1. Introduction
CompRatio LLC ("CompRatio," "Company," "we," "us," or "our") operates the What It Pays™ platform (the "Platform"), a compensation analytics and salary benchmarking tool designed for employers. What It Pays™ is a product and trademark of CompRatio LLC. All rights, title, and interest in the What It Pays™ name, mark, and associated branding are exclusively held by CompRatio LLC.This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding that information. This policy applies to all users of the Platform, including Account Owners, authorized users, and visitors to our website.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated by reference into our Terms and Conditions.
For purposes of applicable data protection laws, the employer-customer is the data controller for identifiable employee data entered into the Platform. CompRatio acts as a data processor, processing employee data on behalf of and at the instruction of the employer-customer. For anonymized and aggregated data derived from employee data, CompRatio is the data controller.
2. Information We Collect
2.1 Account Information
When an Account Owner creates an account, we collect: full name, email address, job title, company name, industry, company size, federal contractor status, and agreement to our Terms and Conditions and this Privacy Policy.2.2 Employee Data
Employer-customers may enter employee data into the Platform for compensation benchmarking, analytics, and compliance purposes. The employer determines which data fields to populate. Available data fields include but are not limited to: employee name, job title, salary and compensation details, department, location, hire date, birth date, termination date, employment status, and demographic information including gender, race/ethnicity, veteran status, and EEO classification.Demographic fields are optional. However, certain analytics features such as pay equity analysis by demographic group and EEO compliance reporting require demographic data to function. The employer-customer is solely responsible for determining what employee data to enter and for ensuring they have the appropriate legal basis and employee consent (where required) to provide such data to the Platform.
2.3 Payment Information
Payment is processed securely through Stripe, Inc. CompRatio does not directly store credit card numbers or full payment account details. Stripe's collection and use of payment information is governed by Stripe's own privacy policy.2.4 Automatically Collected Information
When you visit our website or use the Platform, we may automatically collect: IP address, browser type and version, device type, operating system, referral source and URL, pages visited and features used, date and time of access, and general geographic location derived from IP address. We also log authenticated user actions within the Platform, including feature usage, data lookups, report generation, and administrative actions, for security monitoring, audit trails, and platform improvement.2.5 Referral and Attribution Data
We collect referral source information for affiliate tracking and advertising attribution purposes. This may include affiliate codes, promotional codes, campaign identifiers, and referring URLs.2.6 Communications
If you contact us via email, submit a support request, or provide feedback, we retain the content of those communications along with your contact information.3. How We Use Your Information
We use the information we collect for the following purposes:3.1 Platform Operations
To provide, maintain, and improve the Platform and its features, including salary benchmarking, compensation ratio calculations, pay equity analysis, retention risk scoring, compliance reporting, and employee management tools.3.2 Account Management
To create and manage your account, authenticate users, process subscription payments, communicate account-related information, and provide customer support.3.3 Analytics and Reporting
To generate compensation analytics, benchmarking reports, and compliance reports for employer-customers based on their employee data and verified Bureau of Labor Statistics data.3.4 Data Anonymization and Aggregation
To anonymize and aggregate employer-contributed data for the purpose of enhancing platform benchmarks, creating industry and market reports, conducting research, and producing marketing materials. All anonymized data is processed such that no individual company, employee, or person is identifiable.3.5 Demographic Analytics
Where employer-customers choose to provide demographic data (gender, race/ethnicity, veteran status, EEO classification), we use that data to power pay equity analysis, EEO compliance reporting, and demographic-based compensation benchmarking features within the Platform.3.6 Communications
To send transactional emails related to your account, billing, subscription status, Platform updates, maintenance notifications, and security alerts. To send periodic product-related communications from which you may opt out.3.7 Affiliate and Advertising Attribution
To track referral sources, attribute signups to affiliate partners, and measure the effectiveness of marketing campaigns. Affiliate partners receive only aggregate, non-identifiable information about accounts attributed to their referral codes (see Section 8).3.8 Legal and Compliance
To comply with applicable laws and regulations, respond to legal process, enforce our Terms and Conditions, protect our rights and property, and prevent fraud or security threats.3.9 Platform Improvement
To analyze usage patterns, identify technical issues, improve user experience, and develop new features and services.4. Data Security
CompRatio implements commercially reasonable administrative, technical, and physical security measures to protect your information.4.1 Encryption
All employee records entered into the Platform by employer-customers receive an additional layer of encryption beyond standard platform security measures, with real-time decryption through secure API endpoints. Salary history and all other platform data are protected by standard encryption at rest and in transit.4.2 Access Controls
The Platform enforces row-level security policies that restrict data access to authorized users within the subscribing organization. Role-based access controls ensure that users only access the data they are authorized to view.4.3 Secure APIs
Employee data is accessed, created, and modified exclusively through purpose-built secure REST API endpoints designed with data protection as a core requirement.4.4 Infrastructure
The Platform's primary database is hosted in the United States. Infrastructure hosting is managed through Supabase and its underlying cloud providers. Hosting region and infrastructure may change at CompRatio's discretion, but all data will remain within the United States unless otherwise disclosed.4.5 Limitations & Breach Notifications
While we take data security seriously and it is the foundation upon which the Platform is built, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.In the event of a confirmed data breach affecting Customer Data, CompRatio will notify affected Account Owners within 72 hours of confirmation, or as otherwise required by applicable law.
