Privacy policy
Last updated October 17, 2026.
Who we are
CertifiedHours is operated by Rudderberry, LLC, a Florida limited liability company, which is the controller of the personal data described here. “We” in this policy means Rudderberry, LLC. The service is for businesses and the people who work for them; it is not meant for children.
What we collect
Your account email and password (stored hashed by our authentication provider), or your Google account email if you sign in with Google. Your business name and address as you want them printed on reports. For each worker you add: name, an identifying number, apprentice status and program, and the hours, rates, and deductions you enter for each payroll week. Notes you send us through the feedback form, with any screenshot you attach (a screenshot can show whatever was on your screen). Technical records needed to run and protect the service: an event log of actions in your account (counts and totals, never worker names or identifiers), records of calls to our document reader, error reports, and your IP address or email address where we use them to limit repeated requests.
What we never store
Full Social Security numbers, home addresses of workers, bank details, or dates of birth. The application refuses input that looks like a full SSN. If you choose to use the last four digits of an SSN as a worker’s identifying number, it is encrypted before storage and decrypted only to print your reports. If you upload a filed form that carries full Social Security numbers, the file is sent to our document reader to be read, and only the last four digits are kept.
How we use it
To generate the certified payroll documents you request, to operate and secure your account, and to answer your support requests. We do not sell or share worker data with anyone, and we do not use it for advertising.
Who can see it
Signed-in members of your account see your records; the database scopes every record to the owning account. Our staff can see account-level information in an administration area (the owner’s email, business and project names, counts of payrolls, billing status, and feedback you sent, including screenshots); they do not open your payroll lines or worker details except to resolve a support request you have made.
Where it lives
Hosted in the United States on Supabase (database and authentication) and Vercel (application). Data is encrypted in transit and at rest. Our providers keep backups for a limited period, so deleted data can remain in a backup until it expires.
Retention and deletion
Your records stay in your account as long as it is open, paid or not. Keeping certified payroll records for at least three years after all the work on the prime contract is completed is your own legal duty (29 CFR 5.5(a)(3)(i)), so download what you need before you delete anything. You can delete individual workers and projects from within the application. You can delete the whole account yourself, under Settings, Delete this account: it removes the workers, the projects, the payrolls, and the login immediately. You can also email privacy@certifiedhours.com from the account address and we delete it within 30 days. Feedback notes and our technical logs can outlive an account; ask us and we remove them too.
Payments
Billing is handled by Lemon Squeezy as merchant of record. They hold your card and billing records; we hold a customer ID and your subscription status. We never see or store card numbers.
Service providers
A few companies process data on our behalf, each only for the purpose named: Supabase (database and authentication, United States), Vercel (hosting), Resend (email: sign-in messages, reminders, the starter series, and payrolls you choose to send to a prime), Lemon Squeezy (billing), Anthropic (reads a wage determination, a filed payroll form, a payroll spreadsheet (Excel or CSV), or a photographed timesheet you upload so the fields can be extracted; these files carry worker names and hours, and a filed form can carry full Social Security numbers; Anthropic does not train on this data and deletes it within 30 days under its standard terms, unless it must keep it longer for safety or legal reasons), Google (sign-in with Google, if you use it, and Google Analytics and Google Ads, described below), and ImprovMX (forwards mail sent to our support and privacy addresses).
Cookies and analytics
Session cookies keep you signed in. We use Google Analytics on the website and in the application to count visits and see which pages and ads bring people here. It sets its own cookies and receives your IP address and browser details. We send it the page path only, never the rest of the address, and a generic title inside the application; it also receives events such as a signup, a first filed payroll, or a purchase (with its amount), which we share with Google Ads to measure our ads. No worker or payroll data is ever sent to it. If you arrive from an ad or another site, a first-party cookie (ch_attr) remembers which one for 90 days: the ad’s labels, including Google’s click identifier, and the page you landed on; when you sign up, those labels are saved with your account so we can tell which ads bring in contractors who file. Three short-lived functional cookies help signup: ch_new (10 minutes, to report a new signup once) and ch_wd and ch_wd_seen (7 days, to carry a wage determination you chose on a rate page into setup).
Your choices
You can see and correct your business and worker information in the application, export every payroll as a PDF and CSV, and delete your account yourself. For anything else, including a copy of the data we hold about you or its deletion, email privacy@certifiedhours.com.
Changes
We post the date of the last change at the top of this page, and email account owners about material changes.
Contact
Rudderberry, LLC, doing business as CertifiedHours. Questions about this policy or a deletion request: privacy@certifiedhours.com.