Privacy Policy
Last updated: April 1, 2026
WalnutsHR Inc. ("WalnutsHR," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
1. Information We Collect
Personal Data
We may collect personally identifiable information that you voluntarily provide, including:
- Name, email address, and phone number
- Company name and job title
- Billing and payment information
- Employee data you enter into the platform (as a data processor on your behalf)
Automatically Collected Data
When you visit our site, we automatically collect certain information including:
- IP address and browser type
- Device information and operating system
- Pages visited, time spent, and referral URLs
- Cookies and similar tracking technologies (see our Cookie Policy)
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services
- Process transactions and send billing information
- Send administrative communications (account confirmations, security alerts)
- Respond to inquiries and provide customer support
- Improve our website and services through analytics
- Comply with legal obligations
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal bases for processing your data include:
- