Privacy Policy

Payroll Data Access & Privacy Disclaimer

LeoFolio is designed so that LeoFolio personnel cannot—and will not—view, retrieve, or browse your employer or employee payroll data through the current LeoFolio system.

Payroll information you enter into a Pay Run may include employer information, employee information, compensation, hours worked, deductions, withholding elections, payroll history, and calculated payroll amounts. LeoFolio uses this information only as necessary to perform supported payroll calculations, validations, record generation, and related Pay Run functions.

Your payroll records are not stored in a LeoFolio staff-accessible payroll database

LeoFolio does not currently maintain an administrative payroll database, customer payroll dashboard, employee-record repository, or other operator-facing system through which LeoFolio personnel can retrieve and inspect your employer or employee payroll information.

LeoFolio personnel therefore cannot use an internal LeoFolio dashboard to look up an employee's name, address, hourly rate, salary, hours worked, withholding elections, deductions, year-to-date payroll amounts, calculated taxes, gross pay, net pay, or previously saved Pay Runs.

LeoFolio will not intentionally create staff access to employer or employee payroll data for browsing, profiling, marketing, sale, advertising, or unrelated business purposes.

Browser storage and Pay Run processing are different things

Pay Run drafts and saved Pay Run records may be stored locally in the user's browser. Those browser-stored records are not automatically synchronized to a LeoFolio customer account or payroll-record database.

LeoFolio cannot remotely browse the collection of Pay Runs stored in a user's browser.

However, when a user performs an operation that requires LeoFolio's payroll processing services, the active Pay Run may be transmitted to LeoFolio's automated backend systems for the limited purpose of completing that requested operation. This may occur, for example, when performing supported payroll calculations, validations, record generation, checkout preparation, verification, or related Pay Run functions.

Accordingly, LeoFolio does not represent that payroll information “never leaves your browser.”

The distinction is important: LeoFolio's automated systems may process an active Pay Run, but LeoFolio personnel do not have a staff-accessible repository through which that payroll information can later be browsed or retrieved.

No intentional payroll-data logging or staff review

Under the current implementation, LeoFolio does not intentionally write complete U.S. or Canada Pay Run payloads into application logs for staff review.

LeoFolio does not intentionally retain employer or employee payroll details in application logs, administrative dashboards, or a persistent LeoFolio payroll-record database.

Ordinary application and infrastructure logs may nevertheless contain technical information associated with use of the service, such as request times, routes, response status information, error information, IP or network-related information, browser/device information, and similar operational metadata.

LeoFolio does not treat such technical information as an employee payroll record.

Payment information is handled separately

Payment processing is provided through Stripe.

LeoFolio may have access through Stripe to information associated with a payment or customer transaction, such as the customer's email address, transaction amount, transaction status, date, product purchased, customer information collected by Stripe, and limited payment-method information made available by Stripe.

LeoFolio does not receive full payment-card numbers or card security codes from Stripe.

Detailed employer and employee payroll information is not intentionally supplied to Stripe as ordinary LeoFolio checkout metadata. LeoFolio may provide Stripe with non-payroll transaction identifiers or technical values associated with a Pay Run, such as a product identifier, transaction reference, cryptographic digest, or similar checkout-verification information.

Hosting and infrastructure providers

LeoFolio relies on third-party infrastructure providers to operate the service, including hosting and payment-processing providers.

Because an active Pay Run may pass through hosting infrastructure when the user requests server-side processing, those infrastructure systems necessarily participate in the technical transmission and processing of the request.

This does not mean LeoFolio personnel have a payroll database available for inspection.

Third-party infrastructure providers may process technical request information according to their own security, infrastructure, logging, and data-processing practices. LeoFolio cannot truthfully represent that no infrastructure provider ever technically handles data transmitted through the service.

Analytics and advertising access

The current LeoFolio Pay Run interfaces are designed without third-party advertising or behavioral-analytics scripts embedded in the payroll-entry experience that intentionally receive employer or employee payroll fields.

