PayWise

PRIVACY POLICY

PayWise Payroll & HR Platform

Effective Date: July 2, 2025 | Last Updated: July 2, 2025

SECTION 1 — WHO WE ARE AND WHO THIS POLICY APPLIES TO

This Privacy Policy describes how Integrity Global Security, Inc. doing business as PayWise ("PayWise," "we," "us," or "our") collects, uses, stores, and discloses information in connection with the PayWise platform.

This Policy applies to:
Business Customers who subscribe to PayWise and their authorized administrators
Employees and contractors whose information is processed through PayWise by their employer
Visitors to the PayWise website and marketing pages

If you are an employee whose employer uses PayWise, your employer is the data controller of your personal information. We process your data on behalf of your employer as a data processor. Your primary relationship for data rights is with your employer.

SECTION 2 — INFORMATION WE COLLECT

2.1 — Business Customer Information
When a business signs up for PayWise we collect:
Business name, legal name, and EIN (Employer Identification Number)
Business address, phone number, and email address
Name and contact information of the account administrator
Billing information including credit card or bank account details (processed through Stripe — we do not store full card numbers)
Business bank account information for ACH/NACHA file generation (routing number and account number, stored encrypted)

2.2 — Employee Information Processed on Behalf of Customers
When a Customer uses PayWise to manage payroll, we process the following employee information:
Full legal name, address, date of birth, and contact information
Social Security Number (stored encrypted using AES-256 encryption; displayed only as last 4 digits)
Federal and state tax withholding elections (W-4 information)
Bank account and routing numbers for direct deposit (stored encrypted)
Employment details including pay rate, pay type, hours worked, and deductions
I-9 identity verification information and document data
Electronic signatures and signature timestamps
GPS coordinates at the time of clock-in and clock-out
Time and attendance records
Pay stubs and payroll history
Leave balances and time-off requests

2.3 — Automatically Collected Technical Information
When you use PayWise we automatically collect:
IP address and device information
Browser type and operating system
Pages visited and actions taken within the application
Login timestamps and session duration
Error logs and performance data

SECTION 3 — HOW WE USE THE INFORMATION WE COLLECT

We use the information collected for the following purposes:
Providing, operating, and maintaining the PayWise platform and all its features
Processing payroll calculations including tax withholding, deductions, and net pay
Generating NACHA/ACH direct deposit files for Customer upload to their bank
Processing and storing electronic I-9 verification records
Generating pay stubs and payroll reports
Sending notifications to employees and administrators regarding payroll, schedules, and compliance
Billing and subscription management
Customer support and responding to inquiries
Security monitoring, fraud prevention, and audit trail maintenance
Improving the Service through analysis of aggregated, anonymized usage data
Complying with legal obligations including responding to lawful government requests
Powering the in-app AI assistant, which only receives aggregated, non-identifying workforce statistics (e.g. headcount, department names, pay type counts) — never individual employee names, pay rates, or Social Security Numbers

We do NOT use your information for:
Selling, renting, or trading your data to third parties for their marketing purposes
Targeted advertising or behavioral tracking for advertising purposes
Any purpose not described in this Privacy Policy without your explicit consent

SECTION 4 — HOW WE SHARE INFORMATION

We share information only in the following limited circumstances:

4.1 — Service Providers
We share data with trusted third-party vendors who help us operate the Service. These vendors are contractually bound to protect your data and use it only for the specific services they provide to us:
Stripe — payment processing and subscription billing
Convex — cloud database and backend infrastructure
Email service providers — for sending notifications and communications
Cloud hosting providers — for storing application data

4.2 — Legal Requirements
We may disclose information if required to do so by law, regulation, court order, or government request, including requests from the IRS, Social Security Administration, Department of Labor, or other regulatory authorities with jurisdiction over payroll matters.

4.3 — Business Transfers
If PayWise or Integrity Global Security, Inc. is involved in a merger, acquisition, or sale of assets, Customer Data may be transferred as part of that transaction. We will notify Customers via email and a prominent notice within the Service at least 30 days before any such transfer, and Customers will have the option to export and delete their data before the transfer completes.

4.4 — With Your Consent
We may share information with third parties when you have given us explicit permission to do so.

4.5 — We Do Not Sell Data
PayWise does not sell, rent, or trade personal information to third parties for any commercial purpose. This includes employee personal information, Social Security Numbers, bank account data, and payroll records.

SECTION 5 — DATA SECURITY

We take the security of your data seriously and implement the following measures:
AES-256 encryption for all Social Security Numbers, bank account numbers, EINs, and other sensitive identifying information
All data is transmitted over HTTPS/TLS — unencrypted connections are rejected
Role-based access controls — employees can only see their own data; administrators can only see data from their own company
Complete audit trail logging for all access to sensitive data including who accessed it, when, and from what IP address
Automatic session timeouts for inactive users
Multi-company data isolation — data from one company is never visible to another company
Signed URLs with short expiration times for access to stored documents
Regular security monitoring and intrusion detection

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. If we become aware of a security breach that affects your data, we will notify you as required by applicable law.

SECTION 6 — NEVADA PRIVACY RIGHTS (NRS 603A)

Nevada law (Nevada Revised Statutes Chapter 603A) grants Nevada residents certain privacy rights with respect to their personal information. If you are a Nevada resident, you have the following rights:
Right to Know: You have the right to know what personal information we collect about you and how we use and share it.
Right to Access: You have the right to request access to the personal information we hold about you.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Delete: You have the right to request deletion of your personal information, subject to legal retention requirements.
Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information. PayWise does not sell personal information.

To exercise any of these rights, contact us at privacy@paywise.app. We will respond to verified requests within 60 days as required by Nevada law. We may need to verify your identity before processing your request.

SECTION 7 — DATA RETENTION

We retain personal and payroll data for as long as your account is active and as required by applicable federal and Nevada record-retention laws described in these policies.

SECTION 8 — COOKIES AND TRACKING TECHNOLOGIES

PayWise uses cookies and similar technologies to operate the Service. We use:
Essential cookies: Required to operate the Service, maintain your session, and keep you logged in. Cannot be disabled.
Functional cookies: Remember your preferences such as language and display settings.
Analytics cookies: Help us understand how users interact with the Service so we can improve it. Data is anonymized.

We do not use advertising cookies, cross-site tracking cookies, or any cookies that share your data with advertising networks.

SECTION 9 — CHILDREN'S PRIVACY

PayWise is a business-to-business platform designed for use by companies and their employees. It is not directed to or intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@paywise.app and we will delete that information.

SECTION 10 — CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will:
Post the updated policy in the PayWise application with a new effective date
Send an email notification to the account administrator at least 30 days before the changes take effect
Display a prominent banner within the application notifying users of the update

Your continued use of PayWise after the effective date of changes constitutes your acceptance of the updated Privacy Policy.

SECTION 11 — CONTACT US

For privacy-related questions, data access requests, deletion requests, or to report a potential security issue, contact us at privacy@paywise.app.

This Privacy Policy was drafted to comply with Nevada Revised Statutes Chapter 603A, applicable federal privacy laws, and industry best practices for payroll software. It is not legal advice. PayWise recommends that Customers consult a qualified attorney regarding their specific data privacy obligations.

© 2025 Integrity Global Security, Inc. d/b/a PayWise. All rights reserved.