Privacy Policy
Effective Date: August 2026 • Published by Buy One Media LLC
1. Information We Collect
EZStub collects only the minimum information necessary to generate your payroll documents, process payments, and provide document download capabilities:
- Social Security Numbers (SSN): We collect strictly the last 4 digits of the SSN (e.g.,
XXX-XX-1234) solely for document masking. We do not request, receive, or store full 9-digit Social Security Numbers. - Payroll & Compensation Data: Employer business name, address, EIN, employee name, address, wage rates, hours worked, and deduction figures you enter into the generator.
- Contact Details: Email addresses provided for receiving document copies, transaction receipts, or account authentication.
- Payment Information: All payment transactions are processed directly by our PCI-DSS Level 1 payment processor, Stripe. We do not store credit card numbers or security CVVs on our servers.
- Technical Metadata: IP addresses and browser user-agent strings recorded at checkout solely for acceptable-use attestation verification and fraud prevention.
2. Data Storage, Security & Encryption
We implement comprehensive technical safeguards to protect your personal and financial information:
- All web traffic and API endpoints are encrypted in transit via modern TLS (Transport Layer Security).
- Document payloads are stored in secured, isolated database environments with strict access boundaries.
- Administrative access requires multi-factor authentication and SSH key verification.
3. Data Retention & Deletion Procedures
12 months from generation date for document re-download access, after which records are permanently purged.
You may request immediate and permanent deletion of all your generated documents, account records, and associated data by emailing support@ezstub.app with your document reference ID or account email. Deletion requests are processed within 48 hours.
4. Third-Party Subprocessors
We do not sell, rent, or monetize your personal data. We share information only with essential infrastructure subprocessors:
Payment processing and checkout management.
Secure dedicated server hosting and encrypted database storage.
5. Your Privacy Rights (CCPA/CPRA & State Disclosures)
Under applicable state privacy laws (including California, Virginia, Colorado, and others), you have the right to:
- Request disclosure of the specific pieces of personal information collected about you.
- Request the permanent deletion of your personal data.
- Opt-out of any sale or sharing of personal data (we do not sell or share personal data).
- Receive non-discriminatory service and pricing for exercising your privacy rights.
6. Privacy Inquiries & Contact
For data access requests, deletion requests, or questions regarding this Privacy Policy, please contact our privacy team: