Privacy
The pay data you paste is read in your browser and nothing leaves it while you screen. An audit is stored only when you press save, under your account in Sydney. Four processors see data: Cloudflare, Supabase, Stripe and SendGrid, and nobody else.
What is read, and where
The extract you paste (job titles, gender, pay figures, FTE, any variable pay) is read in your browser to compute the same-work screen. While you screen it, it does not leave the browser and no copy is kept. Nothing about a run you did not save is stored anywhere.
Personal identifiers, and what to delete
This tool never needs a name, an employee number, an email address, a date of birth or a national identifier. Those columns are not read for any figure. The screen names the identifier columns it sees in your paste and advises you to delete them before you save. The directive itself carries the same discipline for pay data processed under its Articles 7, 9 and 10: used only for the application of the principle of equal pay, nothing else (Art 12).
What is stored, and only when you save
You can run the screen without saving anything; nothing is stored unless you save. When you save an audit, we store the paste you gave, the corrections and exclusions you recorded, and the figures, under your account, so you can return to it and see the delta against the next run. The storage region (Sydney) applies only to a saved audit. A saved audit is scoped to your account; one account cannot read another's saved work. You can delete one saved audit, or your whole account, yourself on your account page. Support opens a saved record only at your request.
Where it is kept and who can see it
The storage sits outside the EEA (Sydney). Whether that region is acceptable for your saved pay figures is your DPO's decision to review: the screen runs read-only without saving, a saved audit is deleted by you in one click, and the transfer documentation we rely on is available on request at support@theartofservice.com.
Pages are served by Cloudflare; saved work and accounts are held in Supabase in Sydney (AWS ap-southeast-2), encrypted at rest and in transit; payments are taken by Stripe; sign-in and receipt mail go through SendGrid. Those four are the only processors of your data. Saved work is kept until you delete it or close your account.
Sign-in and email
Sign-in is a one-time link sent to your email; there is no password. We send a receipt, and a sign-in link when you ask for one. We do not use tracking pixels or open tracking in those emails, and we do not add your paste to any marketing list.
Our statement, not a ruling
Every requirement shown is The Art of Service's statement of a clause of Directive (EU) 2023/970 or the Fair Work Act 2009 (Cth), read against the copy we hold and cited to its article, not the instrument verbatim. Equal Pay Auditor screens the figures you paste; it does not rule that pay is compliant, and a job evaluation decides equal value.
Contact
Questions about your data: support@theartofservice.comPhoto: Artem Podrez, Pexels. The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001, Australia.