Privacy Policy
Last Updated: January 5, 2026
PaidUp Technologies, Inc. ("PaidUp," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our earned wage access platform, mobile application, and related services (collectively, the "Services").
We have implemented this Privacy Policy because your privacy is important to us. This Privacy Policy explains our information practices and the choices you can make about the way your personal information is collected, used, and shared.
Unless we link to a different policy or state otherwise, this Privacy Policy applies when you visit or use our Services.
Hi, We're PaidUp!
1.0 About PaidUp. PaidUp is a financial technology platform that provides earned wage access (EWA) services, enabling employees to access their earned wages before payday. We partner with employers to offer this benefit to their workforce, helping employees manage their cash flow and avoid costly overdraft fees or payday loans.
PaidUp is an online-first business dedicated to building a modern earned wage access solution that's fast, transparent, and employee-friendly.
Personal Information Collection, Use, Disclosure and Retention
2.0 Information Collected. We, our service providers, and our third-party partners receive and/or collect personal information from or about you in the following ways:
2.1 Information We Collect Directly From You. The personal information categories may include:
- Identifiers, such as your first and last name, work email address, and work phone number
- Employment Information, such as your employer's name, employee ID (as assigned by your employer), and hourly rate
- Account Login Credentials, such as your email and password for your PaidUp account
- Communications, such as messages sent to PaidUp via chat, email, or phone call to provide customer service
Note: We do NOT directly collect or store your bank account numbers, routing numbers, or full debit card numbers. This financial information is collected and securely stored by our payment processor, Stripe. We only receive and store tokenized references and limited details (such as the last 4 digits) for display purposes.
2.2 Information We Collect From Your Employer. With your employer's authorization, we collect the following information:
- Employee Records, including your name, employee ID, work email, work phone number, and hourly rate
- Earnings Data, including hours worked, base earnings, tips, bonuses, deductions, and pay period information
- Payroll Information, such as pay period schedules and payroll processing dates
2.3 Information We Collect Automatically. When you use our Services, we automatically collect:
- Device and Usage Information, such as IP address, browser type, operating system, device identifiers, and general location
- Log Files, including access times, pages viewed, links clicked, and other actions taken within the Services
- Error and Performance Data, collected through our monitoring tools to diagnose issues and improve service reliability
2.4 Account Registration. To use our Services, you must create an account. We offer the following registration options:
- Online Registration: You'll provide your work email, work phone number, and create a password for your account
- Third-Party Authentication: You may sign in using a third-party authentication provider (Clerk). If you choose this option, we will receive basic profile information that you've authorized for sharing
Regardless of registration method, we will send a verification message to your nominated email address or phone number to confirm your registration.
2.5 Financial Account Linking. To receive wage advances and enable repayment, you must link both a bank account and a debit card during onboarding:
- We use Stripe Connect to securely collect your financial and identity information
- You will complete Stripe's hosted onboarding forms, where you enter your information directly with Stripe, including:
- Full name
- Date of birth
- Residential address (street, city, state, ZIP code)
- Social Security Number or last 4 digits (for identity verification)
- Bank account details (routing and account numbers)
- Debit card details (card number, expiration, CVV)
- PaidUp never sees or stores your raw bank account numbers, routing numbers, full card numbers, SSN, date of birth, or full residential address
- We only receive tokenized identifiers and limited information (last 4 digits of accounts, masked address information) for display and processing purposes
- Your bank account is used to receive the remainder of your paycheck (after repayment is taken from the partial direct deposit split)
- Your debit card is used for instant disbursement of wage advances
2.6 Identity and Contact Verification. We use Twilio to verify your phone number and email address during account setup and employment verification through SMS and email verification codes.
2.7 Cookies and Tracking Technologies. Our Services may use cookies and similar technologies for authentication, session management, and service operation. We do not use third-party advertising cookies.
