Privacy Policy

Effective date: TBD · Last updated: TBD

See also: Terms of Use

This document is a draft outline for legal review. It is not legal advice and is not effective until approved by Paycess counsel.

1. Overview

[Legal copy TBD — Paycess provides payroll software for employers; this policy covers employer account holders, authorized users, and workforce data submitted by employers.]

2. Information we collect

[Legal copy TBD — categories of data collected, including:]

  • Account data: name, email, phone, password hash, two-factor authentication preferences.
  • Employer data: business name, EIN, addresses, owner identity information, signatory details.
  • Workforce data: employee/contractor names, SSN, date of birth, addresses, compensation, tax and benefit information.
  • Financial data: bank account and routing numbers, payment and ACH metadata.
  • Payroll data: pay runs, hours, earnings, deductions, and related records.

3. How we collect information

[Legal copy TBD — account signup, employer data entry, API synchronization with payroll providers, and embedded Check HQ / Zeal onboarding flows.]

4. How we use information

[Legal copy TBD — provide and operate the Service, authenticate users, process payroll, billing, support, security, and legal compliance.]

5. How we share information

[Legal copy TBD — service providers and categories, including:]

  • Payroll providers (e.g., Zeal, Check HQ) for payroll, tax, and payment processing.
  • Communications providers (e.g., Twilio for SMS OTP, email delivery providers).
  • Billing providers (as configured — stub, Intuit, or Stripe when enabled).
  • Infrastructure providers hosting databases and application services.
  • Some information may be entered directly in payroll-provider embedded interfaces.

See also: Terms of Use (payroll partner section).

6. Cookies & tracking

[Legal copy TBD — session and CSRF cookies for authentication and security; no marketing or analytics cookies identified in the current application.]

7. Security

[Legal copy TBD — encryption of sensitive fields (e.g., SSN, account numbers), access controls, and audit logging.]

8. Retention

[Legal copy TBD — retention periods and deletion practices to be set by counsel.]

  • Application logs use rotating file retention (currently 5 MB × 7 backups).

9. Your choices & rights

[Legal copy TBD — marketing opt-in, SMS consent for system messages/2FA, electronic W-2/1099 delivery consent, and access/correction requests.]

10. California & state privacy

[Legal copy TBD — CCPA and other state-specific notices if applicable.]

11. Children

[Legal copy TBD — Service not directed to individuals under 18.]

12. International users

[Legal copy TBD — US-focused processing and cross-border transfer terms.]

13. Changes to this policy

[Legal copy TBD — how material changes will be communicated.]

14. Contact

[Legal copy TBD — privacy inquiries to privacy@paycess.com; [Company Legal Name TBD], [Registered Address TBD].]

Questions? Contact privacy@paycess.com.

[Company Legal Name TBD] · [Registered Address TBD]