Privacy Policy

Written in plain language. No legalese. You deserve to understand exactly how we handle your data.

What We Collect

Salary data you submit: Company name, job title, location (city/state), base pay, bonus, tips, equity, years of experience.

Optional: Gender (for aggregate gender pay gap analysis) and benefits list.

Workplace reviews: Company, role, star rating, pros, and cons text.

That's it. Nothing else. Ever.

What We NEVER Collect

  • X Names (first, last, or username)
  • X Email addresses
  • X IP addresses
  • X Browser fingerprints
  • X Cookies or tracking pixels
  • X Resumes or LinkedIn profiles
  • X Device identifiers
  • X Analytics or third-party scripts

No Accounts. Period.

PayPeeker does not have user accounts, profiles, or login systems. When you submit a salary, you receive a unique private link (like paypeeker.com/manage/8fk2xQ). This link is the only way to manage your submission. We don't know who you are. We can't contact you. We can't identify you. That's by design.

Document Verification

How we handle paystubs and W2s:

  1. You upload a document (paystub or W2) through your private manage link.
  2. Our AI system reads the document in memory only to confirm the salary matches your submission.
  3. The AI automatically redacts your name, address, and employee ID from its analysis.
  4. We store only: a verification hash (a mathematical proof that verification happened) and a confidence score.
  5. The original document is immediately and permanently deleted. It is never written to disk, never stored in a database, never backed up.

There is no way for us or anyone to retrieve your document after verification. It exists only in temporary memory during processing.

K-Anonymity Protection

We never display salary data until at least 5 people have submitted for the same company + role + state combination. This is called k-anonymity -- it makes it mathematically impossible to identify any individual from the displayed data.

Even if someone knows your company, role, and state, they cannot determine which of the 5+ data points is yours. We only show aggregate ranges (min, 25th percentile, median, 75th percentile, max) -- never individual submissions.

Flagging System

If someone flags your salary as inaccurate, you'll see a notice on your private manage page the next time you visit. You can respond by verifying (uploading proof), editing your submission, or deleting it. If no response is received within 30 days, the submission is hidden from aggregates.

Verified submissions earn a blue checkmark badge and are protected from single flags.

Data Storage and Security

All salary data is stored in a secure, encrypted database. Your data cannot be linked back to you because we never collect identifying information in the first place. There is no "user table" to breach -- because there are no users, just anonymous submissions.

Your private manage link token is the only thing connecting you to your submission. If you lose it, even we cannot help you -- because we don't know who you are.

Our Commitment

  • We will never add user accounts or require identification.
  • We will never sell or share individual salary data.
  • We will never add analytics, tracking pixels, or third-party scripts.
  • We will never store uploaded documents beyond the instant of verification.
  • We will always maintain the k-anonymity threshold to protect individuals.
JobOwlFind your next opportunity