Privacy Policy

RightStart LLC, doing business as WageProof (“we,” “us” or “our”), runs the S-corp reasonable compensation tool at www.wageproof.com (the “Service”). This policy explains what information we collect when you visit our website or use the Service, how we use and share it, and the choices you have.

We don’t sell your personal information for money. We don’t share your report answers or compensation figures for advertising or marketing, except a name or location you type into a form on a signed-out page (Section 3).

Your account. Your name, email address and password, and the phone number if you add one for signing in, which our sign-in provider holds for us.

Sign in with Google. If you sign in with Google, Google shares your name, email address and profile photo with us through our sign-in provider. We use them to create your account, sign you in and show your name and photo in the Service. Our sign-in provider stores them, and we keep your email address in our database to link your reports to your account. We share them as Section 3 describes: with the service providers that run your account, such as our sign-in, payment and email providers, and, when you buy while signed in, as a hashed copy of your account email sent to Google and LinkedIn to measure our ads. We keep them while your account is open; to have them deleted, ask us to delete your account (Section 6).

Your report answers. Owner and company name, entity type, state and county, occupation, the tasks you choose with their time shares and experience levels, and annual hours worked. We store them so you can come back to your reports.

Tax professional accounts. Your firm’s name, email address and preparer name, and any logo or brand colors you upload; information you enter about clients, such as name, company, entity type, location, email address and notes; Income Approach figures you enter (business value, change in value and target rate of return); and the email address of anyone you invite to your firm, which we may hold before that person has an account.

Payments. Stripe collects your card details; we don’t receive your full card number. We receive the amount, date and Stripe’s reference numbers for each payment.

Device and usage information. Your IP address, browser, operating system and device; the pages you visit, the buttons and links you click and how long you stay; the site that sent you to us; server logs; and error reports.

How you found us. The tracking details in the link you arrived from (such as which ad campaign or ad click brought you), the site that referred you, your first page, and which steps of our site you reach (such as viewing pricing or starting a report). We link this to your account when you sign up or buy. If you arrived through an affiliate’s referral link, we also record which affiliate referred you.

Things you send us. Messages you send to support or through our contact form; the details you give when you book a demo, such as your name, email address, phone number, firm, role and approximate number of S-corp clients; the firm name, colors, logo and email address you enter to get a branded sample report; and the contact details you submit if you answer one of our LinkedIn ads with LinkedIn’s built-in form (a Lead Gen Form).

Your marketing-email choice. Whether you agreed to marketing emails, the words you were shown, and when.

If a tax professional entered your information. The firm decides how your information is used, and we handle it on the firm’s behalf. If we email you a questionnaire for a firm, you can ignore it or ask the firm to remove you. For anything about information a firm entered about you, contact the firm; if you can’t reach them, email us.

We use it to:

• produce your reports and run the Service;
• run your account, answer support requests and send service emails, such as receipts, renewal notices, invitations and report notices;
• process payments;
• find and fix problems and understand how the Service is used;
• measure and show our ads, and learn which marketing brings us customers (Section 3);
• run our referral program; and
• meet legal obligations and protect our rights.

Marketing emails. You choose whether to get marketing emails, with the box at sign-up or the switch in your account settings, and you can change your choice at any time. If you ask for a branded sample report, we may also email you about WageProof. If you save your answers to finish later, we may email you reminders about that report. Every marketing email tells you how to unsubscribe. Receipts, invitations, report notices and other service messages are not marketing emails.

Notices about your plan or account are not marketing emails. We send notices about changes to the features or settings of a plan or account you have, or to our Terms or this policy, to the people on that account, whether or not they opted in to marketing email.

Service providers. These companies run parts of the Service for us and receive information to do that work: Vercel (hosting and file storage), Neon (database), Amazon Web Services (backup storage), Clerk (sign-in, which uses Cloudflare to check for bots), Stripe (payments), Resend (email delivery), Sentry (error monitoring), Slack (our team’s messaging tool, which receives your support messages and internal alerts about sign-ups, sample report requests, billing events and reports that need attention), Cal.com (demo scheduling) and Rewardful (referral tracking, which receives your name, email address and purchase details through Stripe if an affiliate referred you).

Advertising partners. We advertise on Google, Reddit, Meta (Facebook and Instagram), ChatGPT (OpenAI), Microsoft (Bing) and LinkedIn. These companies’ tags (small pieces of their code on our pages) and cookies, and our own server, send them information about your visit: your IP address, browser and device, the pages you view and buttons you click, ad click identifiers, and whether you signed up or bought (and the amount). They may combine it with information about your activity on other websites and apps over time. We and they use it to measure our ads and, for Google, Reddit, Meta and LinkedIn, to show our ads to people who have visited our site (remarketing). In addition:

• when you buy while signed in, we send Google and LinkedIn a scrambled, one-way (hashed) copy of your account email so they can match the purchase to an ad;
• on pages you visit while signed out, OpenAI’s tag sends OpenAI a hashed copy of any email address, phone number or name you type into a form, plus any city, state, ZIP code or country you type;
• if you book a demo, we send LinkedIn a hashed copy of the email address you entered; and
• if you answer one of our LinkedIn ads with LinkedIn’s built-in form, LinkedIn sends us what you submitted, such as your name, work email, job title and company.

