← Back

Privacy Policy

Last updated: September 14, 2026

1. Overview

This Privacy Policy explains how Easy P4P ("Easy P4P," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Easy P4P application, websites, APIs, integrations, and related services (collectively, the "Service"). The Service helps business customers track crew job and hours data and calculate pay-for-performance compensation, payroll summaries, and related KPIs based on settings the Customer configures. The Service is payroll-adjacent: it supports calculations and reporting, but it does not remit payroll, withhold or file taxes, or act as a payroll processor, employer of record, accountant, or legal advisor.

This Policy applies to: (a) business customers who sign up for, administer, or use the Service ("Customers"); (b) Customer personnel, administrators, and authorized users; (c) employees, contractors, crew members, applicants, or other workforce members whose job, time, performance, compensation, or payroll-related data a Customer enters, imports, or connects to the Service ("Workers"); and (d) visitors to our websites or people who contact us for support, sales, or other inquiries. If you are a Worker with questions about your workforce/payroll data, please contact your employer or the Customer that administers your company's account, because the Customer controls that data; see Section 6.

2. Information We Collect

Account and profile information: name, work email address, password or single sign-on identifier, company name, role, permissions, workspace settings, and other information submitted when creating or administering an account.

Billing and subscription information: subscription plan, billing status, invoices, payment-related identifiers, tax or business contact details, and related communications. Card numbers and full payment details are collected and stored by our payment processor, Stripe, directly — we do not store full card numbers ourselves.

Workforce/payroll data entered, uploaded, generated, or imported by a Customer: Worker names, identifiers, contact details if provided, roles, locations, crew assignments, job and completion records, timekeeping or hours worked, pay rates, salaries, commission or bonus rules, overtime settings, callback data, payroll summary data, calculation inputs and outputs, and related notes or attachments. This data may be sensitive because it can relate to employment, compensation, scheduling, performance, and payroll decisions. It is entered directly by Customer administrators or authorized users, generated by the Service based on Customer settings, or imported from third-party CRM, field-service, timekeeping, payroll, payment, or similar tools that the Customer connects or authorizes.

Usage, technical, and device data: log data, IP address, device and browser information, operating system, pages or features used, dates and times of access, referring URLs, error reports, diagnostic data, and similar analytics generated by interacting with the Service.

Support, communications, and feedback data: information you provide when you contact us, request support, respond to surveys, participate in onboarding, exchange emails or messages with us, or provide feedback about the Service. Support interactions may include Customer Data if you choose to provide it or if it is needed to troubleshoot an issue.

Integration data: information made available through third-party integrations that a Customer enables, such as CRM, field-service, timekeeping, payroll, payment, accounting, communications, or other business systems. The categories of data depend on the integration, the Customer's configuration, and the permissions granted by the Customer or its authorized users.

Website and cookie data: if we operate websites or use cookies, pixels, SDKs, or similar technologies, we may collect information about visits, device identifiers, preferences, and interactions to keep the Service secure, remember settings, understand usage, and improve our websites and Service. You can control cookies through your browser settings, though some features may not work properly without them.

We collect information directly from Customers and users, automatically from use of the Service, from third-party services a Customer authorizes, from service providers, and from publicly available or business contact sources where appropriate.

3. How We Use Information

We use the information described above to provide, operate, maintain, and improve the Service, including to create and administer accounts; import, store, and organize Customer Data; run the P4P, payroll-summary, KPI, and related calculations Customers configure; display reports and exports; process subscription billing through payment processors; authenticate users; manage permissions; provide onboarding, support, and communications; monitor, secure, debug, and troubleshoot the Service; investigate errors, abuse, or security issues; develop and improve features; comply with legal obligations; enforce our Terms and other agreements; protect the rights, property, and safety of Easy P4P, Customers, Workers, and others; and carry out any other purpose described when information is collected or authorized by the Customer.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising where doing so would be considered a "sale" or "sharing" under applicable privacy laws. We do not use Worker workforce/payroll data for our own marketing to Workers.

