Privacy Policy

RightStart LLC, doing business as WageProof, (“we,” “us,” or “our”) operates the S-Corp Reasonable Compensation tool at www.wageproof.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have.

We do not sell your data. We do not share it with third parties for marketing. We collect only what we need to generate your report and operate the Service.

We automatically collect standard technical information:

• IP address, browser type, operating system, device
• Pages visited, time spent, referring URL
• Web server logs maintained by our hosting provider (Vercel)

We use this to monitor performance, diagnose issues, and understand usage in aggregate.

We use collected information to:

• Generate your report— your inputs are combined with public BLS wage data to calculate compensation figures and produce your PDF
• Maintain your account— identify you, give you access to past reports, send transactional emails
• Process payments— share your email and payment intent with Stripe
• Improve the Service— aggregate usage analysis (not individual-level) to fix bugs and improve UX
• Comply with legal obligations— retain or disclose information if required by law

We do not use your data for advertising profiles. We do not sell, rent, or trade your personal information to third parties for marketing.

We implement reasonable measures to protect your data:

• All data in transit is encrypted via TLS (HTTPS)
• Database access is restricted and authenticated
• Payments handled by Stripe (PCI-DSS Level 1) — we never see full card numbers
• Authentication managed by Clerk with secure session management
• Production infrastructure access limited to authorized personnel

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you in accordance with applicable law.

• Account information is retained while your account is active.
• Report data is retained while your account is active so you can access past reports. Because reports may be relevant to tax filings and IRS audits, we recommend keeping your account active for at least the applicable IRS statute of limitations (generally three to six years).
• Payment records are retained as required for accounting and legal compliance.
• Server logs are retained by Vercel per their standard policies.

If you delete your account, we will delete your personal information and report data within 30 days, except where retention is required by law. Deletion of your WageProof account does not affect data independently held by Stripe or Clerk, which is governed by their respective privacy policies.

You have the right to:

• Access— request a copy of the personal information we hold about you
• Correction— ask us to correct inaccurate information
• Deletion— request that we delete your account and data (within 30 days, subject to legal retention obligations)
• Data portability— request your report data in a machine-readable format
• Withdraw consent— where we rely on consent, you can withdraw it at any time

Contact us at the email below to exercise these rights. We will respond within 30 days.

We use minimal cookies:

• Essential cookies— required for authentication (Clerk) and basic functionality. Cannot be disabled.

We do not currently use analytics cookies. If we add analytics in the future, we will update this policy before doing so.

We do not use advertising cookies, tracking pixels, or ad networks. We do not build behavioral profiles.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, provides additional rights.

Sources of personal information

We collect personal information from: (1) directly from you when you create an account or enter report inputs; (2) from authentication providers (Clerk/Google) when you sign in; (3) automatically from your device when you use the Service.

Categories collected

Under CCPA categories, we collect:

• Identifiers— name, email, IP address
• Commercial information— purchase and report history
• Internet activity— browsing on our site
• Professional information— occupation, industry, tasks (as entered by you)
• Geolocation— state and county (as entered, not tracked from your device)

We do not collect sensitive personal information as defined by the CPRA.

Your CCPA/CPRA rights

• Right to knowwhat personal information we’ve collected
• Right to correct inaccurate personal information
• Right to delete your personal information
• Right to opt out of sale— we do not sell personal information
• Right to non-discrimination for exercising your rights

To submit a CCPA request, contact us at the email below. To verify your identity, we will match information you provide against what we have on file (such as your email address). You may also designate an authorized agent to make a request on your behalf. We will respond within 45 days.

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with privacy laws may have similar rights. Since we do not sell personal information or use it for targeted advertising, most opt-out rights do not apply. For access, correction, or deletion requests, contact us below.

This Service is designed for U.S.-based S-Corp owners and tax professionals. It uses U.S. Bureau of Labor Statistics data and addresses U.S. tax law. If you access the Service from outside the United States, your data will be transferred to and processed in the United States.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it promptly.

We may update this policy from time to time. Material changes will be communicated by email or prominent notice on the site before taking effect. Continued use after changes constitutes acceptance.

Questions about this policy, data rights requests, or privacy concerns:

We aim to respond within 30 days.