2.8 Error Monitoring and Analytics. We use Sentry for error tracking and performance monitoring:
- Sentry collects error logs, stack traces, and technical diagnostic information
- IP addresses are collected as part of Sentry's default error reporting
- The mobile app automatically scrubs sensitive information (account numbers, SSN, passwords) before sending error reports
- This data helps us identify and fix bugs, improve performance, and maintain service reliability
3.0 Purposes/Use of Personal Information. We use your personal information for the following purposes:
3.1 Service Delivery
- To verify your identity and eligibility for our Services
- To calculate your earned wages and available advance amounts
- To process and disburse wage advance requests to your debit card or bank account
- To coordinate repayment by modifying a portion of your direct deposit routing through your employer's payroll system
- To temporarily split your direct deposit so that advance amounts plus fees are sent to PaidUp, and the remainder is sent to your bank account
- To maintain your account and provide customer support
3.2 Security and Fraud Prevention
- To detect, prevent, and investigate fraud or unauthorized transactions
- To enforce our Terms of Service and other agreements
- To protect the rights, property, and safety of PaidUp, our users, and others
3.3 Service Improvement
- To analyze service usage and improve functionality
- To diagnose technical issues and monitor performance
- To develop new features and enhance user experience
- To conduct research and analytics
3.4 Communications
- To send transaction confirmations and account notifications
- To provide customer service and respond to your inquiries
- To send administrative messages about service changes or updates
3.5 Legal Compliance
- To comply with applicable laws, regulations, and legal processes
- To respond to lawful requests from government authorities
- To maintain records as required by law
3.6 With Your Consent
- For any other purposes disclosed to you at the time of collection with your consent
4.0 How We Share Personal Information. We may share your personal information with the following parties:
4.1 Your Employer
- We coordinate with your employer's payroll administrator to modify a portion of your direct deposit for repayment processing
- When you take a wage advance, we temporarily split your direct deposit so that the advance amount plus fees is routed to PaidUp, and the remainder is sent to your bank account
- Important: Your employer does NOT directly see which employees use PaidUp or individual transaction details through our system
- However, your employer's payroll administrator may be able to infer PaidUp usage through direct deposit routing changes or temporary holds on direct deposit modifications
- Your employer can view the employee roster and see basic employment information (name, employee ID, work contact info) that they already have access to through their own payroll systems
- In the future, we may provide employers with aggregated, anonymized usage statistics (e.g., "X% of workforce uses PaidUp") without revealing individual employee usage or transaction details
4.2 Service Providers We share information with trusted service providers who help us operate our Services:
- Clerk - Authentication and account management
- Stripe Connect - Payment processing, disbursement, and secure storage of financial account information
- Twilio - Phone number and email verification
- Sentry - Error monitoring and diagnostics
- Supabase - Secure database hosting
- Railway - Backend infrastructure and hosting services
- Other service providers for customer support, infrastructure, and business operations
All service providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.3 Legal Obligations We may disclose your information when we have a good faith belief that disclosure is necessary to:
- Comply with applicable law, regulation, legal process, or government request
- Enforce our Terms of Service or other agreements
- Detect, prevent, or address fraud, security, or technical issues
- Protect the rights, property, or safety of PaidUp, our users, or the public
4.4 Business Transfers In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity, subject to this Privacy Policy and applicable law.
4.5 Aggregated and De-Identified Data We may create anonymous, aggregated, or de-identified data from personal information by removing information that makes it personally identifiable. We may use and share such data for research, analytics, and other lawful business purposes without restriction.
5.0 Data Security. The security of your personal information is important to us. We implement industry-standard administrative, physical, and technical safeguards to protect your information, including:
- Encryption of data in transit and at rest
- Secure access controls and authentication mechanisms
- Regular security assessments and monitoring
- Employee training on data protection practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
6.0 Data Retention. We retain personal information for as long as necessary to:
- Provide our Services to you
- Comply with legal obligations (including financial record-keeping requirements)
- Resolve disputes and enforce our agreements
- Maintain business records for legitimate purposes
Specific Retention Periods:
- Active Accounts: We retain your information while your account is active
- Financial Records: We retain transaction records for at least 7 years as required by financial regulations
- Closed Accounts: After account closure, we retain certain information as required by law and delete other information in accordance with our data retention schedule
Even if you request deletion, we may retain information as required or permitted by law, including for fraud prevention, legal compliance, and dispute resolution.
7.0 Children's Privacy. Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information as quickly as possible. If you believe we might have information from or about a child, please contact us at privacy@trypaidup.com.
