and an operating company, owned by the holding company. If done correctly (which is why you need a lawyer to review the creation and operating agreements) it is nearly impossible for an adversary to follow the operating company back to the individuals without a compelling legal reason ordered by a court.
Why do you think Oracle have not been protecting their trade mark? Using a trade mark to describe the product (“Written in JavaScript”, “Seeking JavaScript developer”) is not an infringement and the trade mark owner is under no obligation to, indeed, cannot stop this. Where they are required to defend their trade mark is when it is being used in such a way that there is the risk of confusion that the goods or services could be confused with the trade mark owner’s goods or services. Further, they are not required to defend all breaches, only enough to show that they are actively doing so. Also it is not important that the trade mark be associated with the trade mark’s owner. Do you know who owns the trade mark “Ben &amp; Jerry’s”?
If your LLC made 300K before paying salaries, and paid 300K total in salaries, that seems quite reasonable. You might have a point if the order of events was: LLC pays 100K in salaries, LLC gets sued for 200K, LLC raises salaries by 200K. Note that the owners have to pay income tax on 300k earnings, plus whatever else employers and employees have to pay. And an LLC doesn't pay salaries to owners, it pays salaries to employees who be sheer coincidence are also owners. It's a different matter if the company pays dividends. A company must keep dividends low enough so that it can run its business, including paying damages for lawsuits that it knows about. So if the company planned all along to pay 300k in dividends, then is sued for 200k, they likely have to reduce the dividends.
The tricky bit from a GDPR standpoint is that the US has a law that says a US-based company must hand over data to US government agencies even if the data is stored outside the US. This is US specific and a case where the US government gives itself jurisdiction outside the US but the EU can't directly do anything against it (outside of international negotiations). As you noticed this means if you store data at a US data processor there is no real difference whether the data is physically stored in the US or the EU. So to avoid transferring EU consumer data to the US several steps are needed. First the servers have to be physically located in the EU and second the company needs to be non-US based, EU based seems the obvious choice. AFAIK constructions of a US-based company creating a fully owned EU-based subsidary are currently used to achieve the second part. Whether this is sufficient may have to be decided in court.
Companies have a registry of their shareholders. Anyone with at least one share registered in their name is a shareholder of record. However, the vast majority of people who consider themselves &quot;shareholders&quot; aren't actually registered owners of a stock. Instead, almost all public stock in the US is held &quot;in street name.&quot; That means that the stock is formally held in the name of a brokerage. What an individual has is &quot;beneficial ownership:&quot; the brokerage passes dividends on to the beneficial owner, will vote how the beneficial owner tells it to vote, and requires agreement from the beneficial owner before it can sell the stock. To make stuff even more complicated, the broker itself generally holds the stock in street name. Almost all public stock in the US is really owned by the Depository Trust Corporation in the name of Cede and Company (a general partnership of a few DTC officers). The reason public stock is mostly held in street name is efficiency. Transferring the legal owner of a piece of stock is a nontrivial process; until recently, it involved physically shipping stock certificates to the new owner. Even now that stock ownership can typically be transferred electronically, it's much easier to tell Cede &amp; Co. &quot;the new beneficial owner is this person.&quot; Because beneficial ownership is just a contract, you can skip all the formalities of updating the company's official register of shareholders.
Tricky. First, what is better for you? You usually start an LLC to protect yourself (the person) from liability in case things go wrong. Worst case, you lose all the assets of the LLC. So if the LLC owns the copyright, that is an asset, which can be lost if the LLC goes bankrupt. So I'd say it's better for your protection if you own the copyright personally. If you created the software in your own time, before the LLC was started, then you own the copyright. You should create a proper contract saying that the LLC has the non-exclusive right to market the software and keep profits from the sale of the software, and that this agreement can be cancelled by you at any time. Signed by you, as a private citizen, and by the director of the LLC, which happens to be you as well, on behalf of the LLC. That will give you maximum personal protection. On the other hand, investors won't be willing to invest in your LLC, because it basically owns nothing of any value. So if you want investments, then you may be less able to protect your assets, because the investors want to protect their assets as well.
Your VPN scenario is why you have to show the banner to everyone. If you somehow knew beyond any doubt that someone was not in the EU, then you would not have to show a banner, but because you can't verify that, you should always show the banner. Doing so also protects against accidentally violating a similar law in another country; the GDPR is the best-known privacy law, but it is far from the only one. It's good practice to ask for people's permission before collecting their information anyway.
There are a tangle of issues going on in this question. First, distribution of hardware-related code in commerce might very well void any right you have to patent the software and might bring it into the public domain for purposes of patent law. Publicly disclosed inventions, even if protected by copyright, are part of the &quot;prior art&quot; and can't be protected by patents. Second, you have to disclose the material ideas in an invention in order to patent it, in your patent application. The bargain of a patent is that you get protection for about two decades in exchange for contributing your idea to the public domain when it expires. Third, usually people protect software with copyright rather than patent, although there are pros and cons to each approach. Fourth, if someone knows enough about your invention to subpoena the place where you store it, you have probably disclosed too much information pre-application to patent it. Fifth, usually the &quot;real&quot; target of a subpoena gets notice of it and an opportunity to defend against the subpoena (e.g. for improperly disclosing a trade secret) before it is carried out, but the same does not apply, for example, to National Security Letters under the Patriot Act (which are supposed to be used only in national security investigations or counter-terrrorism operations, but might be abused). Certainly, an ordinary person can't issue a National Security Letter for private commercial gain without corrupt government assistance. Sixth, to issue a subpoena, there must be some pending case to which someone can claim the subpoena is relevant. A random person can't just subpoena information because they want to. Seventh, even if a server host isn't based in the United States, that doesn't mean that there isn't some means by which a court might assert subpoena power over information on server host. There are many legal &quot;hooks&quot; that could apply. Eighth, defending an isolated subpoena isn't terribly expensive. Typically, you'd be looking at a legal fee in the $1000 to $5,000 (U.S.) range, which is much, much less than the dollar cost of patenting an invention in any country. In short, while there are pros and cons of using a U.S. based server host, people in the IT industry routinely attach far too much importance to this fact which is only very rarely an important one legally. There are many other issues which are much more important in this fact pattern to your ultimate goal.