5. Data Anonymization and Aggregation
CompRatio anonymizes and aggregates employer-contributed data to enhance Platform benchmarking, analytics, and reporting capabilities.5.1 Anonymization Process
Data is processed such that no individual company, employee, or person can be identified from the resulting anonymized dataset.5.2 Ownership
Anonymized and aggregated data is the exclusive property of CompRatio LLC. It is not subject to deletion requests, as it is no longer attributable to any specific customer or individual.5.3 Use of Anonymized Data
CompRatio may use anonymized and aggregated data for: enhancing Platform salary benchmarks and analytics for all customers, producing industry and market reports, creating marketing materials and case studies, conducting compensation research, publishing insights through articles, blog posts, presentations, and other content, and providing aggregate benchmarking data to other employer-customers on the Platform.CompRatio may use anonymized data and/or aggregated data in marketing, including but not limited to social media posts, videos, presentations, and podcasts.
6. Cookies and Tracking Technologies
6.1 What We Use
The Platform and our website use cookies and similar tracking technologies to collect usage data, improve user experience, and support marketing and analytics. Technologies in use include:Google Analytics — for website and Platform usage analytics, traffic analysis, and user behavior insights. Google Analytics may collect IP addresses, browser information, and page interaction data. Google's use of this data is governed by Google's privacy policy.
HubSpot — for marketing analytics, lead tracking, email campaign performance, and customer relationship management. HubSpot may place cookies to track website visits, form submissions, and email interactions. HubSpot's use of this data is governed by HubSpot's privacy policy.
6.2 Types of Cookies
We use the following categories of cookies:Essential Cookies — required for Platform functionality, authentication, and security. These cannot be disabled without affecting Platform performance.
Analytics Cookies — used to understand how visitors interact with our website and Platform, helping us improve functionality and user experience.
Marketing Cookies — used to track the effectiveness of marketing campaigns, referral sources, and advertising attribution.
6.3 Managing Cookies
You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform or our website. Most browsers allow you to refuse cookies or alert you when cookies are being sent.7. Third-Party Service Providers
We use the following third-party service providers to operate the Platform and our business. Each provider may process personal data in accordance with their own privacy policies:Supabase — database infrastructure, backend services, reports, authentication.
Stripe — payment processing and subscription management, billing alerts, billing reminders.
Postmark — transactional email delivery (account notifications, billing alerts, security alerts).
HubSpot — customer relationship management, website and platform usage analytics, marketing emails, automated email campaigns, marketing analytics, and lead tracking, and is connected to Claude, Stripe, Google Workspace, and Quickbooks.
WeWeb — frontend application hosting and delivery.
Google Analytics — website and Platform usage analytics.
Quickbooks — Company's accounting tool, receives customer data from Stripe.
Claude (Anthropic) — AI tool used for CRM, marketing, and business operations. Does not have direct access to user, company, or employee data stored in the Platform.
CompRatio does not sell personal data to any third-party service provider. These providers process data solely to perform services on our behalf and are contractually obligated to protect the data they process.
CompRatio is not responsible for the privacy practices or security measures of third-party service providers. We encourage you to review the privacy policies of these providers.
