1. Overview

At ChattaPay, protecting the privacy and security of our clients and their employees is fundamental to the trust placed in us. We are committed to handling personal information responsibly, transparently, and in accordance with applicable privacy and data-protection laws.

This Privacy Policy explains how ChattaPay Payroll & HR Services (“ChattaPay,” “we,” “our,” or “us”) collects, uses, discloses, stores, and protects personal information in connection with our websites, payroll and human resources services, employer and employee portals, mobile applications, communications, and related products and services collectively referred to as the “Services.”

This Privacy Policy applies to:

Employers and their authorized representatives who use our Services;
Employees, contractors, applicants, and other individuals whose information is processed through our Services;
Visitors to our websites;
Users of our employer or employee portals and mobile applications; and
Individuals who communicate or otherwise interact with ChattaPay.

By accessing or using our Services, you acknowledge the practices described in this Privacy Policy. When an employer provides information about its employees, contractors, applicants, or other individuals, the employer is responsible for providing any notices and obtaining any permissions required by applicable law.

2. Who We Are

ChattaPay Payroll & HR Services is a payroll, human resources, workforce management, and business services provider headquartered in Chattanooga, Tennessee.

Our Services may include payroll processing, payroll tax administration, employee onboarding, human resources support, benefits administration support and integrations, retirement plan support and integrations, time and attendance, talent management, workers’ compensation support and integrations, bookkeeping, background screening, employee self-service, and related workforce management solutions.

We provide Services to businesses in Tennessee and throughout the United States.

3. Our Role in Processing Personal Information

The party responsible for deciding how personal information is used may vary depending on the circumstances.

Information Processed for Employers

When ChattaPay processes employee, applicant, contractor, payroll, benefits, timekeeping, or workforce information on behalf of a client, the employer generally determines why the information is collected and how it will be used. In these circumstances, ChattaPay processes the information to provide Services to the employer and acts as a service provider or data processor, as those terms may be defined under applicable law.

Employees and other individuals seeking to access, correct, or delete employer-controlled information should ordinarily contact their employer or the employer’s human resources department first. We will assist our clients in responding to verified privacy requests when required by law or contract.

Information Collected Directly by ChattaPay

When you visit our website, contact us, request information, establish a business relationship with us, or otherwise interact with ChattaPay for our own business purposes, ChattaPay may determine how and why that information is processed.

4. Personal Information We Collect

The personal information we collect depends on your relationship with ChattaPay, the Services being used, and the information provided by you, your employer, authorized representatives, service providers, or other lawful sources.

Employer and Business Information

We may collect:

Legal and trade names;
Business addresses and contact information;
Employer Identification Numbers and state or local tax account numbers;
Ownership and authorized representative information;
Bank account and payroll funding information;
Payroll schedules, company policies, earnings and deduction settings, and tax information;
Billing and payment information;
Login credentials and user permissions;
Service selections, account preferences, and administrative settings; and
Communications with ChattaPay.
Employee, Contractor, and Applicant Information

Information provided by employers, individuals, or authorized third parties may include:

Full name and preferred name;
Home and mailing addresses;
Telephone number and email address;
Date of birth;
Social Security number, taxpayer identification number, or other government identifier;
Driver’s license, work authorization, or identity-verification information;
Employment status, hire date, termination date, job title, department, work location, and supervisor;
Compensation, hours worked, earnings, commissions, bonuses, deductions, garnishments, and reimbursements;
Federal, state, and local tax withholding elections;
Direct-deposit, pay-card, or other payment information;
Payroll history, pay statements, Forms W-2 and 1099, and other tax records;
Timekeeping, attendance, scheduling, paid-time-off, and leave information;
Onboarding documents, employment forms, acknowledgments, and electronic signatures;
Emergency contact and dependent information;
Benefits eligibility, election, enrollment, and contribution information;
Retirement plan contribution and integration information;
Background-screening information when an applicable service is requested;
Performance, training, certification, and workforce management information; and
Other information reasonably necessary to provide the Services selected by an employer.
Sensitive Personal Information

Some information processed through our Services may be considered sensitive under applicable law, including:

Social Security numbers and taxpayer identification numbers;
Financial account and direct-deposit information;
Login credentials;
Precise geolocation information when an employer has enabled location-based timekeeping;
Health, benefits, disability, or leave information;
Immigration or work-authorization information;
Background-screening information; and
Other information classified as sensitive personal information under applicable law.

