Privacy policy
Draft for review. Last updated September 5, 2026.
What we collect
Your account email and password (stored hashed by our authentication provider). Your business name and address as you want them printed on reports. For each worker you add: name, an identifying number, apprentice status, and the hours, rates, and deductions you enter for each payroll week.
What we do not collect
Full Social Security numbers, home addresses of workers, bank details, or dates of birth. The application refuses input that looks like a full SSN. If you choose to use the last four digits of an SSN as a worker’s identifying number, it is encrypted before storage and decrypted only to print your reports.
How we use it
Only to generate the certified payroll documents you request and to operate your account. We do not sell or share worker data with anyone, and we do not use it for advertising.
Who can see it
Only signed-in members of your account. Data is stored in a database with row-level access rules that scope every record to the owning account. Our staff do not access customer records except to resolve a support request you have made, with your permission.
Where it lives
Hosted in the United States on Supabase (database and authentication) and Vercel (application). Data is encrypted in transit and at rest.
Retention and deletion
Your records stay as long as your account exists so you can reproduce past payrolls, which Davis-Bacon rules require you to keep for at least three years. You can delete individual workers, projects, or your entire account at any time from within the application; deletion is permanent within 30 days, including backups.
Payments
Billing is handled by our payment partner as merchant of record. We never see or store card numbers.
Cookies
We use only the session cookies needed to keep you signed in. No advertising or cross-site tracking cookies.
Contact
Questions about this policy or a deletion request: privacy@[domain to be set].