Privacy policy
What we store, and where
The CertPay application runs entirely in your browser. Payroll data you enter is saved
using your browser's localStorage, which is a private storage area on your own
device. It is not uploaded, synchronised, or backed up to any server we control.
This means:
- We cannot see your payroll data, and could not produce it if asked.
- If you clear your browser storage or uninstall the app, the data is gone. Use the Backup button to save a copy you control.
- Your data does not move between devices unless you move a backup file yourself.
What we do not do
- We do not require an account or an email address to use the app.
- We do not run advertising or advertising trackers.
- We do not sell, rent, or share personal information — we do not have any to share.
- We do not use analytics inside the application itself.
The website
The marketing pages and guides are served by a static hosting provider, which keeps standard server logs (IP address, browser type, page requested, timestamp) for security and to measure aggregate traffic. These logs are not linked to any payroll data, because payroll data never reaches a server.
If we add privacy-respecting, cookie-free analytics to the marketing pages in future,
it will be limited to aggregate page views and will not run on /app/.
Payments
If you upgrade to a paid plan, payment is processed by Stripe. Stripe receives your billing details directly; we never see or store your card number. Stripe's handling of that information is governed by their own privacy policy. We retain only what is needed to know that a licence is active.
Children
CertPay is a tool for businesses and is not directed at children under 13.
Your rights
Because we hold no personal data about you, there is generally nothing for us to access,
correct, or delete on your behalf. You can delete everything the app has stored at any time
by clearing site data for certpay.net in your browser, or by uninstalling the
installed app. If you have paid for a licence and want your billing record removed, email
us and we will action it.
Changes
If this policy changes materially, we will update the date at the top of this page. The core commitment — that payroll data stays on your device — is a design decision, not a policy preference, and is not something we intend to change.