8.0 Third-Party Links and Services. Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of each third-party service you interact with, including:
- Clerk: Clerk Privacy Policy
- Stripe: Stripe Privacy Policy and Stripe Connect Privacy
- Twilio: Twilio Privacy Policy
- Sentry: Sentry Privacy Policy
- Supabase: Supabase Privacy Policy
- Railway: Railway Privacy Policy
9.0 Do Not Track. Some web browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. We currently do not respond to DNT signals because there is no standard interpretation or practice for DNT signals.
10.0 International Data Transfers. PaidUp operates in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.
11.0 Changes to This Privacy Policy. We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:
- Updating the "Last Updated" date at the top of this policy
- Posting the revised policy on our website and mobile application
- Sending you an email notification (for material changes)
Your continued use of our Services after the effective date of changes constitutes your acceptance of the revised Privacy Policy.
U.S. Consumer Data Rights
12.0 General Rights and Authentication
12.1 Authentication/Verification. To verify your identity before responding to your privacy requests, we may ask you to confirm information we have on file about you or your account activity. We will only use additional information you provide for verification purposes.
12.2 Submitting Requests. You may submit privacy rights requests by:
- Emailing us at privacy@trypaidup.com
- Contacting us through the mobile app settings
- Writing to us at our mailing address (available upon request)
We will confirm receipt of your request and respond within the timeframes required by applicable law (typically 45 days, with possible extensions as permitted by law).
12.3 No Discrimination. We will not discriminate against you for exercising your privacy rights. You will receive the same service and pricing whether or not you exercise your rights.
13.0 Multi-State Consumer Privacy Rights
This section applies to residents of California (CA), Virginia (VA), Colorado (CO), Connecticut (CT), Utah (UT), and other states with comprehensive privacy laws.
13.1 Your Rights Include:
-
Right to Know: Request information about the personal information we have collected about you, including:
- Categories and specific pieces of personal information
- Categories of sources from which we collected it
- Purposes for collecting, using, or sharing it
- Categories of third parties with whom we share it
-
Right to Access: Request a copy of the personal information we maintain about you
-
Right to Correction: Request that we correct inaccurate personal information we maintain about you
-
Right to Deletion: Request that we delete your personal information, subject to certain exceptions for legal compliance, fraud prevention, and other permitted purposes
-
Right to Data Portability: Receive your personal information in a portable, machine-readable format (where technically feasible)
-
Right to Opt-Out of Sale: We do not sell your personal information
-
Right to Opt-Out of Targeted Advertising: We do not use your personal information for targeted advertising
13.2 Limitations on Rights
Your rights may be limited in certain circumstances, such as:
- When the information is necessary to complete a transaction or provide services you requested
- For security and fraud prevention purposes
- To comply with legal obligations
- For internal research and development
- To exercise or defend legal claims
We will explain the reason if we deny your request.
14.0 California-Specific Rights (CCPA/CPRA)
14.1 California Consumer Privacy Act (CCPA). If you are a California resident, you have additional rights under the CCPA, as amended by the California Privacy Rights Act (CPRA):
14.2 Categories of Personal Information Collected (Last 12 Months):
- Identifiers (name, email, phone, IP address)
- Personal characteristics (date of birth - collected by Stripe Connect for identity verification)
- Address information (residential address - collected by Stripe Connect for identity verification)
- Government identifiers (Social Security Number or last 4 digits - collected by Stripe Connect for identity verification)
- Financial information (bank account and debit card tokens stored by Stripe Connect, transaction history)
- Professional information (employer, employee ID, hourly rate, earnings)
- Internet activity (device info, usage logs, error reports)
- Geolocation data (general location from IP address)
Note: Government identifiers, date of birth, and residential addresses are collected by Stripe Connect as part of their payment account verification and identity verification process. PaidUp does not directly receive or store this information in raw form - we only receive tokenized references and masked/limited information.
14.3 Business Purposes for Collection:
- Providing earned wage access services
- Identity verification and fraud prevention
- Payment processing and disbursement
- Customer support
- Service improvement and analytics
- Legal compliance
14.4 Categories of Third Parties We Share With:
- Service providers (Clerk, Stripe Connect, Twilio, Sentry, Supabase, Railway)
- Your employer's payroll administrator (for direct deposit coordination)
- Professional advisors (lawyers, accountants)
- Government agencies (when legally required)
14.5 Sales and Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
14.6 Sensitive Personal Information: We collect the following sensitive personal information:
- Government identifiers (Social Security Number or last 4 digits - collected by Stripe Connect for identity verification)
- Financial account information (bank account and debit card information collected and tokenized by Stripe Connect)
- Account login credentials (email and password for your PaidUp account)
Note: Government identifiers, date of birth, and financial account information are collected by Stripe Connect as part of their payment account verification and identity verification process. PaidUp does not directly receive, see, or store this information in raw form - we only receive tokenized references, masked information, and the last 4 digits for display purposes.
