Legal
Privacy Policy
On this page
Information We Collect
-
- Account and contact details — name, email, phone number, business name and role.
- Business and contractor information — ABN or business registration details for clients; identity and payout details for professionals.
- Payment-related records — invoice amounts, funding confirmations, payout destinations and transaction history. PayStaff does not store full bank account or card numbers directly; these are held by our licensed payment partners.
- Workforce and monitoring data — time, activity and, where enabled, screenshot data collected through SIPAG. See “Workforce & Monitoring Data” below.
- Usage data — device type, browser, IP address and general usage patterns, collected to keep the platform secure and to improve it.
How We Use Information
Information is used to operate the core services described in this policy: setting up and managing client and worker relationships, verifying work, preparing invoices, processing payments, and maintaining a shared record for both sides of the relationship. We also use information to provide support, detect and prevent fraud, and meet our legal and regulatory obligations.
PayStaff does not sell personal information to third parties.
Workforce & Monitoring Data
SIPAG collects time, activity and, where enabled for a specific client relationship, screenshot data. This data is used to support work verification and invoicing, and is not used to produce a general productivity score. Screenshot capture is off by default and only activated where the client relationship has explicitly enabled it, with disclosure to the professional before capture begins. Full technical detail — capture frequency, exact signals collected and role-based access — is set out in the SIPAG Privacy & Monitoring Disclosure, which forms part of this policy.
Sharing & Subprocessors
Information may be shared with:
- Licensed banking and payment partners, as necessary to complete cross-border transfers and currency conversion;
- Identity-verification and compliance partners, to perform KYC/KYB checks and sanctions screening;
- Cloud hosting and infrastructure providers, who store data on PayStaff’s behalf under contractual confidentiality obligations;
- Professional advisers and regulators, where required by law.
A current list of named subprocessors is available on request by contacting privacy@paystaff.com.
Retention
Data category
Retention period
Account and contact details
Invoices and payment records
SIPAG time and activity records
Screenshots
Support and communication records
For the life of the account, plus 7 years after closure to meet Australian financial record-keeping obligations
7 years from the date of transaction
Length of the client relationship plus 12 months
14 days, or until an open PayStaff Protect case referencing them is resolved
3 years from the date of the last interaction
Your Rights
Depending on your location, you may have rights to access, correct, or request deletion of your personal information. Australian clients may exercise rights available under the Privacy Act 1988 (Cth); Filipino professionals may exercise rights available under the Data Privacy Act of 2012 (Republic Act No. 10173). To make a request, contact us using the details below — we aim to respond within 30 days.
Contact
Questions about this policy can be directed to privacy@paystaff.com. Postal correspondence can be sent to PayStaff Pty Ltd, Sydney, New South Wales, Australia.
