Privacy Policy

We collect:

• Account registration information (email address, name).
• Employer details (business name, sector, country, contact information).
• Employee records entered by you, including names, identity numbers (encrypted), tax reference numbers (encrypted), bank account details (encrypted), pay rates, and leave balances.
• Payroll run data and generated documents.
• Usage data (pages visited, actions taken) for platform improvement.
• Billing information processed by PayFast (we do not store card numbers).

We use your data to:

• Provide and improve the Payday platform.
• Calculate payroll figures at your request.
• Send transactional emails (payslip delivery, filing reminders, billing alerts).
• Maintain an audit trail for your payroll history.
• Comply with applicable legal obligations.

We do not sell your data to third parties.

Payroll records, payslips, and audit logs are retained for as long as your account is active. After cancellation, your data is retained for 90 days so you can export documents or reactivate, and thereafter may be retained only as required to support any legal obligations or dispute resolution. Encrypted sensitive identifiers are stored using Supabase Vault patterns and are never logged in plain text.

We use the following sub-processors:

• Supabase — database, authentication, and file storage.
• Netlify — hosting and serverless functions.
• Resend — transactional email delivery.
• PayFast — subscription payment processing.

Payday acts as a data processor when handling employee personal information on behalf of an employer (the responsible party or controller). By registering and using the platform to process employee data, you acknowledge this relationship and represent that you have a lawful basis for processing the personal data of your employees.

Employers are responsible for ensuring they comply with all applicable data protection laws in their jurisdiction, including obtaining any required consents from employees for the processing of their personal information through Payday.

Sensitive employee identifiers (national ID numbers, tax reference numbers, bank account details) are stored encrypted at rest. They are never included in audit log payloads in plain text.

Payday uses cookies and similar browser storage mechanisms for authentication session management (via Supabase Auth), user preference storage (e.g. active tenant selection), and core platform functionality. We do not use third-party advertising or tracking cookies.

By using Payday, you consent to the use of these strictly necessary cookies. You can clear cookies via your browser settings, but this will log you out of your account.

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us using the details in the Contact section below.

For privacy or data protection queries, or to exercise your rights under applicable data protection law, please contact us at: