Privacy policy

Two kinds of data, two roles

Your account. When you sign up, we are responsible for the data about you and your company account. We are the controller of that data.

Your payroll. The employee and salary records your company enters belong to your company. For that data your company is the controller and we are its processor: we store and compute it only to provide Payloom to you, on your instructions, and never use it for anything else. If you are an employee whose payslip is in Payloom, please contact your employer first; we will help them answer you.

What we store

Account data

• Your name, email address and role (administrator or payroll), and your password stored only as a bcrypt hash.
• Your company's name and settings: pay heads, statutory settings, tax slabs and payslip design (including any logo or signature image you upload).
• An activity log of changes made in your company's account, with who made them and when.
• Your plan and billing history: plan, period, amounts, currency and payment references. If you pay by bank transfer, the payer name, transaction ID, date and any receipt you upload.

Payroll data your company enters

• Employee details: name, employee code, email, phone, CNIC, designation, grade, department, joining and exit dates.
• Bank details for salary transfers: bank, branch, account title and account number.
• Pay: contractual salary, allowances, EOBI, provident fund and the hours used for overtime.
• Monthly payroll runs and payslips: attendance, overtime, bonuses, advances, deductions, income tax and net pay.

Technical data

• Your IP address, used at sign-up for abuse protection and to work out your country for prices. We don't store it with your account.
• Server logs (requests and errors), kept for troubleshooting.
• A log of the emails we send you (recipient, subject, status), with sign-in links removed.

Why we use it

• To run the service you signed up for: sign you in, calculate payroll and tax, produce payslips and bank sheets.
• To send emails the service needs: welcome, team invitations, password resets, payment confirmations and plan reminders.
• To bill paid plans and keep the records tax law requires.
• To keep Payloom secure, prevent abuse and fix problems.
• To understand, in aggregate, how people find and use our website, so we can improve it.

We don't sell personal data, we don't use your payroll data for advertising, and we don't use it to train AI models.

Who processes data for us

• Hosting. Payloom and its database run on our own server, which we administer. Your data is not shared with a hosting platform beyond the server provider that supplies the machine.
• Payments: Paddle. Our order process is conducted by our online reseller Paddle.com, the merchant of record for all our orders. Paddle collects and processes your payment details, billing address and tax information. We never see or store your full card number. Paddle's handling of your data is described in the Paddle privacy notice. We receive from Paddle what we need to run your plan: your customer and subscription IDs, the plan, amounts, invoice numbers and status.
• Email delivery. Emails are sent through Resend or through an SMTP mail service we configure. They receive the recipient address and the message.
• Bot protection. When enabled, Cloudflare Turnstile checks the sign-up form for automated abuse. It sees your IP address and browser signals during that check.
• Analytics. Google Analytics measures visits to our pages (pages viewed, referrer, approximate location, device), with IP anonymisation turned on. It does not receive the payroll data you enter. You can opt out with the Google Analytics opt-out add-on.

Cookies and local storage

• payloom_session keeps you signed in. It is strictly necessary, HTTP-only and expires after 12 hours.
• _ga and _ga_* are set by Google Analytics to tell visits apart. They last up to two years.
• Your browser's local storage remembers interface choices (light or dark theme, a collapsed sidebar). It never leaves your device.
• Paddle sets its own cookies on the checkout, needed to take the payment securely.

How long we keep it

• Account and payroll data: for as long as your company account is open. Payroll records are history your company may need for tax, so we don't delete closed months on our own.
• When you ask us to delete your account, we delete your company's data within 30 days. Backups that contain it roll off within a further 30 days.
• Billing records: as long as tax and accounting law requires, even after the account is closed.
• Email logs: 90 days. Server logs: up to 30 days.

Security

Connections are encrypted with HTTPS. Passwords are hashed, email credentials are stored encrypted, and every query is scoped to your company so one company's data can't be read in another's account. Access to the server and database is limited to the operator.

Your rights

You can ask us to:

• access the personal data we hold about you;
• correct anything that's wrong (most of it you can edit yourself in Payloom);
• delete your account and your company's data;
• export your data: payroll registers and bank sheets download from Payloom any time, and we will send a full copy on request.

Write to hello@1001toolbox.com from the email on your account. We answer within 30 days. If you think we have handled your data wrongly, you can also complain to the data protection authority where you live.

Children

Payloom is a business tool for adults. It is not meant for children under 16, and we don't knowingly collect their data as users.

International transfers

Our service providers may process data outside your country. Where they do, we rely on their contractual safeguards, such as standard contractual clauses, to protect it.

Changes

When we change this policy, we update the date at the top. If a change matters to how your data is used, we tell account administrators by email before it takes effect.

Contact

1001 Toolbox, operated by Ehtesham Ali, Pakistan. Email hello@1001toolbox.com. See also our terms of service and refund policy.