We process sensitive information only as reasonably necessary to provide requested Services, meet legal obligations, maintain security, prevent fraud, or for other purposes permitted by law.

Portal and Mobile Application Information

When you use an employer portal, employee portal, kiosk, or mobile application, we may collect:

Account username and authentication information;
Login dates, login attempts, session information, and security events;
Device type, operating system, browser type, and application version;
Internet Protocol address and device identifiers;
Pages, screens, links, and features accessed;
Documents uploaded, viewed, acknowledged, or electronically signed;
Timekeeping entries, scheduling activity, and paid-time-off requests;
Approximate or precise location information when a location-enabled feature has been activated by the employer and permitted on the user’s device;
Camera or image information when used for authorized document capture, identity verification, or other enabled features; and
Diagnostic information needed to maintain, secure, and improve the platform.

Users may control certain device permissions through their device settings. Disabling a permission may prevent some application features from working properly.

Website, Cookie, and Technical Information

When you visit our website or use our online Services, we may automatically collect:

Internet Protocol address;
Browser and device information;
Operating system;
Referral source;
Pages viewed and links selected;
Dates, times, and duration of visits;
General geographic location derived from an IP address;
Cookie identifiers and similar technical information; and
Website performance, error, and security information.
Communications and Support Information

We may collect information you provide through:

Contact and demonstration-request forms;
Email, telephone, chat, and text communications;
Customer service and support requests;
Surveys and feedback;
Sales and onboarding communications;
Training sessions; and
Compliance, billing, and account-related correspondence.

Telephone or online support interactions may be monitored or recorded when permitted by law and when appropriate notice is provided.

Information From Third Parties

We may receive information from:

Employers and their authorized representatives;
Employees and contractors;
Banks and financial institutions;
Government agencies and taxing authorities;
Benefits, retirement, insurance, and workers’ compensation providers;
Background-screening providers;
Identity-verification and fraud-prevention providers;
Timekeeping, accounting, workforce, and business software integrations;
Referral partners and professional advisers; and
Other service providers involved in delivering the Services.
5. How We Use Personal Information

We may use personal information to:

Establish, administer, and support client accounts;
Process payroll and calculate wages, taxes, deductions, garnishments, reimbursements, and net pay;
Initiate direct deposits, pay-card transactions, checks, tax payments, and other authorized transfers;
Prepare and file payroll tax returns, Forms W-2 and 1099, and other required reports;
Support employee onboarding, offboarding, and workforce administration;
Provide employee and employer self-service functionality;
Maintain payroll, tax, HR, benefits, timekeeping, and employment records;
Support time and attendance, scheduling, paid-time-off, and leave-management features;
Support benefits, retirement plans, workers’ compensation, background screening, and other requested integrations or services;
Authenticate users and manage account permissions;
Provide customer service, implementation, education, and technical support;
Communicate about payroll deadlines, tax notices, compliance matters, account activity, product updates, and service changes;
Invoice clients and process payments;
Detect, investigate, and prevent fraud, misuse, security incidents, and unauthorized access;
Monitor system availability, performance, and reliability;
Maintain records, enforce agreements, and resolve disputes;
Develop, test, maintain, and improve our Services;
Perform internal reporting, auditing, analytics, and quality assurance;
Comply with federal, state, and local legal obligations;
Respond to lawful requests from courts, regulators, law enforcement, and government agencies;
Protect the rights, safety, property, and security of ChattaPay, our clients, users, and others; and
Carry out other purposes disclosed at the time information is collected or authorized by the employer or individual.
6. Automation and Artificial Intelligence

Certain features of our Services may use automation, machine learning, or artificial intelligence to improve efficiency, identify possible errors or inconsistencies, organize information, assist with workflows, enhance user support, or help users complete administrative tasks.

