Privacy & Data Security

Privacy Policy

Effective Date: August 2026 • Published by Buy One Media LLC

1. Information We Collect

EZStub collects only the minimum information necessary to generate your payroll documents, process payments, and provide document download capabilities:

  • Social Security Numbers (SSN): We collect strictly the last 4 digits of the SSN (e.g., XXX-XX-1234) solely for document masking. We do not request, receive, or store full 9-digit Social Security Numbers.
  • Payroll & Compensation Data: Employer business name, address, EIN, employee name, address, wage rates, hours worked, and deduction figures you enter into the generator.
  • Contact Details: Email addresses provided for receiving document copies, transaction receipts, or account authentication.
  • Payment Information: All payment transactions are processed directly by our PCI-DSS Level 1 payment processor, Stripe. We do not store credit card numbers or security CVVs on our servers.
  • Technical Metadata: IP addresses and browser user-agent strings recorded at checkout solely for acceptable-use attestation verification and fraud prevention.

2. Data Storage, Security & Encryption

We implement comprehensive technical safeguards to protect your personal and financial information:

  • All web traffic and API endpoints are encrypted in transit via modern TLS (Transport Layer Security).
  • Document payloads are stored in secured, isolated database environments with strict access boundaries.
  • Administrative access requires multi-factor authentication and SSH key verification.

3. Data Retention & Deletion Procedures

12 months from generation date for document re-download access, after which records are permanently purged.

You may request immediate and permanent deletion of all your generated documents, account records, and associated data by emailing support@ezstub.app with your document reference ID or account email. Deletion requests are processed within 48 hours.

4. Third-Party Subprocessors

We do not sell, rent, or monetize your personal data. We share information only with essential infrastructure subprocessors:

Stripe Inc.

Payment processing and checkout management.

Hetzner Cloud GmbH

Secure dedicated server hosting and encrypted database storage.

5. Your Privacy Rights (CCPA/CPRA & State Disclosures)

Under applicable state privacy laws (including California, Virginia, Colorado, and others), you have the right to:

  • Request disclosure of the specific pieces of personal information collected about you.
  • Request the permanent deletion of your personal data.
  • Opt-out of any sale or sharing of personal data (we do not sell or share personal data).
  • Receive non-discriminatory service and pricing for exercising your privacy rights.

6. Privacy Inquiries & Contact

For data access requests, deletion requests, or questions regarding this Privacy Policy, please contact our privacy team:

Buy One Media LLC — Privacy Team
Dayton, Ohio