4. Customer Data, Roles, and Processor Terms

For workforce/payroll data, Customer content, and other information submitted to the Service by or on behalf of a Customer ("Customer Data"), the Customer is the controller, business, or similar decision-maker under applicable privacy laws, and Easy P4P acts as a processor, service provider, or similar role on the Customer's behalf. The Customer determines what Customer Data is submitted to the Service, the purposes for which it is processed, the accuracy of the data and configurations, and how Service outputs are used. Easy P4P processes Customer Data only to provide, secure, support, maintain, and improve the Service; comply with Customer instructions and applicable law; enforce agreements; prevent fraud or abuse; and as otherwise permitted by this Policy, our Terms, or a written agreement with the Customer.

As a processor/service provider for Customer Data, Easy P4P will: (a) process Customer Data only for the business purposes described in this Policy, our Terms, the Customer's configuration and instructions, and any applicable order or written agreement; (b) require personnel and subprocessors with access to Customer Data to be bound by confidentiality or comparable obligations; (c) use reasonable administrative, technical, and organizational safeguards designed to protect Customer Data; (d) assist the Customer, taking into account the nature of the Service and information available to us, with reasonable requests relating to data subject rights, security, deletion, export, and privacy compliance; (e) notify the Customer of a Security Incident as described in Section 9; (f) make available information reasonably necessary to demonstrate our compliance with these processor terms, subject to appropriate confidentiality and operational limits; and (g) not sell Customer Data or retain, use, or disclose it outside the direct business relationship except as permitted by applicable law.

5. Customer Responsibilities

Customers are responsible for their own payroll, wage-and-hour, employment, tax, benefits, recordkeeping, privacy, and notice obligations. This includes configuring pay rates, bonus rules, overtime settings, formulas, integrations, and user permissions accurately; reviewing Service outputs before using them for payroll or employment decisions; maintaining legally required payroll and employment records; and determining whether and how the Service may be used for particular Workers, jurisdictions, or pay structures.

Customers are also responsible for providing any required notices, disclosures, and choices to Workers and other individuals; obtaining any required consents or authorizations; ensuring they have a lawful basis to submit Customer Data to the Service; responding to Worker privacy requests where the Customer controls the data; and ensuring that Customer Data and Customer instructions comply with applicable law. Easy P4P does not decide whether a Customer's pay practices are lawful and does not provide legal, tax, payroll, or accounting advice.

6. Sharing of Information

We may share information with subprocessors and service providers that help us operate, secure, bill for, analyze, support, communicate about, and improve the Service. These may include hosting and infrastructure providers, payment processors, analytics and logging providers, customer support tools, communications providers, security and monitoring vendors, professional advisors, and other vendors acting on our behalf. We require these providers to protect personal information and use it only to provide services to us or as otherwise permitted by law.

We may share information with third-party integrations and systems that a Customer authorizes, such as CRM, field-service, timekeeping, payroll, payment, accounting, communications, or reporting tools. When a Customer connects or directs us to exchange data with an integration, the Customer authorizes Easy P4P to access, receive, transmit, and process the relevant data as needed for that integration. Third-party integrations are governed by their own terms and privacy practices, and Customers are responsible for reviewing and configuring them appropriately.

We may disclose information for legal, compliance, and safety reasons, including to comply with law, subpoena, court order, or other legal process; respond to lawful requests from public authorities; enforce our Terms; protect the rights, property, or safety of Easy P4P, Customers, Workers, or others; detect, prevent, or address fraud, security, or technical issues; or establish, exercise, or defend legal claims.

We may share information in connection with a business transfer, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections and applicable law.

We may disclose aggregated or de-identified information that does not reasonably identify an individual or Customer, including for analytics, benchmarking, service improvement, and business purposes. We will maintain de-identified information in de-identified form except where re-identification is permitted by law, such as to test our de-identification processes.

