It’s easy to switch. We’ll even set you up for free

Privacy Policy

Privacy Policy

PLEASE READ THIS PRIVACY STATEMENT AND NOTICE OF PRIVACY PRACTICES CAREFULLY. This Privacy Statement and Notice of Privacy Practices (“Privacy Policy”) sets forth the privacy practices of OnPay, Inc., a Delaware corporation with its offices at 675 Ponce de Leon Avenue NE, Suite W207 Atlanta, GA 30308 (collectively “we” “us” or the “Company”). The Privacy Policy governs your use of the websites and, your use of the Company’s mobile applications and mobile service offerings, your use of any affiliated third party websites that may contain a link to this Privacy Policy, or to any pages, facilities, services, or capabilities accessible on these multiple sites (collectively the “Sites”). This Privacy Policy is intended to be an enterprise wide privacy policy applicable to all data collection by the Company.

This Privacy Policy shall apply strictly to the information collected in the United States. This Privacy Policy describes how we treat your use of the Sites and when you use our products (“Products”) and services (“Services”) which we define below in the Description of Products and Services section of this Privacy Policy, including the collection, storage, transfer, sharing and handling of your personally identifiable information (“Personally Identifiable Information” or “PII”) and your non-personally identifiable information (“Non Personally Identifiable Information” or “NPII”) when you utilize the Sites or obtain our Products or Services.

Changes or Updates to this Privacy Policy

We reserve the right to revise or update this Privacy Policy at any time, and you agree to be bound by those revisions or updates. We will notify you of any changes to the Privacy Policy by posting the revised or updated Privacy Policy and its “Last Modified” date on the Sites. Your use of the Sites thereafter constitutes your agreement to and acceptance of the Privacy Policy and its revisions or updates. You should periodically read the Privacy Policy to learn of any revisions or updates. In the event we materially change the way in which we use your PII, we will provide you with at least 30 days notice and ask you to affirmatively accept the changes to a new Privacy Policy.

This Privacy Policy is incorporated as part of the Terms of Service that apply with respect to your use of the Sites. The information you provide to us is also governed by the Terms of Service. If you do not agree to the terms and conditions of this Privacy Policy, including having your information used in any of the ways described in this Privacy Policy do not provide us with your information. If you do not agree to any terms of the Privacy Policy, please do not use the Sites.

This Privacy Policy does not apply to information you may choose to provide to us that does not display or link to this Privacy Policy or that does not have this Privacy Policy prominently displayed at the point of the collection of your information. By providing us your information, you acknowledge that you have read this Privacy Policy and consent to the privacy practices as described in this Privacy Policy. Your further affirm your consent by submitting content or materials to us through our Sites. This Privacy Policy is not intended to and does not create any contractual or other legal right in or on behalf of any person.

Contact and Electronic Communications Opt Out

By provide us with your information on our Sites, you agree that we can communicate with you electronically regarding any security, privacy, or administrative matters relating to your use of the Sites or the Products or Services and generally for business purposes, i.e. notifications and important messages related to the use of our Products and Services. If, at any time after registering your information or electing to sign up for Products or Services, you change your mind about receiving information from us, send us a request specifying your new choices. Simply send your request to the address listed below. If you have any specific questions about this Privacy Policy, you may contact us using the number or the address listed below or by emailing us at

OnPay, Inc.
Attention: Privacy Officer
675 Ponce de Leon Avenue NE
Suite W207
Atlanta, GA 30308

Description of Products and Services

OnPay™ is an online, mobile and on-demand solution (“Products”). It enables employers to create paychecks or access payroll reports 24 hours a day, 7 days a week. OnPay™ services include payroll tax payments and filings, direct deposit and optional pay-as-you-owe workers’ compensation.

Information We Collect From You

We collect two types of information from you when you visit our Sites or register to use our Products and Services: (1) “personally identifiable information” (as defined below) and (3) “non-personally identifiable information” (as defined below).