For advertising, we never send these companies your report answers or compensation figures, except the name and location described above. Each company handles this information under its own privacy policy: Google (policies.google.com/privacy), Reddit (reddit.com/policies/privacy-policy), Meta (facebook.com/privacy/policy), OpenAI (openai.com/policies/privacy-policy), Microsoft (privacy.microsoft.com/privacystatement) and LinkedIn (linkedin.com/legal/privacy-policy). Section 9 explains how to opt out.

Google Analytics. We use Google Analytics to see how people use our website, with these advertising features turned on: Google Signals, demographics and interests reports, and audiences for Google Ads remarketing. Google Analytics uses its own cookies, set on our site (first-party cookies), together with Google’s advertising cookies (third-party cookies), and Google may link this activity to your Google account when you are signed in to Google with ad personalization on. Google Tag Manager loads some of these tags. To learn how Google uses this information, see “How Google uses information from sites or apps that use our services” (policies.google.com/technologies/partner-sites).

Other people in your firm. On a Firm Account, the clients, reports, questionnaires and Income Approach figures entered are visible to every current member of that firm (Terms of Service, Section 19).

Legal reasons and business transfers. We may disclose information when the law requires it, or to protect our rights or the safety of others. If our business is sold or merged, your information may be transferred as part of it.

We use reasonable safeguards to protect your information, but no system is completely secure.

We keep information for as long as we need it to provide the Service, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. These records have their own rules:

• Firm-membership records — we keep an internal record of firm-membership events: who invited, joined, changed role, transferred ownership, or was removed from a firm, and when. It is the firm’s business record, and we keep it indefinitely rather than erasing it at one member’s request.
• Records of what you agreed to — the versions of our Terms you accepted. We keep these indefinitely, including after you ask us to delete your account, because they show what you agreed to.

If you ask us to delete your account, we delete your account information and draft reports, or remove anything in them that identifies you, except: (i) finalized reports and their PDFs, which we keep in a private, voided state for tax, audit, legal and accounting purposes; (ii) payment and credit records; (iii) on a firm account, the clients, reports and questionnaires you created there, the record that you created or worked on them, and your entries in the firm’s membership record, which belong to the firm and stay with it; and (iv) records of what you agreed to. Deleted information can stay in our backups until those backups expire; we keep some backups for up to seven years. Deleting your account does not delete information that other companies already hold under their own policies, such as Stripe and our analytics and advertising partners.

You can see and update your name, email address and password in your account settings. To ask for a copy of your information, to correct it, or to delete your account, email help@wageproof.com from the address on your account. We may need to confirm who you are first. Section 5 lists what we keep after a deletion.

If a firm removes you, your WageProof login is closed and the firm keeps what you created there. For information a firm holds about you, contact the firm.

We and the companies in Section 3 use cookies, pixels and similar tools (small files and pieces of code that remember your browser or report your visit) to:

• keep you signed in and keep the Service working (you can’t sign in without these);
• remember a report you started before signing in, how you first reached our site, which steps of our site you reached and, if an affiliate referred you, which one;
• measure how our site is used, with Vercel’s cookie-free analytics and Google Analytics; and
• measure and show our ads (Section 3).

Our Book a Demo page shows Cal.com’s booking calendar, which sets its own cookies to run and protect the booking form.

You can block or delete cookies in your browser settings. If you block the sign-in cookies, you won’t be able to sign in. Section 9 covers your other choices.

Some state laws treat sharing information with advertising companies, even without payment, as a “sale” of personal information or as “targeted advertising.” Where such a law applies to you, the information involved is the device, usage and “how you found us” information in Section 1, the hashed contact details described in Section 3, and the location described in Section 3; the companies involved are the advertising partners in Section 3. You can opt out as Section 9 describes.

Global Privacy Control. Global Privacy Control (GPC) is a setting in some browsers that asks websites not to share your information. If your browser sends it, we treat it as a request to opt out of sharing for advertising. For that browser, our pages don’t load the Reddit, Meta, OpenAI, Microsoft or LinkedIn tags, we don’t send those companies reports of sign-ups, purchases or other results (conversions) from that browser, we don’t send Google or LinkedIn the hashed email described in Section 3, and Google’s tag runs in a limited mode that sets no cookies and sends Google only basic measurement signals that don’t identify you. GPC can’t reach the demo-booking step in Section 3, which happens on our server after you book. Our own cookies and measurement keep working, and GPC doesn’t change how the Service works for you.

Do Not Track. Some browsers send a “Do Not Track” signal. There is no common standard for it, so we don’t respond to it. We do honor GPC as described above.

Ad settings. You can also limit ads in each company’s settings: Google (myadcenter.google.com), Meta (accountscenter.facebook.com/ads), Reddit (Settings, then Privacy), LinkedIn (Settings & Privacy, then Advertising data) and Microsoft (account.microsoft.com/privacy/ad-settings). You can also use the industry opt-out pages at optout.aboutads.info and optout.networkadvertising.org, Google’s Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout), or your browser’s cookie settings.

The Service is for users in the United States. If you use it from another country, your information is processed in the United States. We don’t offer the Service in the European Economic Area or the United Kingdom; if you are there, please don’t use it.

The Service is for adults and is not directed to children under 13. We don’t knowingly collect personal information from children under 13; if we learn that we have, we will delete it.

We may update this policy, and we change the “Last updated” date when we do. If a change affects your rights, we publish a new version and ask you to click “I agree” the next time you sign in, before you keep using the Service; until then, you can still open your Billing page to cancel. Other changes, such as adding a service provider, take effect when posted.