We do not sell personal information to third parties for their own marketing purposes.

7. Multi-Tenant Data Isolation and Operator Access

Easy P4P is a multi-tenant application: each Customer's company data is logically separated so that one Customer's administrators and users cannot access another Customer's data. Platform operators and authorized Easy P4P personnel may access Customer Data only as reasonably necessary to provide, secure, maintain, support, troubleshoot, improve, or enforce the Service; respond to Customer requests; investigate suspected fraud, abuse, or security issues; comply with law; or protect rights and safety. We use access controls and internal practices designed to limit access to personnel and providers with a business need.

8. Retention, Export, Deletion, and Backups

We retain account, billing, support, usage, technical, and Customer Data for as long as reasonably necessary to provide the Service, maintain the Customer's account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, and support legitimate business purposes. After cancellation or termination, we may make Customer Data available for export for a reasonable period, after which we may delete, de-identify, or archive it in accordance with our retention practices and applicable law. Customers may request export or deletion of their company's data by contacting support, subject to account permissions, legal holds, backups, dispute-resolution needs, and other lawful retention requirements.

Backups and logs may retain copies of data for a limited period until overwritten or deleted through ordinary backup cycles. Deletion from active systems may not immediately delete data from backups, archives, or systems maintained for security, business continuity, or legal compliance. Customers are responsible for exporting and retaining payroll, wage-and-hour, employment, tax, and other records they are legally required to keep; Easy P4P is not the Customer's system of record unless expressly agreed in writing.

9. Security and Security Incidents

We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, use, disclosure, alteration, or destruction. These measures may include role-based access controls, logical tenant separation, encryption or secure transmission where appropriate, monitoring and logging, authentication controls, vendor review, personnel confidentiality obligations, and backup and recovery practices. No method of transmission, processing, or storage is 100% secure, and we cannot guarantee absolute security.

If we become aware of a breach of security that results in unauthorized access to or disclosure of Customer Data or personal information in our possession or control (a "Security Incident"), we will notify affected Customers without undue delay and in a commercially reasonable manner, consistent with the nature of the incident, information available to us, our legal obligations, and the legitimate needs of law enforcement or remediation. Customers are responsible for notifying Workers, regulators, or others when required by law, and we will provide reasonable assistance to Customers in connection with such notifications where required or appropriate.

10. Privacy Choices and Rights

Depending on where you live and your relationship to the data, you may have rights to access, correct, delete, port, or receive a copy of personal information; opt out of certain processing; limit use of sensitive personal information; appeal a rights decision; or object to or restrict certain processing. These rights may arise under laws such as U.S. state privacy laws, the California Consumer Privacy Act as amended, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, or other privacy laws. We will not discriminate against you for exercising privacy rights protected by law.

Customers and Customer administrators can exercise many rights and choices directly within the Service for their own account and company data. Workers should submit requests about workforce/payroll data to the Customer that controls the data, usually their employer. If a Worker contacts us directly about Customer-controlled data, we may direct the request to the relevant Customer and will reasonably support the Customer's response as required by law and our agreement with the Customer. For personal information for which Easy P4P acts as the controller, you may contact us using the details below.

11. International Transfers and Hosting

Easy P4P and our service providers may process and store information in the United States and other locations where we or our providers operate. These locations may have privacy laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

12. Children and Minors

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information directly from children under 13 or from minors for consumer purposes. Customers should not submit information about minors unless they have the authority to do so and doing so is appropriate and lawful for their workforce and use of the Service.

13. Changes to This Policy and Contact

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email, in-app notice, website notice, or other reasonable means) before they take effect, unless a shorter notice period is required for legal, security, or operational reasons. The updated Policy will be effective when posted or as otherwise stated in the notice. Continued use of the Service after the effective date means the updated Policy applies to information processed after that date. Questions about this Privacy Policy or our privacy practices? Contact Easy P4P at support@easyp4p.com.