Last updated: March 11, 2026
When you create an account, we collect your name, email address, organization name, and payment information. When you use CertifiedPayrollPro, we store the payroll data, project information, worker details, and reports you create.
We do not collect or store full Social Security Numbers. Per DOL regulations, only the last four digits of worker identifying numbers are stored in our system.
We use your information to provide the CertifiedPayrollPro service, generate certified payroll reports, process payments, send compliance alerts, and improve our product. We do not sell your data to third parties.
Your data is stored in Supabase (PostgreSQL) with row-level security policies ensuring complete data isolation between organizations. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Payment processing is handled by Stripe and we never store credit card numbers on our servers.
When you interact with Lydia, our built-in compliance assistant, your questions and the current page context are processed to generate responses. Conversation data is stored temporarily to maintain context within a session. We do not use your conversations to train external models.
When you connect a payroll provider (ADP, Paychex, Gusto, QuickBooks, etc.), we store encrypted OAuth tokens to maintain the connection. We only access the payroll data necessary to generate certified payroll reports. You can revoke access at any time from your integration settings.
Certified payroll records are retained for a minimum of 3 years per DOL requirements. You can request deletion of your account and data at any time by contacting us. Active payroll records required for compliance cannot be deleted until the retention period expires.
If you have questions about this privacy policy, contact us at privacy@certifiedpayrollpro.com.