Privacy Policy

The short version

rippedoffworker helps you build a private, dated record of unpaid wages and mistreatment at work. Your record is yours. We do not sell your data, and we never contact or notify your employer. You can export or delete your record at any time. The rest of this policy explains exactly what we collect, why, and your choices.

This policy explains how we handle your data. It is not legal advice about your workplace situation — see our Terms.

What we collect

Information you give us

• Account details: your email address and a password (passwords are handled by our authentication provider and stored only in hashed form — we never see your plain password).
• Your job and pay details: employer legal/trading name, your role, employment type, pay rates and pay periods, agreed and actual hours.
• The record you build: entries and their history describing hours worked, unpaid time, incidents, deductions, and mistreatment; gig statements and events; commission deals; and the names or details of other people you choose to add (for example a manager or witness).
• Wellbeing notes: if you use the wellbeing feature, notes about how your situation is affecting you. This can include sensitive information about your health or emotional state, which you provide voluntarily.
• Uploaded evidence: files you attach, such as pay stubs, schedules, messages, or photos.

Information collected automatically

• There are no advertising or tracking pixels anywhere on this site — no Meta, Google Ads, TikTok, LinkedIn, Snap or Pinterest tags, and no advertising cookies. That has not changed.
• We use Vercel Web Analytics on our public pages, to count how many people find the site and which pages they land on. It records the page address, the referring site, approximate location from your network, and your browser and device type. It sets no cookie for this: Vercel identifies a visit using a hash of the request itself, which is discarded after 24 hours. It cannot follow you to another website.
• It is switched off inside your record. Once you are signed in and using the app itself — your log, your evidence, your pay pages, your report — no analytics event is sent at all. Which pages you open while documenting what happened to you is not something we send anywhere. We also remove anything after the ? in a page address before reporting it, so identifiers never travel with it.
• Our hosting and backend providers keep basic operational logs. Our sign-in system also records the IP address and browser type used each time you sign in, so we can secure your account against misuse.

Cookies

If you are not signed in, this site sets no cookies at all. You can read every public page — the guides, the state pages, the free check — without one being placed on your device.

When you sign in, we set one cookie: it holds your session, which is what keeps you signed in as you move between pages. It is necessary for the app to work at all and is used for nothing else — not advertising, not measurement, not building a profile of you. Signing out clears it. Because it is strictly necessary to provide the service you asked for, there is no cookie banner to click through.

Payment information

• When you pay the one-time fee, payment is processed by Stripe. We do not receive or store your full card number; Stripe handles that. We receive a confirmation that payment succeeded.

When we collect it — including before you pay

You can use the free check and build your record before creating an account or paying. Up to that point, what you enter stays in your own browser — it is not sent to us. We have no copy of it, cannot read it, and could not hand it over if we were asked to.

Because it never reaches us, we do not encrypt it and do not claim to — it sits in your browser’s own storage on that one device. Anyone else who uses the same computer and opens the same browser could see it. There is a “Clear what I’ve entered” link on the free check that removes it, and we clear it automatically once your answers have been safely saved to your account. If you never create an account, it stays in that browser until you clear it or your browser does.

When you create an account, we save your record to it straight away — before any payment, and whether or not you ever pay. That is deliberate: it is what lets you start on your phone and carry on later on a laptop, instead of losing your work. It does mean we hold your personal data before you make any payment. What we keep, and for how long, is set out in How long we keep it below.

How we use your data

• To provide the service: build, save, calculate, and export your record.
• To create your account and keep it secure.
• To process your one-time payment (via Stripe).
• To send you service messages (for example account and payment confirmations).
• To maintain, secure, debug, and improve the service.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your record to advertise to you.

Marketing emails

We don’t send marketing emails. The only emails we send are the ones the service needs to work — confirming your account, resetting your password, and confirming payment. If that ever changes, we will say so here first, and any such email will carry an unsubscribe link.

Who we share it with

We share data only with service providers who help us run the app, under contracts that limit them to that purpose:

• Supabase — database, authentication, and file storage (hosted in the United States).
• Stripe — payment processing.
• Vercel — website hosting and page-view analytics on our public pages.
• Resend — sending account emails (confirmation, password reset, payment confirmation).
• Cloudflare — the “are you human?” check on the sign-up form, and the encrypted daily backup of your record and your files (stored in the United States). The check receives your IP address and a one-off token when you create an account. The backup is encrypted before it leaves us, and Cloudflare cannot read it. See Backups below.

We may disclose information if legally required (for example a valid court order or law). We will not volunteer your information otherwise. We never share your record with your employer, and we never notify your employer that you use this service.

