Privacy Policy

1. Who we are & scope

This policy applies to visitors to our careers site and to individuals who apply for a job with PayRecs. It does not cover our current or former employees or contractors in that capacity, who receive a separate internal notice. If you apply for a role, the California Applicant Notice at Collection below also applies to you.

2. Information we collect

We collect the following categories of personal information:

Sources. We collect this information directly from you when you browse or apply; automatically from your device (such as IP address and user-agent); and from our anti-spam provider, which helps us confirm that a submission is from a person.

We do not collect biometric data, precise geolocation, government identifiers such as a Social Security number, or data used to build advertising profiles, and we do not make decisions about you based solely on automated processing.

3. How we use it

• To receive, evaluate, and administer your job application and communicate with you about roles;
• To help our team review applications, we use an AI model to compare the experience, skills, and answers you provide against the role’s published requirements. We do not send your name, email address, profile URL, or work-authorization answer to that model. This supports human review and does not replace it — a person reviews your application and makes every decision about it;
• To detect and prevent spam, fraud, and abuse (including an anti-spam challenge on the application form);
• To operate, secure, and improve our careers site;
• To comply with legal obligations and to establish, exercise, or defend legal claims;
• To measure how our careers site is used through cookieless analytics — only if you accept (see Analytics & your choices).

We use your work-authorization answer (sensitive information) only to assess your eligibility for the role and for the related purposes above — never to infer other characteristics, and never for advertising.

4. How we disclose it

We disclose personal information only to service providers who process it on our behalf under contract — our website host, database provider, transactional email provider, anti-spam provider, and an AI model provider that helps us assess applications — and, where necessary, to comply with law, enforce our terms, protect rights and safety, or in connection with a merger, acquisition, or other business transfer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California and other U.S. state privacy laws. We have not done so in the preceding 12 months. We do not use or disclose sensitive personal information beyond the purposes permitted by law.

5. Cookies & similar technologies

Our careers site uses only strictly necessary cookies (for example, to keep authorized staff signed in). We do not use advertising or third-party analytics cookies, and our analytics (below) is cookieless. We honor the Global Privacy Control(GPC) browser signal: if your browser sends GPC, we treat analytics as declined and do not prompt you.

6. Analytics & your choices

To understand how our careers site is used, we may count privacy-respecting, cookieless events — such as a page view or the start of an application — per role, per day. We store only a one-way keyed hash derived from your IP address and browser, never a cookie or a cross-site identifier, and we never sell this information or use it for advertising.

This analytics is opt-in. We collect nothing until you select “Accept” in our consent banner. You can decline — declining does not affect your ability to browse or apply — and you can change or withdraw your choice at any time using the “Tracking preferences” link in the footer. If your browser sends Global Privacy Control, analytics stays off automatically.

7. How long we keep it

We keep applicant information for up to 24 months after a hiring decision, unless a longer period is required by law or is needed for an ongoing or reasonably anticipated legal matter, after which we delete or de-identify it. Analytics information is retained only in de-identified, aggregated form.

8. How we protect it

We encrypt sensitive personal information at rest, restrict access to authorized personnel, and maintain audit logging of administrative actions. No method of transmission or storage is completely secure, but we work to protect your information using appropriate safeguards.

9. Your privacy rights

Depending on where you live, you may have the right to access or know the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to opt out of any sale, sharing, or targeted advertising (we do not do these), to limit our use of sensitive personal information, to opt out of certain profiling, and to appeal a decision on your request.

To exercise any right, email us at privacy@getpayrecs.com. We will verify your identity using the information associated with your application, and you may use an authorized agent. We aim to respond within 45 days and will tell you if we need an extension. We will not discriminate or retaliate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision; if you remain unsatisfied, you may contact your state attorney general.

10. California privacy rights (CCPA/CPRA)

California residents have the rights described above, including the right to know the categories of personal information we have collected and disclosed in the prior 12 months, the sources, and the business purposes (see section 2). We have not sold or shared personal information. You have the right to limit the use of your sensitive personal information to what is necessary to provide the services; we already restrict our use of the one sensitive item we collect (your work-authorization answer) to that purpose. Under California’s “Shine the Light” law, we do not disclose personal information to third parties for their direct marketing. We honor the Global Privacy Control signal. If you are a job applicant, please also read the Applicant Notice at Collection below.

11. California Applicant Notice at Collection

If you apply for a job with PayRecs and reside in California, this notice applies to you. California privacy law fully covers job applicants. At or before the point of collection, we tell you:

• Categories we collect from applicants: identifiers; customer records; professional/employment information; education information; internet/network activity; and sensitive personal information (your U.S. work-authorization answer, which can indicate citizenship or immigration status). See the table in section 2.
• Purposes: to evaluate and administer your application, communicate with you, prevent fraud and abuse, maintain security, and comply with law (section 3). We do not use this information for advertising and do not sell or share it.
• Sensitive information: used only to assess your work eligibility and the related purposes above; you may limit its use, though we already limit ours to those purposes.
• Retention: up to 24 months after a hiring decision unless a longer period is legally required (section 7).
• Your rights: to know, access, correct, and delete, exercised at privacy@getpayrecs.com (section 9).

12. Other U.S. state privacy rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Florida, among others, have rights similar to those in section 9 — to access, correct, delete, and obtain a portable copy of their data, to opt out of sale and targeted advertising (which we do not do), and to appeal a denied request. Nevada residents may opt out of the sale of certain covered information; we do not sell it. To exercise any of these, email privacy@getpayrecs.com. Some states add specific requirements, which we honor:

• Universal opt-out signals. For residents of states such as Colorado, Connecticut, Texas, Montana, Oregon, Delaware, New Jersey, New Hampshire, Minnesota, and Maryland, we recognize browser-based universal opt-out mechanisms, including Global Privacy Control.
• List of specific third parties. Oregon and Minnesota residents may request the specific third parties to which we have disclosed personal information (not only the categories).
• Profiling. Minnesota residents (and others) may question the result of profiling used in decisions that produce legal or similarly significant effects; we do not use solely automated decision-making of that kind.
• Sensitive data. For Texas and similar states, we disclose that we may process the limited sensitive category described above and use it only for the stated purpose.
• Data minimization. Consistent with Maryland’s stricter standard, we limit collection of personal information to what is reasonably necessary and do not sell sensitive data.
• Appeals. Virginia, Colorado, Connecticut, and peer states give you the right to appeal our decision on a request, as described in section 9.

If your state has enacted a comprehensive privacy law not named here, you may still contact us to exercise the equivalent rights it provides.

13. Children’s privacy

Our careers site is intended for adults seeking employment and is not directed to children. We do not knowingly collect personal information from anyone under 16.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the effective date above and post the updated policy here. A new version also re-prompts your analytics consent and is acknowledged on any new application.

15. Contact us

PayRecs Inc
20 South Sarah St., Saint Louis, MO 63108
privacy@getpayrecs.com