Privacy Policy
What we collect from you (the Client)
- Account: email, business legal name, business address, contractor license number, DIR registration number.
- Billing: handled by Stripe; we store a Stripe customer identifier and the last 4 of your payment method.
- Operational: pages you visit, actions you take in the dashboard, timestamps and IPs needed for security and audit.
What we collect about your workers
To prepare certified payroll reports we hold, on your behalf:
- Each worker's name and address.
- The last 4 of SSN (or the identifier the report requires), encrypted at the field level.
- Classification, apprentice level, and fringe plan details.
- Hours and gross pay by day and week for each project.
- The source files you upload (unmodified, retained for audit).
We hold this data as a processor acting on your behalf. We do not sell it, do not use it for advertising, and do not use it to train AI models.
Subprocessors
Fly.io (hosting, in Virginia); Stripe (payments); Resend (transactional email); an AI provider used strictly for text extraction under business terms with zero data retention. A current list is available on request.
Retention
We retain reports and source files for the period California requires contractors to keep certified payroll records (currently three years after project close). On request, we will delete your account and all associated data earlier, subject to any statutory retention requirements.
Security
Encryption at rest, private storage buckets with short-lived signed download URLs, field-level encryption for SSN fragments, row-level isolation between clients, scrubbed error logs. See the security page for details.
Your rights under California law
If the CCPA/CPRA applies to the data we hold on your workers, you (and where applicable, the workers whose data you provided) may have rights to know, correct, delete, and limit certain uses of that data. We respond to verified requests at hello@certpayroll.com.
Children
The Service is not directed to children under 16 and we do not knowingly collect data from them.
Changes
We will give at least 14 days' notice by email for material changes.
Contact
hello@certpayroll.com