8. Data Sharing and Disclosure
8.1 We Do Not Sell Personal Data
CompRatio does not sell, rent, or trade identifiable personal data to third parties.8.2 Employer-Customer Data
Identifiable employee data is accessible only to authorized users within the subscribing employer's organization and to CompRatio personnel as necessary to provide Platform services and support.8.3 Anonymized and Aggregated Data
CompRatio may share anonymized and aggregated data externally, including in published reports, analytics, benchmarking data for other employer-customers, marketing materials, blog posts, articles, presentations, and industry research. No identifiable company, employee, or individual information is included in anonymized data.8.4 Affiliate Partners
Affiliate partners may receive aggregate, non-identifiable information related to accounts attributed to their referral codes. This information is limited to: number of accounts signed up, industry categories represented, aggregate payment or commission amounts owed to the affiliate, and most popular Platform tools used. No identifiable company names, employee data, or personal information is shared with affiliate partners.8.5 Legal Requirements
We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to: comply with applicable law or regulation, protect the rights, property, or safety of CompRatio, our customers, or the public, enforce our Terms and Conditions, or investigate potential violations of our Terms or applicable law.8.6 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of CompRatio's assets, your information may be transferred as part of that transaction. We will notify affected customers of any such transfer and any changes to this Privacy Policy.9. Data Retention
9.1 Active Accounts
We retain your account information and employee data for as long as your account is active and your subscription is in good standing.9.2 Terminated Accounts
Upon account termination, the data export and deletion provisions described in our Terms and Conditions (Section 8.3) apply. The Customer may request a CSV export of identifiable Customer Data by submitting a written request to support@compratio.com within thirty (30) days of account termination.9.3 General Retention
CompRatio retains account and user data for as long as reasonably necessary for legitimate business purposes, legal compliance, tax and accounting obligations, dispute resolution, and enforcement of our Terms and Conditions.9.4 Billing Records
Billing and payment transaction records are retained indefinitely or as long as required for tax, accounting, and legal compliance purposes.9.5 Anonymized Data
Anonymized and aggregated data is retained indefinitely as it is no longer attributable to any specific customer or individual.10. Your Privacy Rights
10.1 Access and Correction
Account Owners and authorized users can view and edit their account information and employee data directly within the Platform.10.2 Employee Data Requests
Because CompRatio acts as a data processor for identifiable employee data, individual employees who wish to access, correct, or request deletion of their personal data should direct those requests to their employer. The employer-customer, as the data controller, is responsible for responding to employee privacy requests and for instructing CompRatio on any necessary data modifications or deletions.10.3 Account Data Export
Upon account termination, the Account Owner may request a data export as described in our Terms and Conditions and Section 9.2 of this Privacy Policy.10.4 Marketing Communications
You may opt out of non-essential marketing emails at any time by using the unsubscribe link included in those communications or by contacting us at support@compratio.com. You may not opt out of transactional emails necessary for account operation and security.10.5 Cookie Preferences
You may manage cookie preferences through your browser settings as described in Section 6.3.11. State-Specific Privacy Rights
Privacy laws vary by state and continue to evolve. CompRatio is committed to respecting your privacy rights under applicable state laws. The following is a summary of rights that may apply to you based on your state of residence. CompRatio will update this section as privacy laws change.11.1 California (CCPA/CPRA)
If you are a California resident, you may have the right to: know what personal information we collect, use, and disclose about you; request deletion of your personal information, subject to certain exceptions; opt out of the sale of your personal information (CompRatio does not sell personal data); correct inaccurate personal information; and not be discriminated against for exercising your privacy rights. Because CompRatio acts as a data processor for identifiable employee data, California residents whose data was entered by their employer should direct privacy requests to their employer. For requests related to your own account data, contact us at support@compratio.com.11.2 Texas (TDPSA)
If you are a Texas resident, the Texas Data Privacy and Security Act may provide you with rights including: the right to confirm whether we are processing your personal data; the right to access your personal data; the right to correct inaccuracies; the right to delete your personal data; and the right to obtain a copy of your data in a portable format. To exercise these rights for your account data, contact us at support@compratio.com. For employee data entered by your employer, direct requests to your employer.11.3 Virginia (VCDPA)
Virginia residents may have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the processing of personal data for targeted advertising or sale. CompRatio does not sell personal data or use it for targeted advertising. To exercise your rights, contact us at support@compratio.com.11.4 Colorado (CPA)
Colorado residents may have similar rights to access, correct, delete, and obtain portable copies of their personal data, and to opt out of the sale of personal data or targeted advertising. To exercise your rights, contact us at support@compratio.com.11.5 Other States
Additional state privacy laws may apply. If you are a resident of a state with an applicable privacy law and wish to exercise your rights, contact us at support@compratio.com and we will respond in accordance with applicable law.11.6 Verification
We may need to verify your identity before processing privacy rights requests. For requests related to employer accounts, we may require verification from the Account Owner.11.7 Updates
State privacy laws are evolving. CompRatio will update this section periodically to reflect changes in applicable law. We encourage you to check this policy regularly for updates.12. Children's Privacy
The Platform is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at support@compratio.com.13. International Data
The Platform is operated in the United States and all data is stored within the United States. The Platform is not intended for use by individuals or entities located outside the United States. If you access the Platform from outside the United States, you understand and consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence.14. Changes to This Policy
CompRatio reserves the right to update or modify this Privacy Policy at any time. Changes will be communicated to Account Owners via email to the address on file. The "Last Updated" date at the top of this policy will reflect the date of the most recent changes. Continued use of the Platform following notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with any changes, your sole remedy is to discontinue use of the Platform and cancel your subscription.15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or CompRatio's data practices, contact us at:CompRatio LLC
Email: support@compratio.com
For privacy-specific requests including data access, correction, deletion, or state privacy rights inquiries, please include "Privacy Request" in your email subject line to ensure timely handling.