Scope and privacy roles
This Privacy Policy applies to the public comPayr site, public contact and signup flows, employer-admin accounts, worker-access workflows, and related product operations offered by comPayr Financials LLC.
comPayr may act in different privacy roles depending on the data and context. For prospect, marketing, support, and business-customer account data, comPayr generally acts for its own business purposes. For payroll and workforce data that employer customers submit to the Service, comPayr generally acts as a processor, service provider, or contractor on behalf of the employer customer.
Information we collect
We collect information you provide directly, information provided by employer customers and workforce users, information generated through product use, and limited information from third-party services.
- account and contact data, such as names, emails, phone numbers, and login credentials
- business identity data, such as company name, addresses, tax setup, payroll schedules, work-location data, and account configuration
- workforce and payroll data, such as worker names, addresses, compensation, tax profile fields, deductions, leave-related information, optional benefits data, and payroll outputs
- customer-submitted banking or account-reference data, if a customer chooses to store that information in company or worker records
- documents, reports, paystubs, forms, and generated payroll artifacts
- device, session, browser, usage, analytics, and error-monitoring data
- support, request, and audit records
Sensitive payroll data and categories we do not intentionally collect
Depending on how the Service is used, payroll and workforce data may include sensitive information such as Social Security numbers, tax details, compensation data, and bank or direct-deposit details.
We do not intentionally collect biometric data or consumer health data as part of the first-launch version of the Service.
Sources of information
We collect information directly from employer customers, administrators, workers, and other authorized users who use the Service.
We also collect information directly when a visitor submits a signup form, login form, contact form, privacy request, or another public account or support workflow.
We also collect information automatically through the operation of the site and Service, including through cookies, session technologies, analytics, and security tooling.
We may receive information from third-party services used in connection with the Service, such as authentication, address support, communications, and related vendors.
Notice at collection for public forms and account workflows
When a visitor uses our public forms or account-entry workflows, comPayr may collect identifiers and contact details such as name, email address, username, phone number, company information, request details, and the credentials or verification data needed to complete the requested action.
We may also collect related technical and activity information such as IP address, browser or device context, timestamps, request metadata, session and trusted-device state, and server-side event records tied to the submitted identifier or account workflow.
We use this information to create and secure accounts, authenticate users, respond to contact, privacy, and security requests, complete onboarding, prevent fraud and abuse, troubleshoot failed flows, maintain support and audit records, keep limited communication-preference records, and measure operational performance of signup, login, onboarding, and support workflows.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Retention details appear in the retention section below, and provider categories appear in the disclosure section of this Policy.
How we use information
We use information only as reasonably necessary for our business and service operations, including to provide, secure, support, improve, and administer the Service.
- authenticate users and manage accounts
- calculate payroll and payroll-related outputs
- generate reports, documents, forms, paystubs, and payroll records
- operate customer support, fraud prevention, abuse prevention, and security functions
- measure and troubleshoot signup, login, onboarding, and public support workflows
- comply with law, respond to legal requests, and keep required records
- send transactional communications and limited marketing or product-update emails
- analyze and improve the Service, including through deidentified or aggregated analytics
How we disclose information
We disclose information to service providers and processors that help us operate the Service, including categories such as hosting and storage providers, authentication providers, analytics providers, error-monitoring providers, communications providers, address or autocomplete providers, and professional advisors.
We may also disclose information to regulators, tax authorities, law enforcement, auditors, or other parties where required by law, to protect rights and security, or in connection with a merger, financing, acquisition, restructuring, or sale of assets.
At launch, comPayr does not use ad-tech or retargeting vendors for cross-context behavioral advertising on the public site.
Marketing and communications
We separate communications into transactional or account messages, product-operational or service notices, and promotional or product-update emails.
We may send limited marketing or product-update emails to prospects, customers, and users where permitted by law. Where we collect an affirmative marketing preference through a public form, we may keep a record of the consent source, timestamp, and context for audit and suppression purposes.
You may opt out of promotional emails at any time using the unsubscribe link provided in the message or by contacting us through the public contact flow. Operational and transactional communications may still be sent where needed for security, account access, billing readiness, support, or legal updates.
Workforce data and employer-directed processing
Employer customers control the workforce data they submit to the Service. That means the employer customer generally decides what worker data is collected, how it is used for payroll and workforce administration, and what instructions comPayr follows in processing that data.
If you are a worker whose employer uses comPayr, we may direct certain privacy requests to your employer first because the employer is usually the primary decision-maker for workforce records maintained in the Service.
U.S. privacy rights, authorized agents, and appeals
We offer a single U.S.-wide intake path for privacy requests. You may contact us through our public contact flow to request access, correction, deletion, or other rights where applicable.
We may take reasonable steps to verify your identity or your authority to act on behalf of another person or business. Authorized agents may be required to provide written authorization and identity verification.
If we deny a privacy request, you may appeal by replying to our response or contacting us through the public contact flow within a reasonable period after the denial. We will review the appeal under applicable law.
State-law notices, Do Not Track, and Global Privacy Control
This Policy is intended to support applicable U.S. state privacy-law requirements, including California and other state-law request rights where applicable.
Because we do not sell personal information and do not share personal information for cross-context behavioral advertising, Do Not Track and Global Privacy Control signals will generally not result in a different treatment from what this Policy already describes. If a law requires recognition of a valid signal, we will process it as required.
Retention, support and audit logs, security, and data location
We retain information for as long as reasonably necessary for payroll operations, legal and tax recordkeeping, security, backups, fraud prevention, support, dispute handling, and audit needs.
In practice, retention periods may differ by category. For example, account and contact records may be retained for account continuity and support, payroll and generated tax records may be retained for longer legal and tax needs, security and audit logs may be retained for service protection and investigation, and marketing contacts may be retained until they are no longer needed or are placed on a suppression list after opt-out.
We maintain support, security, and audit logs as reasonably necessary for the operation and protection of the Service.
We use reasonable administrative, technical, and organizational safeguards designed to protect information, but no method of transmission or storage is completely secure.
We currently intend the Service to be U.S.-hosted and U.S.-processed.
Children, business transfers, and policy updates
The Service is not directed to children and is intended for business and workforce administration use by adults and authorized business users.
If comPayr is involved in a merger, acquisition, financing, restructuring, bankruptcy, or asset sale, information covered by this Policy may be transferred as part of that transaction, subject to applicable law.
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and provide additional notice where required. Questions may be sent through our public contact flow.