Legal

Privacy Policy

How we collect, use, store and protect your data.

Last updated: 1 September 2026

On this page

What we collectHow we use itLegal basisSharingStorage & securityYour rightsRetention

1. Information we collect

We collect information you provide and information generated as you use Payrollx:

  • Account data — names, work emails, phone numbers and roles of the people who administer your account.
  • Employee & payroll data — the employee records, attendance punches, leave, salary structures and statutory identifiers you enter to run payroll.
  • Usage data — logs, device and browser information, and actions taken in the app, used to secure and improve the Service.

2. How we use information

We use data to provide and operate the Service: calculating attendance and pay, generating payslips and reports, sending notifications you configure, providing support, and keeping the platform secure. We do not sell your data or use employee data for advertising.

We process account data to perform our contract with you, and employee data as a processor acting on your instructions. You, as the employer, remain the controller of your employees’ personal data.

4. Sharing & sub‑processors

We share data only with vetted sub‑processors that help us run the Service — for example cloud hosting, email delivery and error monitoring. Each is bound by confidentiality and data‑protection obligations. We may disclose data where required by law.

5. Storage & security

Data is encrypted in transit and at rest. Enterprise customers can be provisioned on a dedicated database, isolated from other tenants. Access is role‑based and audit‑logged, and we follow least‑privilege practices for our own staff.

6. Your rights

You can access, correct, export or delete data from within the app. Where individuals exercise privacy rights directly with us, we will refer them to you as the employer and assist as your processor.

7. Retention

We keep data for as long as your account is active. After termination, data is available for export for 30 days and then deleted, unless a longer period is required by law (for example statutory payroll records).

8. Changes & contact

We may update this policy and will notify you of material changes. Privacy questions? Email info@coderxpoint.com.