Privacy & data handling

What we collect

No account is required to use the free check. You can upload your payroll documents and see whether discrepancies exist without giving us your name, a password, or any business details.

Email address: collected only if you choose to unlock the full detail of your results, so we can send you a link back to them. We never require it to find out whether you owe something.

Audit data: the payroll exports and timesheets you upload. We ask you to pseudonymise employee names where possible and we never ask for, and you must not upload, tax file numbers.

Payment data: payments are processed by Stripe. Your card details never touch our servers; we store only the payment reference.

How audit data is handled

Files are transferred over an encrypted (TLS) connection and stored only for the purpose of producing your results.

Document reading uses AI, on infrastructure operated by our AI provider under a standard no-training data processing agreement. The actual compliance calculation — every rate, penalty and entitlement — is performed by a deterministic rules engine we built, not by AI judgment. Your data is never shared with, or sold to, any other third party; it is never used for marketing; and it is never used to train any model.

All uploaded files, intermediate working files and extracted data are permanently deleted within 30 days of the delivery of your results. If you unlocked a full report, the report document itself (not your underlying source files) remains accessible via the link we emailed you until that same 30-day point.

Your employees' privacy

The audit needs shift times, rates paid and employment type — not identities. Initials or staff codes are sufficient. We will never contact your employees, and reports identify employees only by the labels you supplied.

Retention and deletion

Uploaded audit files and intermediate data: deleted within 30 days of your results being delivered, whether or not you unlocked the full report.

Since there is no account, there is nothing further to close — deletion happens automatically on the schedule above.

You can request earlier deletion of anything we still hold at any time by emailing us; we action deletion requests within 14 days.

Access and contact

You may request a copy of the personal information we hold about you, or ask us to correct it, at any time — see our contact page.

If you have a concern about how your information has been handled, contact us first; you may also complain to the Office of the Australian Information Commissioner (oaic.gov.au).