Personal Identifiable Information (“PII”)

Personally identifiable information includes, but is not limited to, your name, company name, address, email address and phone number. Since we are an online payroll company, we also collect, store and process your sensitive financial information. This type of information may include your social security number, marital status, bank account information including account numbers, tax information, and company earnings data. We use your PII to provide you with the Products and Services, administer your inquires and complete your transactions.

Non-Personally Identifiable Information (“NPII”)

Non-Personally Identifiable Information can be technical information or it can be demographic information, such as your age, gender, or interests. NPII may also mean aggregated, non-identifiable or anonymized information. NPII does not identify you personally. If you do provide us with Non-Personally Identifiable information, we may use it for the purposes described in this statement or where it is collected, or any other legal purpose.

Here are some examples of the ways in which we may collect and store your Non-Personally Identifiable Information through our Services, and how we use such information:

  • Log Information. When you use our Services or view content provided by the Company we automatically collect and store certain information in our server logs. This type of information includes details of how you used our Services, IP address information described below, web pages which have been viewed by a visitor, date and time, domain type, device event information such as crashes, system activity, hardware, settings, browser type or version, browser language, the date and time of your request and referral URL.
  • Internet Protocol (IP) address. Your “IP address” is a number that lets computers attached to the Internet know where to send you data, such as the screens and pages of our Services that you view. We use this information to deliver our screens and pages to you upon request, to tailor our Services to the interests of you and our other visitors, and to measure traffic to and within our Sites.
  • Demographic Information. “Demographic Information” may be your gender, age, zip code, and interests. We may collect such information about you through our Services and use it to provide you with personalized Services and to analyze trends to ensure that our services are targeted to meet your needs. Please note that we also consider aggregated information, which is not personally identifiable, to be non-personally identifiable information.

Sharing and Disclosure of PII and NPII

Personally Identifiable Information. Primarily, we may share or disclose your PII in the following instances:

  • To fulfill a service to you.

For example, if you email us a question, we may use your email address to process your request and respond to your question.

  • To offer you products from our affiliates, strategic partners, agents, or from third-party marketers and other unaffiliated parties that we believe may be of interest to you, or to assist such parties for research, administrative, and/or business purposes.

These parties may contact you with an offer or advertisement related to a product or service, or they may use such information for their own research, administration or business purposes.

  • To unaffiliated third-party service providers, agents, or independent contractors who help us maintain our services and us with other administrative services (including, but not limited to, order processing and fulfillment, providing customer service, maintaining and analyzing data, sending customer communications on our behalf, and entry collection, winner selection and prize fulfillment for contests, sweepstakes, and other promotions).

The Company requires these service-related companies to comply with the principles set out in the Privacy Policy, and requires them to use such information only for the purposes for which it was provided to them.

  • To complete your purchase.

If you choose to make a purchase of one of our Products or on or through our Services, we may ask you for your credit card number, billing address, wiring instructions, and other information in connection with completing such a purchase, and we may use such information to fulfill your purchase. We may also provide such information, or other PII provided by you, to unaffiliated third-parties to complete your purchase (for example, to process your credit card).

  • To comply with our obligations under law or for legal purposes.

We may disclose PII about you and your use of the Services if we believe that such disclosure is reasonably necessary to:

  • Comply with the law and/or legal process where a formal request has been made (e.g. request from an administrative oversight agency, civil suit, subpoena, court order or judicial or administrative proceeding);
  • Protect or defend our rights and/or property or the rights and property of others;
  • Enforce our Terms of Conditions, Terms of Service, our Cookie Policy and/or this Privacy Policy;
  • Respond to claims that the content(s) of a communication violates the rights of another.
  • To third parties as part of a corporate reorganization process including, but not limited to, mergers, acquisitions, and sales of all or substantially all of our assets.

