Paychex Flex

"We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including but not limited to the provision of Services, transactions requested by, or on behalf of, Clients, and necessary and essential business purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, developing products and services, detecting and preventing fraud and abuse, and enforcing our agreements."

No specific deletion timelines are provided. The broad list of justifications (resolving disputes, developing products, enforcing agreements) effectively allows indefinite retention of personal information.

"We may share information with: Our employees, affiliated companies, subsidiaries, contractors, agents and third-party partners and vendors to perform Services related to Your account, to offer additional services, perform analysis to determine qualification to receive other services, collect amounts due, or for our business operations. Third-party providers for services that You may sign-up for via our Site or Services or other business partners with whom we work with to develop or market certain products or services."

Data is shared with a broad range of third parties including business partners for marketing and product development purposes, going well beyond what is necessary to deliver core services.

"Geolocation data, including Your IP address, to provide Services or if geolocation Services are enabled for time and attendance tracking. Upon Client request, Paychex collects latitude and longitude coordinates from the device as part of the timekeeping process when geolocation services are enabled. When smartphone devices are used, geolocation information may be provided to Client to ensure that workers/users are located at their appropriate work location."

Paychex collects precise GPS coordinates (latitude/longitude) from worker devices for time and attendance, sharing this location data with employers to verify workers are at their assigned locations.

"Computer, device, and connection information, such as browser type and version, operating system and other software installed on Your device, mobile platform and unique device identifier and other technical identifiers, including IP addresses, error reports and performance data. Paychex may also use certain technologies to record Your mouse movement, clicks, page visits, and screen information to enhance Your experience, for our own security purposes, and to improve our Site or Services."

Paychex collects detailed device fingerprinting data including installed software, unique device identifiers, and records granular user behavior like mouse movements and screen activity, going beyond what core payroll services require.

"Paychex uses third-party service providers who use cookies, web beacons, and similar technologies to collect, transmit, or receive information from our Site and elsewhere on the internet to improve our Site, Services, user experience, and for our own marketing purposes, including but not limited to, Google Analytics. As You interact with different pages and content on our Site, this behavioral data may be tracked and used to provide targeted content and Site recommendations."

Third-party services like Google Analytics collect information about user activity across the internet, and behavioral data is used for profiling and targeted content. The site also ignores Do Not Track signals.

"We reserve the right to update this Privacy Policy in our sole discretion at any time, with or without advance notice, unless otherwise required by law. Revisions are effective upon posting and Your continued use of this Site or our Services will indicate Your acceptance of those changes."

Paychex can change the privacy policy at any time without notifying users, and continued use is treated as acceptance of the new terms — a standard but concerning 'take it or leave it' approach.