Privacy

Last updated November 8, 2026.

Who we are

Simple Certified Payroll is run by Staunch Digital. Contact: support@simplecertifiedpayroll.com.

What we store, and why

  • Your account: your name, email address, a one-way hash of your password, your plan and billing status, and when you last signed in. To run your account.
  • Your company: the business name and address, certifying official, phone and email, and fringe benefit plan names you enter. They are printed on your payrolls.
  • Your projects: project names, numbers, locations and the wage determination you selected.
  • Your workers and payrolls: worker names, the identifying numbers you assign, classifications, hours, rates, fringe, deductions and pay, and your Statement of Compliance answers. We hold these only to make your certified payroll. They are encrypted before they are stored, with a key kept separately from the database, and are opened only for your own signed-in account.

We do not collect Social Security numbers: the current WH-347 asks for an identifying number, and the app refuses anything that looks like a Social Security number.

Payroll documents

The WH-347 PDF is made in your browser from your saved data. We don't store PDF copies and we never send payroll by email.

We act for you

For your workers' data, we process it on your behalf and on your instructions. You remain responsible for having the right to give it to us and for what you report.

Service providers

  • Cloudflare hosts the site and stores the database.
  • Stripe processes payments; we never see or store card details.
  • Our email provider sends account email (welcome, confirmation, password reset, plan notices). It never receives payroll data.

How you found us

When you sign up, we record how you found us: the name of the website that sent you (not the full address), the campaign tags in the link, the first page you saw, and your answer to "How did you find us?" if you give one. It holds no name or email, is never shared, and stays without any link to you if the account is deleted. To remember it between pages we set one first-party cookie, src, for 90 days.

Cookies

Signing in sets one essential cookie that keeps you signed in for up to 30 days. Sign-up and sign-in use Cloudflare Turnstile to check for automated abuse. There is no advertising tag in the app.

How long we keep it

  • Delete a week, a project or your whole account at any time; deletion removes it straight away from the live database.
  • An account that never starts a plan is deleted after 7 days. When a paid plan ends, the account and its data are kept for 90 days so you can resubscribe, then deleted; we email you before.
  • Backups of the database expire on a fixed schedule.
  • The Davis-Bacon rules require contractors to keep payroll records for three years after the work. Keep your own copies (download your WH-347s); our retention above is not a substitute.

Questions and requests

Write to support@simplecertifiedpayroll.com.