These technologies may assist with tasks such as:

Identifying incomplete or inconsistent information;
Organizing or summarizing documents and communications;
Supporting payroll and HR workflows;
Providing reminders, recommendations, or informational assistance;
Improving system navigation and customer support; and
Detecting potentially unusual or unauthorized activity.

Automated features are intended to support—not replace—the responsibility of employers, authorized administrators, and payroll or HR professionals to review information and make appropriate employment, payroll, benefits, and compliance decisions.

We do not sell personal information for the purpose of training unrelated third-party artificial intelligence models.

7. How We Disclose Personal Information

We may disclose personal information only as reasonably necessary to provide our Services, operate our business, comply with law, or protect legitimate interests.

Employers and Authorized Users

Employee and contractor information may be available to the applicable employer and its authorized representatives according to the permissions established for the account.

Financial Institutions and Payment Networks

We may disclose information to banks, payment processors, pay-card providers, check processors, automated clearing house networks, and other financial institutions to process payroll funding, direct deposits, tax payments, fees, and other authorized transactions.

Government Agencies

We may provide information to:

The Internal Revenue Service;
The Social Security Administration;
Federal, state, and local taxing authorities;
State unemployment agencies;
Child-support and garnishment agencies;
Labor and workforce agencies; and
Other government entities when required or authorized by law.
Service Providers and Integration Partners

We may disclose information to trusted providers that support:

Payroll and tax processing;
Cloud hosting and data storage;
Platform development, maintenance, and technical support;
Cybersecurity, identity verification, and fraud prevention;
Employee benefits and retirement plan administration;
Timekeeping, scheduling, and workforce management;
Workers’ compensation services;
Background screening;
Accounting and bookkeeping integrations;
Document delivery, electronic signatures, printing, and mailing;
Customer communications and support;
Analytics and website operation;
Legal, accounting, insurance, auditing, and professional services; and
Other functions necessary to provide the Services.

These providers are expected to protect personal information and use it only for authorized purposes, subject to applicable contracts and legal requirements.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers when reasonably necessary to obtain professional services, manage risks, protect legal rights, or comply with obligations.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

Comply with a law, regulation, subpoena, court order, or legal process;
Respond to a lawful government or regulatory request;
Investigate suspected fraud, criminal activity, or misuse;
Enforce contracts, policies, and legal rights;
Protect the safety, rights, property, or security of ChattaPay, our clients, users, or others; or
Prevent or address a security incident or other harmful activity.
Business Transfers

Personal information may be disclosed or transferred as part of an actual or proposed merger, acquisition, financing, reorganization, sale of assets, change of control, bankruptcy, or similar business transaction. Any successor may continue to process information in accordance with this Privacy Policy unless otherwise required by law.

With Authorization

We may disclose personal information for other purposes with the authorization of the employer, the individual, or another legally authorized party.

8. Sale, Sharing, and Targeted Advertising

ChattaPay does not sell personal information for money.

ChattaPay does not use or disclose payroll, tax, financial account, benefits, or employment information for cross-context behavioral advertising or targeted advertising unrelated to providing our Services.

Our public website may use limited analytics or similar technologies to understand website usage and improve performance. Where applicable law treats certain analytics or advertising technology activity as a “sale” or “sharing,” we will provide any legally required notices and choices.

Where required by applicable law, we will recognize qualifying browser-based privacy preference signals, such as Global Privacy Control, for the browser or device from which the signal is sent.

9. Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information that is not reasonably capable of being associated with a particular individual.

We may use or disclose this information to:

Analyze and improve our Services;
Understand usage and performance;
Conduct security and operational analysis;
Develop new features;
Prepare business reports; and
Support other lawful business purposes.

We will not attempt to reidentify de-identified information except as permitted by law, such as to test whether de-identification methods are effective.

10. Cookies and Similar Technologies

Our website and online Services may use cookies, local storage, pixels, software development kits, and similar technologies.

