Privacy Policy
Last updated: September 7, 2026
1. Information We Collect
Account information: your name, email address, and password (hashed).
Business information: legal name, DBA, address, EIN, phone, and logo you provide during onboarding.
Employee payroll data: names, addresses, job titles, pay rates, hours, tax filing status, and the last four digits of Social Security numbers you enter to generate paychecks.
Usage data: audit log entries for sensitive actions (paycheck creation, printing, voiding) and basic analytics events.
2. How We Use Your Information
We use your data to calculate payroll, generate pay stubs and tax summaries, verify your business, process subscription payments, maintain audit trails, provide support, and prevent fraud. We do not sell your data or use employee payroll information for advertising.
3. Data Storage and Security
Your data is stored in a managed cloud database with encryption in transit and at rest. Each business's records are isolated using row-level security (RLS), so a user can only read and modify records they created — never another business's data. Sensitive payroll and billing actions are recorded in an immutable audit log. Access to production data is restricted to authorized personnel.
4. Business Verification
To generate unwatermarked documents, we collect and verify your EIN and business address. This is an anti-fraud control to prevent the creation of fictitious income documents. Verification status is reviewed by our team and may be revoked if information is found to be inaccurate.
5. Data Retention
We retain your business and payroll data for as long as your account is active. After cancellation, data is retained for 90 days to allow export, then permanently deleted. Tax-recordkeeping summaries may be retained longer where required by law.
6. Third-Party Services
We use Stripe for payment processing (Stripe receives your payment card data directly — we never store card numbers), and a managed email provider for transactional email. Each provider processes data under its own privacy and security standards.
7. Cookies and Local Storage
We use essential cookies and local storage for authentication, session management, and remembering your UI preferences. We do not use third-party advertising cookies.
8. Your Rights
You may access, export, or correct your business data at any time from within the app. You may request deletion of your account and data by contacting us. Employee data may be corrected by the business that entered it.
9. Children's Privacy
The Service is for businesses and is not directed to individuals under 18. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email. Continued use after changes constitutes acceptance.
11. Contact
Privacy questions? Contact us.