Privacy Policy

1. Introduction

PayDayPuffin ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our payroll software services.

2. Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, company name, and other details you provide through our contact form.
• Payroll Data: Timecard hours, employee compensation, tax identification, bank account details, and related records required to process payroll on your behalf.
• Usage Data: Browser type, IP address, pages visited, and other standard web analytics information.
• Audit and Operational Data: Authentication events, sync operations, payroll lifecycle transitions, and other metadata we retain for compliance, security, and debugging purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our payroll software services
• Process timecard data and submit payroll through our authorized subprocessors
• Respond to your contact form submissions
• Improve our services and user experience
• Maintain audit trails for compliance and regulatory purposes
• Send you service-related communications

4. Subprocessors

PayDayPuffin engages third-party service providers (subprocessors) to deliver certain components of our service. We maintain a complete list of our subprocessors, including their role, data categories processed, and location, at paydaypuffin.com/subprocessors.

Gusto, Inc. (Delaware C-corporation) is our authorized subprocessor for payroll execution. They receive the payroll data necessary to issue wage payments, withhold and file taxes, and make direct deposits to your employees. You do not need a separate account with Gusto — your relationship is with PayDayPuffin, and our Terms of Service govern the processing relationship.

We require all subprocessors to meet contractual obligations protecting the confidentiality, integrity, and availability of your data. We will provide at least thirty (30) days' notice before engaging any new subprocessor, via posting to our subprocessors page and email notification to the primary account holder.

5. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS), secure authentication (JWT), and append-only audit logging. However, no method of electronic transmission or storage is 100% secure.

6. Data Retention

Contact form submissions are retained for two years. Payroll data and audit logs are retained in accordance with applicable regulatory requirements. You may request deletion of your data by contacting us.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact us at hello@paydaypuffin.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@paydaypuffin.com.