Home / Privacy Policy

Privacy Policy

Effective date: October 1, 2026

Table of contents
  1. 1. Scope of This Privacy Policy
  2. 2. Categories of Information We May Collect
  3. 3. Payroll and Worker Information
  4. 4. Social Security Numbers and Sensitive Identifiers
  5. 5. Project and Contract Information
  6. 6. Payment Information
  7. 7. Dropbox and Client File Uploads
  8. 8. Email and Communications
  9. 9. Website Information
  10. 10. Cookies and Similar Technologies
  11. 11. How We Obtain Information
  12. 12. How We Use Information
  13. 13. Purpose Limitation
  14. 14. Client Responsibility for Employee Information
  15. 15. Service Providers
  16. 16. Sale of Payroll Information
  17. 17. Disclosure Necessary to Provide Services
  18. 18. Legal and Compliance Disclosures
  19. 19. Business Transfers
  20. 20. Information Security
  21. 21. Client Security Responsibilities
  22. 22. Data Minimization
  23. 23. Data Accuracy
  24. 24. Data Retention and Platform Retention Practices
  25. 25. End of Engagement and Client Files
  26. 26. Backup and Archived Information
  27. 27. Payment Record Retention
  28. 28. Communications Retention
  29. 29. Privacy of Client Employees
  30. 30. Requests Concerning Personal Information
  31. 31. Identity Verification
  32. 32. Children’s Privacy
  33. 33. Marketing Communications
  34. 34. Do Not Track and Browser Controls
  35. 35. Links to Third-Party Websites
  36. 36. International Access
  37. 37. Security Incidents
  38. 38. Client Obligation to Report Security Concerns
  39. 39. Our Role in Client Data
  40. 40. Government and Prime-Contractor Records
  41. 41. No Absolute Security or Confidentiality Guarantee
  42. 42. Changes to Technology and Service Providers
  43. 43. Changes to This Privacy Policy
  44. 44. Relationship to Our Terms of Service
  45. 45. Contact and Privacy Requests

In plain English

The Short Version

Squared Right handles business, project, payroll, and worker information because we need information to validate the numbers and prepare your reports.

We don’t need every piece of personal information contained in your payroll system.

Send only what we need.

Payroll and project files should be exchanged through our designated Dropbox process.

Payments are processed through Stripe, which means we generally do not maintain complete payment-card or bank-account credentials ourselves when Stripe processes that information directly.

We may receive employee names, classifications, hours, wages, fringe-benefit information, timesheets, payroll records, and limited worker-identification information because those details may be necessary to perform our services.

Don’t send us full Social Security numbers unless we specifically request them and provide an approved method for transmitting them.

We use Client information to perform the engagement, administer our business, maintain appropriate records, process payments, protect our systems and legal interests, and satisfy applicable obligations.

We do not sell Client payroll records or employee payroll information to data brokers.

We use third-party providers such as Dropbox and Stripe. Those companies operate their own systems and maintain their own privacy, security, backup, deletion, and retention practices.

Our retention decisions consider the information involved, why we need it, applicable requirements, legitimate business and recordkeeping needs, and the technology used to process or store it.

Deleting something from an active workspace does not necessarily mean every backup or third-party copy disappears immediately.

We use reasonable safeguards, but no electronic system can be guaranteed to be completely secure.

And Squared Right is not your permanent records archive.

Clients remain responsible for maintaining the payroll, employment, contract, certified payroll, and project records they are required to keep.

Our goal is simple:

Collect what we need. Use it for the work. Protect it reasonably. Keep it only as appropriate.