Circumstances may arise where, for business reasons, we may decide to reorganize, or divest all or part of our business through sale, assignment, merger or acquisition, or we may acquire a new business. In these circumstances, PII may be shared with the actual or prospective purchasers or assignees, or with the newly acquired business.

  • To track and analyze NPII, i.e. non-identifying, aggregate usage and volume statistical information from our visitors and customers and provide such information to third parties.
  • To protect against fraud and potential fraud.

We may verify the information you provide to obtain our Products and Services through third parties. In the course of such verification, we may receive additional PII about you from such services. In particular, if you use a credit card or debit card to purchase services with us, we may use card authorization and fraud screening services to verify that your card information and address match the information you supplied to us, and that the card has not been reported as lost or stolen.

Non-personally identifiable information. We may share and disclose your NPII for the purposes described in this statement or where it is collected, or any other legal purpose, including, when and where applicable, sharing and disclosing non-personally identifiable information combined with PII.

Access and Ability to Correct Your Information

You may modify, correct, change, or request us to delete or update PII that we have collected through the Sites by contacting us via postal mail, e-mail, or telephone, as provided in the Contact and Electronic Communication section of this Privacy Policy.

Cookies and Other Technology

We use “cookies” to collect information from you when you visit our Sites. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. We receive and store information about how you use our website when you visit the Sites. For example, we receive information that your browser or device sends to our servers whenever you visit the Sites. Your browser or device may tell us your internet protocol (IP) address used to connect your computer to the Internet, computer and connection information such as browser type, version, language and time zone setting, browser plug-in types, operating system, and type of device you are using. When you visit the Sites, your browser may also tell us information such as the actions you take on our Sites, the pages that led you to our Sites and, if applicable, the search terms you typed into a search engine that led you to our Sites. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the Sites. If you do not accept cookies, however, you may not be able to use all portions of the Sites or all functionality of the Services.

Third-Party Links and Websites

Our Site may contain links to third-party services. While we endeavor to work with third parties that share our respect for user privacy, we are not responsible for the websites or privacy practices of such third-parties. You are responsible for knowing when you are leaving our Sites to visit a third party website, and for reading and understanding the terms of use and privacy policy statements for each such third party.

Children Under 13

The Sites, Product and Services provided by the Company are not directed to persons under 13. We do not knowingly collect PII from children under 13. If you become aware that your child is accessing the Sites, or Services and providing PII without your consent, please contact us by using the information provided in the Contact and Electronic Communications section of this Privacy Policy. We will take steps to remove PII from the Company’s servers and terminate the account should the Company determine that a child under 13 has accessed the Sites or Services.

Social Media and Community Platforms

Any information, communications, or material of any type or nature that you submit to the Sites or through the Services (including, but not limited to any Site contained on a social media platform or website such as Facebook, Instagram or Twitter) by email, posting, messaging, uploading, downloading, or otherwise (collectively, a “Submission”), is done at Your own risk and without any expectation of privacy. We cannot control the actions of other users of any social media platform or website and the Company is therefore not responsible for any content or Submissions contained on such sites and platforms. By visiting our Sites contained on a social media platform or website, you are representing and warranting to us that you have reviewed the applicable privacy policy and terms of use of such platform or website and that you will abide by all such provisions contained therein. We may provide public areas on our Services, such as forums and chat rooms, where you can post information about yourself and others. Please exercise discretion and use caution with respect to your information, especially in such public areas. We do not control who reads postings on our Sites, or how they may use or disclose such information. If you choose to voluntarily disclose information on public portions of our Sites, that information will be publicly available and can be collected and used by others. For example, if you post your email address, you may receive unsolicited messages. PLEASE BE EXTREMELY CAREFUL WHEN DISCLOSING ANY INFORMATION ABOUT YOURSELF OR OTHERS IN PUBLIC AREAS OF OUR SITES. WE ARE NOT RESPONSIBLE FOR THE USE OR DISCLOSURE OF SUCH INFORMATION

