Pay Audtr is an online payroll compliance tool designed to help workers in the Social, Community, Home Care and Disability Services (SCHADS) industry verify that their pay is consistent with the SCHADS Award (MA000100).
In this Policy, "Pay Audtr", "we", "us" and "our" refers to the operator of pay-audtr.com. "You" refers to any person who registers for or uses the Pay Audtr service.
We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
| Category | Examples | Why collected |
|---|---|---|
| Account details | Email address, password (hashed) | Create and authenticate your account |
| Employment details | Employer name, award stream, classification level, pay point, employment type, agreed hours | Calculate your correct Award entitlements |
| Roster data | Shift dates, start/end times, break details, shift types, leave entries, on-call days | Compute hours worked and penalty rates |
| Payslip data | Gross pay, net pay, base rate, hours paid, allowances, super contributions, tax withheld | Compare actual pay against Award minimum |
| Quick Audit data | Hourly rate, pay period, employment type, hours worked — entered via the Quick Audit onboarding flow | Provide an instant estimate before full audit |
| Feedback | Free-text responses to targeted questions (confusion points, result accuracy, likelihood to return) | Improve the tool |
We do not collect your tax file number (TFN), bank account details, Medicare number, or any government-issued identity document. We do not store your full credit card number — payment processing is handled entirely by Stripe.
We will never use your employment data, payslip data, or roster data for marketing, advertising, or profiling purposes. We do not sell your data.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | All account and app data | Australia (ap-southeast-2) |
| Stripe Soon | Payment processing and subscription billing | Name, email, billing address, payment method details | Australia / USA |
| Anthropic | AI payslip and roster scanning (Claude API) | Cropped payslip or roster image/PDF (opt-in, per scan) | USA |
| Vercel | Web application hosting and deployment | HTTP request metadata, IP address (transient) | Australia / Global CDN |
AI scanning is an opt-in feature. You are never required to use it. All payslip and roster data can be entered manually.
When you use the AI Scan Payslip or Scan Roster features, a cropped image or PDF of the document you select is transmitted to Anthropic's Claude API. Claude extracts structured data (pay figures, shift times) from the image and returns it to the app.
If you correct a field after a scan, the app stores the field name, the AI's extracted value, and your corrected value in your browser's localStorage under the key payauditr_ps_corrections. This data is used only to improve accuracy on your next scan and never leaves your device. Up to 10 corrections are stored; older corrections are automatically removed.
We strongly encourage you to use the crop tool to remove personal identifiers — your name, address, bank account details, and TFN — before scanning. The crop tool is presented before every scan.
Anthropic does not use API inputs to train its models. Scanned content is processed transiently and not retained by Anthropic beyond the API call. See anthropic.com/privacy.
Anthropic processes data in the United States. By using the scan feature, you consent to this transfer. Data is transmitted over TLS and is not stored in the USA after the API call completes.
Your data is stored in Supabase's managed PostgreSQL database hosted in the ap-southeast-2 (Sydney, Australia) AWS region.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
| Right | What it means | How to exercise it |
|---|---|---|
| Access | Request a copy of your personal information | Email privacy@pay-audtr.com |
| Correction | Request that inaccurate information be corrected | Update in-app or email us |
| Deletion | Request deletion of your account and all associated data | Email privacy@pay-audtr.com — processed within 30 days |
| Portability | Request an export of your data (JSON/CSV) | Use Settings → Export, or email privacy@pay-audtr.com |
| Complaint | Lodge a complaint if you believe we have breached the APPs | Contact us first; if unresolved, contact the OAIC at oaic.gov.au |
Pay Audtr uses minimal localStorage for the following purposes only:
We do not use advertising cookies, cross-site tracking, or third-party analytics cookies.
The following features are planned. This Policy will be updated before each is released, with 14 days' notice to registered users.
| Feature | Data implication | Status |
|---|---|---|
| Stripe payment integration | Billing details (name, email, card last 4) shared with Stripe. No card data stored by Pay Audtr. | Planned |
| Introductory pricing / promo codes | Discount usage tracked in subscription record. No additional personal data. | Planned |
| Hospitality Award support | Same data types as SCHADS — employment details and shift data. No additional personal data. | Planned |
| Period comparison (Pro) | Historical audit results stored in reports table — already collected, no new data types. | Planned |
| Rate update email notifications | Email sent to registered users when SCHADS rates are updated. Requires email address already held. | Planned |
For any privacy-related queries, access requests, or complaints:
We will respond to all requests within 30 days.
Material changes will be communicated by email to registered users at least 14 days before they take effect. The current version is always available at pay-audtr.com/privacy.