LeoFolio does not intentionally transmit employee wages, deductions, withholding elections, payroll history, or other Pay Run financial details to advertising networks for profiling or targeted advertising.

This statement describes the current LeoFolio implementation and should be updated if the application's third-party script configuration materially changes.

Sensitive identifiers

Users should not enter information that a LeoFolio workflow does not request.

In particular, users should not enter Canadian Social Insurance Numbers, bank-account numbers, routing numbers, direct-deposit credentials, passwords, or other unnecessary highly sensitive credentials into free-text fields or other portions of a Pay Run.

LeoFolio's payroll workflows are not intended to function as a repository for those credentials.

What LeoFolio does not do with payroll data

LeoFolio does not sell employer or employee payroll information.

LeoFolio does not intentionally use employer or employee payroll information for advertising profiles.

LeoFolio does not provide LeoFolio personnel with a customer payroll dashboard containing employees' wages, deductions, withholding elections, or payroll history.

LeoFolio does not currently maintain a persistent payroll database from which LeoFolio personnel can retrieve a customer's historical Pay Runs.

LeoFolio does not use the Pay Run workflow to move employee wages, access employee bank accounts, initiate direct deposits, remit payroll taxes, or file payroll tax returns unless a particular service expressly states otherwise.

Payroll calculations and records

LeoFolio is a payroll-preparation and records platform.

LeoFolio prepares supported calculations and records based on information supplied by the user. Users remain responsible for reviewing the information they enter and the resulting calculations and records before relying on them.

LeoFolio does not independently know whether employer or employee information entered by a user is complete, accurate, current, or legally sufficient.

A generated payroll record should not be interpreted as proof that wages have been paid, taxes have been remitted, a payroll return has been filed, or a government obligation has been satisfied.

Your responsibility for devices and downloaded records

Payroll records stored in a user's browser, exported from LeoFolio, downloaded as files, printed, emailed by the user, backed up by the user, or otherwise transferred outside LeoFolio are under the user's control.

Users are responsible for protecting devices, browser profiles, downloaded files, backups, email accounts, shared computers, and other locations where payroll information may be stored after creation.

Clearing browser data, changing devices, using private-browsing modes, reinstalling software, or other local actions may remove locally stored Pay Run information where no separate user backup exists.

Security limitations

LeoFolio is designed to minimize unnecessary access to payroll information, but no website, browser, hosting system, network connection, or computer system can be represented as absolutely immune from unauthorized access, software defects, malware, compromised devices, infrastructure failures, or security incidents.

The statement that LeoFolio personnel cannot access payroll records through the current LeoFolio system does not constitute a guarantee that unauthorized access is technologically impossible under every conceivable circumstance.

It describes the intentional architecture and normal operating model of the service.

Future architectural changes

This description applies to LeoFolio's current Pay Run architecture.

If LeoFolio later introduces features such as cloud payroll storage, user accounts containing payroll history, employer dashboards, employee portals, payroll synchronization, persistent server-side payroll records, or staff-assisted payroll support requiring access to payroll data, the applicable privacy disclosures should be updated before those features are used to collect or retain such information.

LeoFolio will not silently treat a future architecture that provides staff access to stored payroll records as equivalent to the current architecture.

Plain-language summary

Your Pay Run data is yours.

LeoFolio's automated systems may temporarily process the active payroll information necessary to perform the Pay Run functions you request. However, under LeoFolio's current architecture, your employer and employee payroll records are not stored in a LeoFolio staff-accessible payroll database, and LeoFolio personnel cannot—and will not—browse or retrieve your employees' financial information through an internal LeoFolio system.

LeoFolio may have access to payment and customer information supplied through Stripe and to ordinary technical information generated in operating the website and its infrastructure. That is separate from having access to a database of your employer and employee payroll records.