These technologies may be used to:

Keep users signed in;
Authenticate accounts;
Remember preferences;
Enable website and platform functionality;
Protect against fraud and unauthorized access;
Measure performance;
Diagnose technical problems;
Understand how users interact with our Services; and
Improve functionality and user experience.

Some cookies are necessary for the Services to function. Others may support analytics or user preferences.

You may manage cookies through your browser or device settings. Disabling certain cookies may limit the availability or proper operation of some features.

11. Data Security

ChattaPay uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, disclosure, loss, or destruction.

Depending on the Services and systems involved, safeguards may include:

Encryption in transit and at rest;
Multi-factor authentication;
Role-based access controls;
Password and authentication requirements;
Secure hosting infrastructure;
Logging and monitoring;
Network and endpoint protections;
Backup and recovery procedures;
Vendor risk management;
Employee confidentiality and security requirements;
Security awareness training; and
Incident-response procedures.

No method of transmission, storage, or security is completely risk-free. Therefore, we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their login credentials, using strong and unique passwords, protecting their devices, and promptly notifying ChattaPay or their employer of suspected unauthorized access.

12. Account and Password Security

You must not share your username, password, authentication code, or other account credentials with unauthorized individuals.

If you believe that your account or credentials have been compromised, notify your employer or ChattaPay promptly.

ChattaPay may suspend access, require a password reset, or take other reasonable action when we believe an account may have been compromised or used in violation of applicable terms, policies, or law.

13. Data Retention

We retain personal information for as long as reasonably necessary to:

Provide the Services;
Maintain payroll, tax, HR, and business records;
Comply with legal and regulatory obligations;
Fulfill contractual requirements;
Resolve disputes;
Enforce agreements;
Maintain security and prevent fraud; and
Support legitimate business operations.

Retention periods vary depending on the type of information, the services provided, client instructions, contractual commitments, and applicable federal, state, and local recordkeeping requirements.

When information is no longer reasonably required, we may securely delete, destroy, anonymize, or de-identify it in accordance with our retention practices and legal obligations.

Backup copies may remain for a limited period until they are overwritten or deleted through normal backup processes.

14. Accessing and Correcting Your Information

Employees and contractors should generally contact their employer or human resources department to correct payroll, tax, employment, benefits, timekeeping, or personal information maintained through the employer’s account.

Certain information may also be reviewed or updated through the employee portal or mobile application.

ChattaPay may be unable to change employer-controlled records without authorization from the employer. We may also be required to retain certain payroll, tax, financial, or compliance records even after a correction or deletion request.

15. Privacy Rights

Depending on your state of residence, your relationship with ChattaPay, the nature of the information, and applicable legal exemptions, you may have the right to:

Confirm whether personal information about you is being processed;
Request access to personal information;
Request correction of inaccurate personal information;
Request deletion of personal information;
Obtain a portable copy of certain personal information;
Request information about categories of personal information collected, used, or disclosed;
Opt out of certain sales, sharing, targeted advertising, or profiling when applicable;
Limit certain uses or disclosures of sensitive personal information when applicable;
Withdraw consent where processing is based on consent;
Appeal the denial of a privacy request; and
Not receive unlawful discriminatory treatment for exercising a privacy right.

These rights are not absolute. A request may be denied or limited when the information is exempt, the request cannot be verified, retention is legally required, or another lawful exception applies.

The Tennessee Information Protection Act took effect July 1, 2025 and provides qualifying Tennessee consumers with privacy rights, subject to statutory scope, thresholds, and exemptions.

Submitting a Request

Privacy requests may be submitted using the contact information in Section 23.

Please include enough information for us to identify the relevant account and understand the request. We may request additional information to verify identity, authority, residency, or the scope of the request.

When ChattaPay processes information solely on behalf of an employer, we may refer the request to that employer or require employer authorization before acting.

Authorized Agents

Where permitted by law, an authorized agent may submit a request on your behalf. We may require evidence of the agent’s authority and may contact you directly to verify the request.

