Requesting Feedback: Is Our Privacy-Focused Business Plan on the Right Track?

Hello, everyone! How are you all doing?

I’m writing this post because I’d like to get some feedback on a product I’ve been developing over the last two years, which is currently being tested in a private alpha. I need to validate how I plan to present the company, the product, and the choice of where to incorporate the company.

About the product

We’re developing a cloud storage solution with end-to-end encryption (E2EE). Here are some key points:

  • All user files are encrypted on the client side, and payment information is encrypted on the server side using our own keys.

  • We don’t use recovery emails or phone numbers.

  • We accept cryptocurrencies for those who prefer not to share financial data.

My marketing goal

I don’t want our marketing strategy to be like companies such as Proton, Skiff (before it was acquired), Tuta, etc., which focus exclusively on encryption or geographic location to differentiate themselves. I want to highlight our product’s qualities: its features, quality of support, and a series of content about security/encryption that is both technical and accessible to those without in-depth knowledge of the subject.

Why is this important? Because I see a lot of people without technical knowledge defending or criticizing products based on incorrect information. Additionally, there are those who believe that companies like Proton and Tuta are only for people with something to hide or for criminals. I’d like to adopt a more inclusive stance and focus more on the product’s qualities, with encryption being an additional differentiator.

Our current status

Currently, we have some clients using our alpha version. All are paying for the service, including small businesses, some medium to large companies, and about 50 individual users (friends and acquaintances).

I live in Brazil, and I know this isn’t the best place to start a company due to tax issues and, more importantly, the laws. Our legal system is extremely inefficient, and anyone with power can act arbitrarily (just look up STF Brazil vs. Twitter to understand more).

OBS: I have a strong personal desire to move to Switzerland or Japan, places whose culture and people I admire. However, that’s not possible for me at the moment.

Potential countries for incorporation

Given the situation, the countries where it’s feasible to incorporate the company are:

USA:

  • Pros: Easy to open the company, easy to open a bank account as a non-resident (digital banks like Mercury, Wise, Ramp, etc.), relatively cheap to maintain.

  • Cons: Lots of bureaucracy, forms, complexity, and difficulty in accounting declaration.

  • Possible Red Flag: The Senate recently passed KOSA.

UK:

  • Pros: Easy to open the company, simple for tax filing, cheap to maintain, all management with the government is online.

  • Cons: Difficulty opening a bank account without residency; only Wise accepts.

  • Red Flag: Online Safety Act.

Unfortunately, Estonia isn’t a viable option, despite the e-Residency, as they closed the consulate in Brazil, making it difficult to obtain e-Residency.

Other countries like Singapore, Switzerland, Japan, and Germany require a resident director or nominee, making the process too expensive at the moment.

My current idea

I’d love to hear your opinions on these options. It seems like the world is moving towards regulations similar to those in the UK, and the USA has already started flirting with this idea, as has the European Union. I believe that in 5-10 years, few countries will be free from such regulations.

I think I should open the company in the UK or USA and, in the future, once we have more capital, relocate to Switzerland, Singapore, or Japan.

Finally, the question LOL

Would you have any issues using a service that offers quality, good pricing, support, and encryption, even if it were incorporated in the UK or USA? Would it make a difference if we had an article on our website explaining our future relocation plans?

1 Like

Your marketing strategy is an interesting idea. I think a problem you might run into is that Proton and similar services target the privacy market (no shit, Sherlock). By targeting the general market, you now have to be competitive with services like Onedrive, Google Drive, and Dropbox, which have very high market penetration, often have vendor lock-in, and can scan user’s data to build marketing profiles to supplement subscription revenue.

1 Like

Welcome back to the forum.

I would say that between the two countries you mentioned, the UK is clearly the worse option in terms of privacy/freedom, and the fact that you used the UK as an example of what other countries are heading towards proves that :slight_smile:

Of these choices, incorporating in the USA and eventually moving feels like a solid plan, if you’re also going to eventually physically move out of Brazil. If you don’t do that I’m not sure it matters too much.