Advertisers and Marketing

We may also use third-party advertisers, ad networks, and other advertising, marketing, and promotional companies, to serve advertisements about our Products and Services. Such third parties may gather information about your visit to our Sites, monitor your access to our Sites or market products or services to you, monitor the ads you view, click-on, or interact with, when they were delivered, and the screens and pages that they are on. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt out by clicking here. Please note this does not opt you out of being served advertising. You will continue to receive generic ads. To learn more about these practices, as well as your choices regarding the practices of these third-party advertising companies, you may wish to visit and/or Both the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”) websites provide information regarding their respective members practices and your choices regarding having your information used by these companies, including the opt out procedures. Opting out of one or more NAI or DAA members only means that those NAI or DAA members no longer will be allowed under their own rules to deliver advertisements to you based on your visits to our Sites and other sites, but does not mean you will no longer receive any targeted content and/or ads. Also, if your browsers are configured to reject cookies when you visit this opt out page, or you subsequently erase your cookies, use a different device or change web browsers, your NAI or DAA opt out may not, or may no longer, be effective. We are not responsible for effectiveness of or compliance with any third parties’ opt out options or programs.

We do not endorse these parties, their content, or any products and services they offer. You are responsible for knowing when you are leaving our Sites to visit a third-party website, and for reading and understanding the terms of use and privacy policy statements for each such third party. We are not responsible for, and will not be liable for, their conduct, actions, omissions, or information handling or dissemination practices.

How We Protect Your Information

OnPay™ is accessed only through industry standard SSL high-grade encryption (AES-256 256 bit) and is connected to our secure data facility that is protected by both 24/7 security guards and surveillance systems. Additionally, all data is backup via real-time in both Atlanta, Georgia and Tampa, Florida. No data transmissions over the Internet are completely secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us or others over the Internet. You transmit such information at your own risk. Once we receive your transmission, we make reasonable efforts to ensure the security of our systems. We use encryption to protect your information from unauthorized access, disclosure, alteration, or destruction. However, this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of our systems or our secure servers.

Contests, Promotions, and Giveaways

We may conduct giveaways, contests and other promotions related to your use of our Products or Services in which we may ask you for additional information. We use and treat this information in accordance with the terms of this Policy. Participation in such giveaways and contents is not necessary to use the Services, and you may choose whether you wish to participate in any particular giveaway or contest, without affecting your general use of the Sites.

California Residents’ Rights

(As provided by California Civil Code Section 1798.83)

A California resident who has provided personal information to a business with whom he/she has established a business relationship for personal, family, or household purposes (“California customer”) is entitled to request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed.

Please note that whenever you opt-in to receive future communications from a third party, your information will be subject to the third-party’s privacy policies and practices. If you later decide that you do not want that third party to use your information, you will need to contact the third party directly, as we have no control over how third parties use information. You should always review the privacy policies and practices of any party that collects your information to determine how that entity will handle your information. California customers may request further information about our compliance with this law by e-mailing Please note that we are only required to respond to one request per client each year, and we are not required to respond to requests made by means other than through this e-mail address.

California Do Not Track Notice

Some browsers have a “Do Not Track” feature that lets you tell websites and online services that you do not want to have your online activities tracked. Such browser features and industry standards are not uniform, so our Sites do not respond to those signals. Our Privacy Policy describes our policies on data collection and tracking.

International Transfer of Information

If you are visiting from the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that you are transferring information about you, including PII, to a country and jurisdiction that does not have the same data protection laws as the European Union, and you consent to: the transfer of information about you, including PII, to the U.S.; and the use and disclosure of information about you, including PII, as described in this privacy policy statement.

Last Modified: December 14, 2016


It’s easy
to get started

Try OnPay out yourself to see how easy payroll and HR can be. To get started, just share a few basic details about your business. Our team of pros will set everything up and import your employees’ information for you.