Privacy Policy
Last updated: June 21, 2026
QuickStub ("we", "us") respects your privacy. This Policy explains the personal information we collect, why we collect it, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
Information we collect
Account data: your email address and (if you set one) your password hash. Document data: business and worker names, addresses, dates, pay amounts, and an optional last four digits of a Social Security Number (or local equivalent). Payment data: handled by our payment processor; we receive only the order outcome and the last four digits of your payment card. Technical data: IP address, device/browser type, timestamps, and (if you opt in) analytics events. We do NOT collect full Social Security Numbers, full bank account numbers, or government ID images.
Why we use it (legal bases)
To deliver the Service you requested (performance of a contract); to bill you and prevent fraud (legitimate interest and legal obligation); to send transactional emails such as sign-in links, receipts, and security notices (performance of a contract); to comply with tax, accounting, and anti-fraud obligations (legal obligation); and, where required, on your opt-in consent for analytics or marketing email.
Data minimization
We never ask for a full SSN. The optional "last four" field is masked at storage and never displayed in full. We do not store full payment card numbers; payment data is held by our payment processor.
Who we share it with
Sub-processors: Polar Software Inc. (payments and merchant of record), our hosting provider (compute and database), Resend (transactional email delivery). Each receives only what they need to perform their function and is bound by confidentiality and data-protection obligations. We do not share personal information with advertising networks.
Do Not Sell or Share (CCPA)
We do not sell or share your personal information for cross-context behavioral advertising, and we never have. California residents have the right to confirm this, and to opt out at any time by emailing support@quickstub.app — though there is nothing to opt out of.
Retention and deletion
Account and document data is retained while your account is active and for up to 30 days after closure to handle disputes and chargebacks, then deleted. You may request immediate deletion (GDPR Art. 17 / CCPA right to delete) by emailing support@quickstub.app; we will process within 30 days, subject to legal obligations to retain billing records.
Your rights
Subject to applicable law you have the right to access, rectify, port, restrict, object to processing, and request erasure of your personal information. EU/UK residents may lodge a complaint with a supervisory authority. To exercise any right, email support@quickstub.app from the address on file; we will verify the request and respond within 30 days.
Security
Personal data is encrypted in transit (TLS 1.2+) and at rest. The optional SSN-last-four is encrypted with an application-level key separate from the database. Access to production data is limited to staff who need it for support and security.
International transfers
Our infrastructure may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses (SCCs) for transfers from the European Economic Area, the United Kingdom, and Switzerland.
Contact
Privacy questions or requests: support@quickstub.app. If you believe we have not addressed your concern, you may contact your local data-protection authority.
This page is informational only and does not constitute legal, tax, or financial advice. Please consult a qualified professional before relying on it.
Questions? Email support@quickstub.app.