Appeals

If we deny a qualifying privacy request, you may submit an appeal by contacting us and stating that you are appealing a privacy-request decision. We will review the appeal and respond as required by applicable law.

16. Communications and Marketing Choices

ChattaPay may send administrative and service-related communications concerning:

Payroll processing;
Account activity;
Security;
Tax and compliance matters;
Product or service changes;
Required notices;
Support requests; and
Other transactional matters.

You generally cannot opt out of communications that are necessary to provide the Services or maintain an account.

You may opt out of non-essential promotional emails by using the unsubscribe instructions included in the message or contacting us. Opting out of promotional communications will not prevent you from receiving necessary service-related communications.

17. Benefits and Health-Related Information

When an employer selects benefits administration or related Services, ChattaPay may process information regarding benefits eligibility, enrollment, dependents, coverage selections, premiums, contributions, leave, disability, or other health-related matters.

This information may be disclosed to the employer, insurance carriers, brokers, benefits administrators, retirement providers, authorized advisers, and other parties as necessary to provide the selected Services.

Certain health plans, insurers, brokers, medical providers, and other third parties maintain their own privacy practices. Their privacy policies and legal obligations govern information once it is received and processed independently by them.

18. Children’s Privacy and Minor Employees

Our public website and Services are intended for employers, workers, and authorized business users. They are not directed to children under the age of 13, and we do not knowingly solicit personal information from children under 13 for marketing or general consumer purposes.

Because some employers legally employ individuals under the age of 18, ChattaPay may process personal information relating to minor employees when the information is provided by the employee, a parent or guardian where appropriate, an employer, or another authorized party for legitimate employment-related purposes.

This information may include payroll, tax, timekeeping, onboarding, direct-deposit, benefits, scheduling, and other employment records necessary to provide the Services or comply with applicable law.

If we learn that personal information from a child under 13 was submitted through our public website or collected outside a legitimate employment-related or otherwise legally authorized context, we will take reasonable steps to investigate and delete or otherwise address the information as appropriate.

Federal COPPA requirements generally apply to online services directed to children under 13 and to operators with actual knowledge that they are collecting personal information online from a child under 13.

19. Third-Party Websites and Services

Our websites, portals, or applications may contain links to websites, applications, or services operated by third parties.

ChattaPay does not control and is not responsible for the content, security, or privacy practices of unaffiliated third parties. Information provided directly to a third party is governed by that third party’s privacy policy and terms.

We encourage users to review the privacy practices of third-party services before providing information.

20. State-Specific Privacy Notices

Residents of certain states may have additional rights under applicable state privacy laws.

Those rights may vary based on:

The individual’s state of residence;
Whether ChattaPay or the applicable employer is subject to the law;
Whether the information is collected in an employment or commercial context;
Statutory thresholds and exemptions;
The type of information involved; and
ChattaPay’s role as a controller, processor, business, service provider, contractor, or other regulated party.

For example, California privacy protections may apply to employee and applicant data when the covered-business requirements are met.

Nothing in this Privacy Policy is intended to provide rights that do not apply under law or to limit rights that cannot legally be limited.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

Our Services;
Technology;
Business operations;
Legal or regulatory requirements;
Security practices; or
Privacy practices.

When we update this Privacy Policy, we will revise the “Last Updated” date. If changes are material, we may provide additional notice through our website, platform, email, or other appropriate means.

The version posted at the time information is processed will govern, subject to applicable law.

22. Governing Language

This Privacy Policy is written in English. If it is translated into another language, the English-language version will control to the extent permitted by law in the event of a conflict or inconsistency.

23. Contact Us

For questions, concerns, privacy requests, or complaints regarding this Privacy Policy or ChattaPay’s privacy practices, please contact:

ChattaPay Payroll & HR Services
1100 Market Street, Suite 616
Chattanooga, TN 37402

Email: moc.yapattahc%40ycavirp
Phone: (855) 954-2995

Employees requesting changes to employer-controlled payroll or employment records should ordinarily contact their employer or human resources department first.