Privacy Policy
Effective date: July 3, 2026
PaystubHero (“we”, “us”), operated from Ontario, Canada, is responsible for the personal information handled through paystubhero.ca. This policy explains what we collect, why, who processes it for us, how long we keep it, and the choices you have. Our privacy contact (the person accountable for our privacy practices) is reachable at hello@paystubhero.ca.
What we collect
- Account information: your email address and a hashed version of your password (we never store the password itself).
- Paystub records you create: company name and address, employee name and address, pay dates, gross pay, deduction amounts, and net pay. This can include compensation information — treat access to your account accordingly.
- Billing information: handled by Stripe. We store only your Stripe customer reference and subscription status — we never see or store card numbers.
- Email signups: the address you give us for the payroll cheat sheet or product emails, and a record of what we sent you.
- Support messages: what you send through the bug-report form or by email.
- Usage data: privacy-friendly, aggregated page analytics via Vercel Analytics (no cross-site tracking cookies). A strictly necessary session cookie (
paystubhero-session) keeps you logged in.
Why we collect it
- to provide the Service: generate your paystubs, keep your history, and authenticate you;
- to bill subscriptions and prevent abuse of the free tier;
- to send transactional email (welcome, password reset) and — unless you unsubscribe — occasional product emails;
- to respond to support requests and improve the product.
We do not sell or rent personal information, and we don’t use your paystub data for advertising.
Who processes it for us
We use a small number of service providers, each only for the purpose shown:
- Vercel — website hosting and aggregated analytics;
- Neon — our database (account and paystub records);
- Stripe — payments and subscription billing;
- Resend — sending email.
These providers may store or process data on servers located in the United States. Where personal information leaves Canada it remains protected by our contracts with these providers, but it may be subject to the laws of the jurisdiction it is stored in.
How long we keep it
Account and paystub records are kept while your account is active. You can delete individual paystubs from your dashboard at any time. If you close your account (email us), we delete your account data within 30 days, except minimal records we must keep for legal, accounting, or fraud-prevention purposes. Email-signup records are kept until you unsubscribe or ask us to delete them.
Your rights
You may ask to access, correct, export, or delete the personal information we hold about you, withdraw consent to marketing at any time (every marketing email has an unsubscribe link), or complain about our practices. Email hello@paystubhero.ca and we will respond within 30 days. You can also contact the Office of the Privacy Commissioner of Canada (or, in Quebec, the Commission d’accès à l’information) if you are not satisfied with our response.
Security
Data is encrypted in transit (HTTPS), passwords are hashed with bcrypt, and access to production systems is limited. If a breach creates a real risk of significant harm, we will notify affected users and the appropriate regulator as required by law.
Children
The Service is for business use by adults and is not directed at children under 18.
Changes
We will post any changes to this policy on this page with a new effective date. Significant changes will be highlighted on the site or by email.
Contact
Privacy questions or requests: hello@paystubhero.ca.