Privacy policy

What we collect

• The files you upload: pay stubs, bank statements and similar documents.
• What you type when you start a check: an optional applicant label and your email address.
• If you create an account: your email, your name if you add it, and your team.
• Basic technical logs needed to run the service, without the contents of documents.

What we use it for

Only to produce your report and send it to you: we read the file's structure and the values printed on the document, check that they're consistent, and show you what to verify. We don't sell data, share it for advertising, or build profiles of applicants.

StubSure doesn't look up applicants anywhere else. We review only what you upload.

Social Security numbers

We don't extract Social Security numbers. They never appear in reports, emails or shared links. A number printed on a document stays inside the original file until that file is deleted.

How long we keep it

• Uploaded files and reports are permanently deleted 7 days after the check, or immediately when you click “Delete report and files now”.
• For checks run while signed in, the dashboard keeps a record without the documents: the applicant label you typed, the date, the document types and the count of findings. It's deleted when you ask us to delete your account.
• Sign-in links expire after 15 minutes. Sessions end after 30 days or when you sign out.

Who processes it for us

We use a small number of providers, each only for its part of the job: cloud storage for uploaded files, an AI model provider that reads the values on a document, an image analysis provider that checks photos and scans for signs of AI generation, an email delivery provider, and a payment provider that acts as merchant of record. We use AI providers only under business terms that don't allow them to train models on your documents.

Cookies

If you sign in, we set one cookie to keep you signed in. We don't use advertising or tracking cookies.

Your choices

You can delete any report and its files from the report page at any time, and your account from Settings. To get a copy of your account data, write to us through the contact page and we'll send it within 30 days. California residents have the same rights under the CCPA; we don't sell or share personal information as defined there.

Changes and contact

If we change how we handle data, we'll update this page and the date at the top. Questions go to the contact page.