Privacy Policy

Effective Date: January 1, 2025

Last Updated: November 20, 2025

1. Information We Collect

SynergyPEO collects information necessary to provide PEO software services to our clients. This includes:

  • Personal Information: Name, email, phone number, address
  • Employment Data: Job title, department, salary, SSN (encrypted)
  • Payroll Information: Bank accounts, tax withholdings, deductions
  • Benefits Data: Health insurance elections, beneficiaries
  • Usage Data: Login times, IP addresses, device information

2. How We Use Your Information

We use collected information to:

  • Provide PEO services (payroll processing, benefits administration, compliance)
  • Communicate with users about service updates and support
  • Improve platform security and prevent fraud
  • Comply with legal obligations (tax filings, reporting)
  • Analyze platform usage to improve features

3. Data Security

We employ industry-standard security measures:

  • Encryption: AES-256 at rest, TLS 1.3 in transit
  • Access Controls: Role-based permissions, MFA required
  • Monitoring: 24/7 security operations center
  • Compliance: SOC 2, GDPR, CCPA, HIPAA-ready

4. Data Sharing

We do not sell your data. We share information only:

  • With your employer/PEO provider (as directed)
  • With service providers (payroll processors, benefits carriers) under NDA
  • When required by law (tax authorities, legal subpoenas)
  • With your explicit consent

5. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update inaccurate information
  • Delete: Request deletion (subject to legal retention requirements)
  • Opt-Out: Unsubscribe from marketing emails
  • Portability: Export your data in machine-readable format

6. Data Retention

We retain data for the duration of your employment plus 7 years (IRS requirement). After this period, data is securely deleted unless required by law to retain longer.

7. Cookies & Tracking

We use essential cookies for authentication and session management. Optional analytics cookies require your consent (GDPR/CCPA compliant).

8. Third-Party Links

Our platform may link to third-party websites (e.g., benefits carrier portals). We are not responsible for their privacy practices.

9. Children's Privacy

SynergyPEO is not intended for users under 18. We do not knowingly collect information from minors.

10. International Data Transfers

Data is processed in the United States. For EU users, we comply with GDPR via Standard Contractual Clauses.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email 30 days before taking effect.

12. Contact Us

For privacy-related questions, contact:

Email: privacy@synergypeo.com
Mail: SynergyPEO, Data Privacy Office, [Address TBD]

Questions about our privacy practices? Contact us