Privacy Policy
Plain-language summary first; the details follow. Effective September 18, 2026.
The short version
Payroll data is some of the most sensitive data a business holds. We process it only to run payroll for the employer who entered it, we do not sell it, we do not use it to train AI models, and a social insurance number is shown in full only where the law requires it.
Who we are
SeroPayroll is operated by Inputly AI Inc., a British Columbia corporation (BC1560575) doing business as Sero Technologies (“we”, “us”), the maker of SeroBooks and SeroPOS. This policy covers the SeroPayroll application at app.seropayroll.app and this website. Privacy contact: privacy@serobooks.app.
Two kinds of people, two roles
Our customer is the employer who signs up. The employer’s employees are people whose information the employer enters to pay them. For employee information, the employer decides what is collected and why, and we process it on the employer’s behalf to provide the service. Employees with questions about their own records should ask their employer first; we will help the employer answer.
What we collect, and why
Account information about the employer’s users — name, email address, business name and address — to create and administer the account. Employer payroll details — the CRA payroll account number, remitter type, and provincial registrations — to calculate and schedule remittances and produce filings. Employee payroll records — name, address, date of birth, social insurance number, province of employment, pay rates, hours and clock-ins, tax claim amounts, benefits and deductions, and banking details where the employer enters them — because the law requires them to calculate pay, deductions and year-end slips. Payment status for the subscription, handled by Stripe; we never see or store card numbers.
We collect only what payroll needs. We do not buy data about anyone and we do not sell or rent data to anyone.
Social insurance numbers and dates of birth
A SIN is used for the filings and slips that require it (T4, T4A, RL-1, Records of Employment) and is otherwise shown only as its last digits — on pay stubs and in lists. Dates of birth are used to start and stop CPP and QPP contributions correctly. Neither is used for any other purpose.
Service providers we rely on
We share data only with processors needed to run the service, each bound by its own data-protection commitments: Microsoft Azure (hosting, storage and transactional email) and Stripe (subscription billing). Filings you download are uploaded to government services by you; we do not transmit them for you. Depending on the service, data may be processed in data centres outside your province or outside Canada; wherever it is processed, the safeguards described here apply.
How it is protected
Encrypted transport (TLS) everywhere, encryption at rest on our cloud storage, per-business isolation enforced on every request, role-based access controls enforced on the server, and a record of payroll corrections — described on the Security page. Access to production systems is restricted to named, authorised personnel.
If something goes wrong
If a breach of security safeguards creates a real risk of significant harm, we will notify the affected employer — and, where required, affected individuals and the appropriate authorities — without undue delay, and say plainly what happened and what we are doing about it.
How long we keep data
Payroll records are kept while the account is active and, after it closes, as long as tax and employment law requires (the CRA generally requires six years from the end of the relevant tax year), unless law permits earlier deletion. Backups roll off on a fixed schedule.
Your rights and choices
Employers can access, export and correct their payroll data in the product, and request deletion of their account via privacy@serobooks.app, subject to the statutory retention above. Employees can ask their employer for access to or correction of their records. If you are unsatisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.
Cookies and this website
This website uses only the cookies needed to run it and aggregate analytics. We do not run third-party advertising trackers.
Changes to this policy
When this policy changes materially we will tell customers — by email or in the product — before the change takes effect, and this page will always carry the current effective date.