App privacy
Payroll Island is operated by Boss Technologies Ltd. This notice covers the employee and manager app and the supporting Payroll Island service. Your employer decides which employment records to maintain and who may access them.
Information used
- Your account, name, contact details and organisation membership are used to identify you and control access.
- Payroll, payslips, timesheets, leave, deductions and reimbursements support your employment and payroll administration.
- Receipts, medical certificates and other files you choose to upload support your requests. Medical certificates may contain health information. Upload only what is needed.
- When you choose to clock in or out, precise location, accuracy and time are sent to the service to check your work site. The clocking flow does not continuously track your location.
- Messages and account/security events support communication, approvals and misuse investigation.
- Public introduction and signup page views are added to daily totals. The counter does not store a browser or session identifier, referral source, form entry, IP address or device information.
Signup and sign-in security
New organisation setup verifies the administrator email using a single-use code and uses Cloudflare Turnstile to check for automated signup. Verification records expire after 15 minutes and are cleaned up after a day. The platform owner can review sign-in times, usernames, organisation, area and outcomes for up to 90 days. This history does not include passwords, verification codes, IP addresses or session tokens.
Support requests
When you submit the support form, your name, contact email, message and optional images are emailed to phill@1cr.co.nz so the service operator can respond. Support images are checked for malware. These submissions are held in the support mailbox rather than saved as payroll documents. Cloudflare Turnstile checks the form for automated abuse. Include only information needed to explain your request.
Access and processing
Your employer’s authorised payroll staff and assigned managers can access records according to their permissions. Service administration, hosting, email delivery and security processing support these functions. Records may also be retained or disclosed where required by law. Ask the privacy contact for information about service providers and storage arrangements relevant to your organisation.
Attachments and permissions
Use the camera or select an individual file to submit evidence. The app does not need your entire photo library. Files are checked before acceptance and stored with protected access. Declining an attachment or location permission prevents the affected feature; it does not grant access to other device data. Your browser may offer speech dictation; its provider’s processing applies if you choose to use it.
Automatic receipt reading
Receipt photos can be read on your device to suggest a supplier, date and total. The reading tools are delivered by Payroll Island; images and extracted text are not sent to a separate OCR or AI provider. No receipt text is saved to browser storage by the reader. Review the suggestions before uploading. Only the document and details you submit enter the normal payroll document service.
Retention and deletion
Employment, tax, pay and leave evidence can be subject to mandatory retention. Retention depends on your employer’s jurisdiction, record category and legal obligations. A request to close your app account is reviewed separately from those employer obligations. We will explain which records are removed, which must remain and why. We do not treat removing organisation access as a completed data deletion.
Request account and data deletion. You may also ask to access or correct your information, report a privacy concern, or obtain the retention schedule that applies to your records.
Contact
Email phill@1cr.co.nz. Do not email passwords, bank details or medical files to make an initial enquiry. We may ask you to verify your identity before discussing or deleting private records.