We use sensitive personal information only for purposes permitted under CCPA regulations, such as providing services you requested, fraud prevention, and legal compliance. We do not use or disclose sensitive personal information for purposes of inferring characteristics about you.
14.7 Authorized Agents: California residents may designate an authorized agent to submit requests on their behalf. Agents must provide proof of authorization, which may include:
- Written permission signed by you
- Power of attorney
- Verification that you authorized the agent to act on your behalf
14.8 Shine the Light Law: Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
14.9 Appeal Process: If we deny your request, we will provide the reason for denial. You may appeal our decision by contacting us at privacy@trypaidup.com with "California Privacy Appeal" in the subject line.
15.0 Virginia Consumer Rights (VCDPA)
15.1 Virginia Consumer Data Protection Act. If you are a Virginia resident, you have rights under the VCDPA, including those listed in Section 13.1 above.
15.2 Appeal Process: If we deny your request, you may appeal by contacting us at privacy@trypaidup.com within a reasonable time. Include "Virginia Privacy Appeal" in the subject line. If we deny your appeal, you may contact the Virginia Attorney General at:
- Phone: (804) 786-2042
- Website: https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint
16.0 Colorado Consumer Rights (CPA)
16.1 Colorado Privacy Act. If you are a Colorado resident, you have rights under the CPA, including those listed in Section 13.1 above.
16.2 Appeal Process: If we deny your request, you may appeal by contacting us at privacy@trypaidup.com within a reasonable time. Include "Colorado Privacy Appeal" in the subject line. If we deny your appeal, you may contact the Colorado Attorney General at:
- Phone: (720) 508-6000
- Website: https://coag.gov/file-complaint
17.0 Connecticut Consumer Rights (CTDPA)
17.1 Connecticut Data Privacy Act. If you are a Connecticut resident, you have rights under the CTDPA, including those listed in Section 13.1 above.
17.2 Appeal Process: If we deny your request, you may appeal by contacting us at privacy@trypaidup.com within a reasonable time. Include "Connecticut Privacy Appeal" in the subject line. If we deny your appeal, you may contact the Connecticut Attorney General at:
- Phone: (860) 808-5318
- Website: https://portal.ct.gov/AG
18.0 Utah Consumer Rights (UCPA)
18.1 Utah Consumer Privacy Act. If you are a Utah resident, you have rights under the UCPA, including:
- Right to know
- Right to access
- Right to deletion
- Right to data portability
- Right to opt-out of sale (we do not sell your information)
18.2 Explanation of Denial: If we deny your request, we will provide the reason for our decision.
Additional Provisions
19.0 How to Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: privacy@trypaidup.com
Mailing Address: Available upon request
Online-First Business: PaidUp Technologies, Inc. is an online-first business dedicated to building a modern earned wage access solution. We primarily communicate via email and through our mobile application for the fastest response times.
20.0 Effective Date
This Privacy Policy is effective as of the "Last Updated" date listed at the top of this policy.
Summary of Key Privacy Practices
For your convenience, here's a quick summary of our privacy practices:
We collect: Employment information, identity verification data (name, date of birth, address, SSN via Stripe Connect), financial account tokens, and usage data We use it for: Providing wage advances, verifying identity, preventing fraud, and improving our Services We share with: Your employer (for payroll coordination), our service providers (including Stripe Connect for payment processing), and legal authorities when required We don't: Sell your information, use it for advertising, or share it beyond what's necessary to provide our Services Third-party processing: Stripe Connect collects and securely stores your SSN, date of birth, address, and financial account information - we only receive tokenized references and masked data Your rights: Access, correct, delete your data, and opt-out of any sales (though we don't sell data) Security: Industry-standard encryption and security practices protect your information Questions? Contact privacy@trypaidup.com
Thank you for trusting PaidUp with your personal information. We're committed to transparency, security, and respecting your privacy rights.