Privacy Policy

SitePay (sitepay.app) is operated by Primesoft Tech Pvt. Ltd., a company registered in Nepal (“we”, “us”). SitePay is workforce-management and payroll software for Australian labour-hire and contractor businesses. This policy explains what personal information we handle, why, and the choices you have. We handle personal information in three different capacities, described separately below.

1. Website visitors and demo requests

If you request a demo through our website form, we collect the details you give us: your name, company, email address, and optionally a phone number and message. We use these solely to respond to your enquiry and arrange a demonstration of SitePay.

• We do not sell personal information.
• Our public website does not use advertising cookies, analytics cookies, or third-party trackers.
• Signing in to the SitePay app sets essential authentication cookies needed to keep you signed in, nothing else.
• We use your IP address to rate-limit form submissions and sign-in attempts (spam and abuse protection). Rate-limit counters are short-lived and expire automatically. Form counters are held in server memory, and sign-in counters are held briefly by our rate-limiting provider (Upstash). Your IP address is not stored with your enquiry.

2. Business customers and their account data

When a business uses SitePay, we hold account information for each person who is given a login (business owners, site heads, and workers): their name and login email address. Passwords are managed and hashed by our authentication provider, and we never see or store them in plain text.

We also hold the workspace data the business creates in SitePay: its sites, rosters, timesheets, pay rates, payroll runs, payment records, bank-file settings, support tickets, and activity logs. We use this information only to provide and support the service.

3. Worker information entered by employers

Most personal information in SitePay is entered by an employer about its workers so that it can roster and pay them. This can include a worker’s name, phone number, ABN, bank account details (account name, BSB and account number), PayID, pay rates, rosters, timesheets, and payroll and payment records.

We process this information on the employer’s behalf. The employer controls it: they decide what is entered, who in their workspace can see it, and when it is corrected or removed. Workers who are given a login can also view their own rosters, timesheets and payslips, and update some of their own details (such as bank account details and PayID) in the app.

If you are a worker and want to access, correct, or delete information about you in SitePay, please contact your employer first. They control the workspace your information lives in. You can also contact us at support@sitepay.app and we will help.

Where your data is stored, and how it is protected

SitePay’s data is stored in a Supabase-hosted PostgreSQL database located in Sydney, Australia (AWS region ap-southeast-2). SitePay runs on trusted infrastructure providers: Vercel (application hosting), Supabase (database and authentication), Upstash (rate limiting), and Sentry (error monitoring).

Personal information is stored in Australia, and is accessed from Nepal by Primesoft Tech Pvt. Ltd. personnel for support, engineering, and platform administration. That access is limited by role-based controls and row-level security.

Technical error reports are processed by Sentry on servers in the United States. These reports record the fault itself: the error message, the page or operation involved, and browser or server diagnostics. They are retained only for diagnosis. Error reports are scrubbed of personal information before they are sent.

Security measures include:

• encryption in transit (HTTPS/TLS) for the website and the app;
• row-level access controls enforced inside the database itself, so each business’s workspace is isolated from every other;
• role-based access within a workspace, so owners, site heads and workers each see only what their role permits;
• passwords hashed by our authentication provider.

No method of storage or transmission is completely secure, but we work to protect your information using measures appropriate to its sensitivity.

Retention and deletion

Account and workspace data is retained while the account is active, and deleted on verified request. Residual copies may persist in automated backups for a limited period after deletion before being purged. Demo enquiries are kept only as long as they are relevant to the enquiry, and deleted on request. To make a request, contact support@sitepay.app.

Changes to this policy

If we change this policy, we will update this page and its effective date.

Contact

Questions, requests, or concerns about privacy: support@sitepay.app.