What we collect
- Account email — used for magic-link sign-in and service email.
- Payment data — held by Stripe, our payment processor. Card numbers never touch our servers.
- Payroll data you enter — project details, employee names, work classifications, hours, and rates. For employee identification the WH-347 requires only an individually identifying number: we accept and store only the last 4 digits of an SSN, encrypted at rest. We never accept a full Social Security number.
- Form submissions — correction requests, alert signups, and the email address you provide to use the free generator.
- Usage data — pages viewed and product events, via PostHog analytics.
Why we collect it
To operate the lookup and payroll tools, deliver rate-change alerts you request, process subscriptions, respond to correction requests, and understand which parts of the product are used so we can improve them.
Who processes it
Each third party below processes data only to provide its service to us:
- Stripe — payments and subscription billing.
- Resend — transactional email delivery (sign-in links, alerts, receipts).
- PostHog — product analytics.
- Google Cloud — hosting and databases.
We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act. Because we do not sell or share personal information, there is nothing for a Global Privacy Control signal to opt you out of; we state our position on GPC here for transparency.
Cookies, analytics, and session recording
We use a session cookie for sign-in and PostHog for analytics. Session recording is disabled inside the signed-in application, where payroll data lives. If recording is ever enabled on public marketing pages, all typed input is masked; we will describe any such change here before it takes effect. We honor browser Do Not Track for analytics identification to the extent PostHog supports it; analytics for anonymous visitors does not build a profile.
Retention
- Account email: for the life of the account; deleted with the account.
- Employee payroll rows (including encrypted last-4 SSN): while your subscription is active, plus 90 days; you can delete employees and projects yourself at any time.
- Generated WH-347 PDFs: 1 year (they can be regenerated from your rows).
- Correction requests: 2 years.
- Payment records: held by Stripe under its retention rules.
Your rights
California residents have the right to know, delete, and correct personal information, to opt out of sale or sharing (we do neither), and to not be discriminated against for exercising these rights. Wherever you live, we extend the same rights on request. Write to privacy@prevailwage.com and we will respond within the time California law allows.
Contact
Privacy questions: privacy@prevailwage.com. Postal: Harper AI, Inc., legal contact via legal@prevailwage.com.