Privacy Policy (DRAFT)

DRAFT for attorney review. [LEGAL ENTITY NAME — TBD] operates NoticeStamp.

Data we hold

• Employer account data (names, emails, login records, Terms acceptance).
• Employee data the employer uploads: name, email, phone, language, hire date, union rep email.
• Employee-provided emergency contact (encrypted) and the yes/no arrest/detention notification election.
• Event records: notice sends, opens, acknowledgments with timestamp, IP address and browser.

How we use it

Only to provide the service to the employer. We do not sell or share personal information, and we do not use it for advertising.

Retention

Compliance records are kept for at least 3 years (Labor Code §1553(e)), then scheduled for deletion.

Closing your account. When an admin closes the account, we stop sending all notices and reminders, cancel the subscription, and make the account read-only: you can still log in to view and download records, but you cannot change or send anything. Compliance records (notices, delivery and acknowledgment records, elections and the audit log) are kept for 3 years after closure, then permanently deleted by our automatic retention job. Any user can delete their own login (email, password and sign-in settings) at any time from Settings; this does not delete the employer's compliance records, which the law requires to be kept.

Your rights

California residents may request access, correction or deletion. Employees: requests about employer records are routed to your employer, who controls the data. Submit at /privacy-request or email the form at /contact.

Security

Encryption in transit and at rest, application-level AES-256-GCM for emergency contacts, role-based access, MFA for admins, tamper-evident audit log.