Privacy Notice
This notice explains the data used by the current sandbox and must receive privacy counsel review before production payroll data is accepted.
Data we process
Account identifiers, verified email, company profile, membership and roles, sandbox worker records, workflow inputs, audit context, limited device metadata, and support information.
Data intentionally excluded
The sandbox does not request full tax identification numbers, bank account numbers, government filing credentials, or real payment instructions.
Purposes
We use data to authenticate users, isolate companies, authorize actions, operate workflows, prevent abuse, support users, investigate incidents, and improve reliability.
Service providers
Cloudflare Sites/D1/R2 provide application infrastructure and Supabase provides identity. Production email, observability, banking, payroll, tax, and benefits providers are not configured in this release.
Retention and rights
Retention controls, deletion workflows, jurisdiction-specific rights, subprocessors, cross-border terms, and a privacy contact must be finalized before production launch.