I would say that where a company is headquartered is almost if not as important as where a company is incorporated, and if you’re physically in Brazil you are essentially going to be subject to Brazil’s government regardless. Anyways…

No. If the encryption was actually good I probably wouldn’t even have a problem with it being in Brazil, but it depends on the metadata you collect and if there are any relevant data collection/retention laws in Brazil, which I don’t know off the top of my head since it hasn’t really come up here before. Technical guarantees you can make always trump jurisdiction.

No, in fact I think this would only be a bad idea. Using promises to do something in the future in marketing materials comes across as a red flag to me and many people. Only market your company based on what you currently offer.

4 Likes

You are asking feedback on the business plan. I hope you know that also means if you want the best responses and well thought out feedback - it is also important to share more details about the product than you have.

Please share more about it (when you are ready) because there are likely things about the product that would dictate how you develop your business plan and the marketing goals.

More relevant information could be helpful, but I’ll remind @pedroluccasc that self-promotion is not allowed until you have joined the @developers group and follow the rules posted in About the Project Showcase category, so please do not mention your specific product or link to it or your company until you are ready to create a Project Showcase post :slight_smile:

If you’d like to share technical details without identifying your product that is fine.

Did not know that. TIL.

This is an important consideration. I think we should aim to position ourselves between the general market and the privacy market. It might be more challenging, but I believe it’s the only solution that aligns with my vision.

Thanks, Jonah! I’m really glad to be back. There’s been a lot of great discussions here over the past six months. I didn’t interact much, but I was reading along! LOL

I definitely agree with you on this point. The passing of the Online Safety Bill gives Ofcom the authority to ask digital companies to help them break end-to-end encryption (E2EE). It hasn’t been used YET, but it’s just a matter of time before it is.

I was considering the UK because it’s cheaper to open and manage a business there, and there’s less paperwork involved.

Yeah, incorporating an LLC in Wyoming sounds like a good starting point. Once the company has enough funds, we can relocate to other places like Switzerland, Singapore, or Japan. (I’m not sure if Japan is an option yet, but time will tell.)

I definitely plan to. Brazil is beautiful and magical for foreigners, but living here reveals just how corrupt the country can be. It’s often a matter of how much money you have or if you have a powerful friend—you can basically do whatever you want.

The X (Twitter) vs. Brazilian Supreme Court situation is just a small glimpse of how surreal things are here. A few years back, WhatsApp was blocked nationwide four times by different judges. Here’s the link to the Wikipedia article (I couldn’t find an English version, though).

I have many more stories to share, but that’s not the focus right now. Anyway…

That’s true. Some countries have laws stating that if a company is incorporated in Country X but managed in Country Y, Country Y can hold you responsible for taxes and accountability. I need to work on this aspect because the idea is to have the company be 100% remote, with key people worldwide. They’ll all be employees, but the thing is, I’m the owner, and I don’t want to be the CEO. I just want to write code.

My thought is to find a CEO or establish a culture where every team has its own responsibilities. We can come together for decision-making calls, and everything will be done by vote. Each person votes on the company’s next moves, including the customers.

I think I need to consult with a few lawyers to understand how, for example, I could live in Y while the company is headquartered in X without encountering any legal issues in Y.

This is our top priority in any situation. We plan to collect as little metadata as possible and encrypt everything.

That makes sense. I’ll focus on marketing our current offerings rather than future promises.

1 Like

Yeah, as @jonah mentioned, we should finish everything we need to complete first. Then, we can join the @developers group to showcase our work and start addressing any community questions or feedback.

I will! I just need to prepare myself for this.

1 Like

Come to think of it, LanguageTool pulled this off.

Oh nice, I didn’t know about LanguageTool. I’ll definitely look into it. If you have any materials to share, I’d appreciate it.

!!

This should go up in PrivacyGuide’s general criteria somewhere.

If it is any solace, WhatsApp, in response, now includes built-in anti-censorship measures (similar to ones in Signal & Telegram).

1 Like

I completely agree!

True, it’s an essential feature nowadays.