Where your data is stored

Your data is stored in the United States with the providers listed above. The daily backup is kept in the United States too.

How we protect it

• Data on your account — everything we hold on our servers — is encrypted in transit (TLS) and at rest by our hosting provider.
• What you enter before you create an account is different. It is saved in your own browser on the device you are using, and it never reaches us — so there is nothing for us to encrypt, and we do not claim to. It is private to you in the sense that we cannot see it; it is not protected against someone else who uses the same computer and opens the same browser. If you are on a work or shared computer, use the “Clear what I’ve entered” link in the free check to remove it.
• Access is restricted by row-level security, so your records are technically walled off to your account only — other users cannot access them.
• We limit internal access and use reputable providers.

No online service can promise perfect security, and we do not. But protecting a record like yours is central to what we do, and we design for it. If a data breach affecting you occurs, we will notify you as required by law.

How long we keep it

If you have paid

We keep your record for as long as your account is active. We do not delete a paying customer’s record on a timer — it stays until you delete it, or ask us to.

If you have not paid

We delete an unpaid saved record after 180 days without using it. The clock runs from the last time you used it — signing in, or adding or changing anything in your record — not from the day you signed up. Anything you do resets it. Just signing in and looking is enough; you don’t have to change anything. So if you come back on day 179, you have a fresh 180 days from that visit. (Creating your account counts, so if you never come back at all, the 180 days run from when you created it.) We do not send a warning before it happens.

When that happens, we delete your record — your job details, entries, pay records and any files you uploaded. Your login stays. Your email address and account remain, so you can still sign in; you will simply find an empty record and can start again.

If you pay at any point, this no longer applies to you — your record moves onto the “if you have paid” rule above and is not deleted on a timer.

Operational and security logs

Separately from your record, we keep limited operational logs — for example a dated entry recording that an automatic deletion ran, and the sign-in records described above. These logs contain no part of your record: no employer name, no entries, no wellbeing notes, no uploaded files. We keep them so we can demonstrate that deletions actually happened and to protect accounts against misuse. Some of these entries reference an account identifier and are kept after the account itself is deleted.

Backups

Every day we take a copy of your record and your uploaded files and keep it with Cloudflare, in the United States. It is encrypted before it leaves us, and Cloudflare cannot read it. The key that opens it is held by the person who runs this business and exists nowhere else — not on the machines that make the backup, and not with the company that stores it.

After you delete something, it can remain in those encrypted backups for up to seven days. Then it is gone. Backups older than seven days are deleted on every run, so there is no copy of your record anywhere older than a week.

Separately, Supabase takes its own daily backups of the database and ages them out on their own cycle, also seven days. We cannot search those, and we cannot delete from them.

Your rights and choices

You can, at any time and whether or not you have paid:

• Download your data. You can download your data at any time. This gives you the information in your record as raw data, plus a list of any files you have uploaded. The uploaded files themselves are downloaded separately from your evidence screen. This is your raw data, not the formatted report — the report is part of the paid app.
• Correct information that’s wrong, by editing it in the app.
• Delete your record — everything you have logged is permanently removed, and you keep your login and can start again.
• Delete your whole account — everything is permanently removed including your login, and you will not be able to sign in again.

These controls are in the app — on your saved-record screen, on the unlock screen, and in Settings. You can also email privacy@rippedoffworker.com and we will do it for you. We respond within 2 business days.

Deleting a record deletes it — there is no waiting period, no recycle bin, and nothing held back in the app. Two copies outlive the button, and both age out within a week: our own encrypted daily backup, held by Cloudflare for up to seven days, and Supabase’s automatic daily backups of the database, which age out on their own cycle, also seven days. We can delete from the first and we cannot search or delete from the second — see Backups above for both. Apart from those, and from the limited logging under Operational and security logs, we keep no copy of your record. As everywhere else in this policy: we never share your record with your employer.

US state privacy rights

Depending on where you live (for example California under the CCPA/CPRA, and similar laws in other states), you may have additional rights, including to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell your personal information or share it for cross-context behavioral advertising. To make a request, contact privacy@rippedoffworker.com.

Children

rippedoffworker is for adults. It is not intended for anyone under 18, and we do not knowingly collect data from minors.

Changes to this policy

If we make material changes, we’ll update the date above and notify you by email or in the app.

Contact

Questions or requests: privacy@rippedoffworker.com · Highfield Digital, Inc., 3801 N Capital of Texas Hwy, Ste E240 - 4005, Austin, TX 78746, United States.