Privacy Policy

[Company legal name] (“Paystub.biz”, “we”) runs paystub.biz. This policy explains what personal information we collect, why, and the choices you have. It applies together with our Terms of Use.

Account data. Your email address, name (if you give it), a securely hashed password, and session records (when you logged in, and the browser and device details sent with the request). If you pay as a guest, we create an account from your checkout email.

Document inputs. What you type into a builder: names, addresses, the last 4 digits of a Social Security number on paystubs, full SSNs, EINs and TINs on W-2s, 1099s, W-9s and W-4s, pay and tax amounts, and logos you upload.

• Not logged in: your draft stays in your browser. We receive the inputs only when you download a PDF, use them to build it, and don't keep them. If you check out as a guest, the document inputs are stored encrypted with your order until the PDF is delivered, then cleared.
• Logged in: when you download a paystub, W-2, 1099 or invoice, we save it to your history so you can re-download it. The inputs are stored encrypted with AES-256-GCM, bound to your account. The document title and the employer and employee names are kept unencrypted so your history list can show them. Saved companies and employees keep what you chose to save; EINs are encrypted, and for employees we keep only the last 4 digits of the SSN. W-9s and W-4s are never saved.

Files. PDFs and logos are kept in private cloud storage under your account. They are not public and can be downloaded only through your logged-in account.

Payment data. Payments are processed by Stripe. We never see or store your full card number. We keep a record of each order: the email, what you bought, the amount, the date, the status, and Stripe's customer and payment references.

Usage data. Our own first-party analytics records page views and builder steps with the page path, the referring site, UTM campaign tags, a device class (such as mobile or desktop), and your country as reported by our hosting network. We don't store IP addresses; an IP is used only in memory, briefly, to limit abuse. Affiliate link clicks are counted with a hashed visitor id that changes every day. We honour Global Privacy Control and Do Not Track: with either on, we set no analytics cookies and don't link your visits together.

Messages. If you email us, we keep the conversation to help you.

• To run the Service: build previews and PDFs, keep your history, saved details and account, and let you sign in.
• To take payments, send receipts, manage subscriptions and handle refunds and disputes.
• To run the affiliate program: attribute referrals and pay commission.
• To keep the Service secure and prevent fraud and misuse, including misuse of documents.
• To understand how the Service is used and improve it, using aggregate analytics.
• To meet legal obligations, such as tax and accounting record-keeping, and to respond to lawful requests.

We don't sell your personal information, and we don't share it for cross-context behavioural advertising. We don't use advertising trackers.

We share only what each service provider needs to work for us:

• Cloudflare: hosting, database and file storage.
• Stripe: payments, the billing portal and affiliate payouts (Stripe Connect).
• Our email provider, to send account and order emails.
• Affiliates see their referred customers only with the email masked.
• Professional advisers, or authorities when the law requires it or to protect rights and safety.
• A buyer or successor if our business is sold or merged, under this policy.

We use a small number of first-party cookies and browser storage. There are no third-party advertising cookies.

Blocking essential cookies will stop sign-in and guest downloads from working. Stripe sets its own cookies on its checkout to prevent fraud.

• Account data, saved documents, PDFs, logos and saved details: until you delete them or your account.
• Guest checkout inputs: until the PDF is delivered, then cleared.
• Order and payment records: as long as tax and accounting law requires, [retention period, e.g. 7 years], even after you delete your account (they are then no longer linked to it).
• Analytics events: [analytics retention period, e.g. 25 months].
• Backups roll over within [backup retention period].

You can delete single documents from your history and saved companies, employees and logos from your account at any time. Deleting your account (My profile → Delete account) permanently removes your account, every saved document, all your PDFs and logo files, and your saved companies and employees. Order records we must keep by law are kept but unlinked from you. Cancel any subscription first; deleting the account doesn't refund past payments.

• All traffic uses HTTPS (TLS).
• Sensitive document inputs and EINs are encrypted at rest with AES-256-GCM, with keys kept separately from the data.
• Passwords are stored only as salted hashes.
• Files are in private storage; download links check that you own the file.
• Card details go straight to Stripe.
• Staff access to personal data is limited and logged.

Wherever you live, you can ask us to access, correct or delete your personal information, or for a copy of it. Much of this you can do yourself: your history has a “Download all as XLSX” export, and you can delete your account from your profile. For anything else, email support@paystub.biz. We will verify your identity (usually by replying to your account email) and answer within the time the law allows, normally 30 to 45 days. We won't treat you differently for using your rights.

California residents (CCPA/CPRA notice). In the last 12 months we collected these categories: identifiers (email, name, account id); personal information listed in Cal. Civ. Code § 1798.80 (addresses, SSNs and other numbers you enter into documents); commercial information (purchases); internet activity (first-party analytics); approximate geolocation (country); and sensitive personal information (SSNs, account login). We collect them from you and your browser for the purposes in section 3, and disclose them only to the service providers in section 4. We use sensitive personal information only to provide the Service. We do not sell or share personal information, and we do not knowingly sell or share the information of anyone under 16. You may use an authorised agent to make a request. We treat a Global Privacy Control signal as a request to opt out.

The Service is not for children. You must be 13 or older to use it and 18 or older to buy anything or hold an account. We don't knowingly collect information from children under 13; if you believe a child has given us information, contact us and we will delete it.

The Service is meant for people in the United States. Our providers may process data in the United States and other countries where they operate, with safeguards required by law.

We will update the “Last updated” date when this policy changes and tell account holders about material changes by email or in the Service before they take effect.

Privacy questions and requests: [Company legal name], [Registered business address]. Email support@paystub.biz [Owner: add a dedicated privacy address if you have one].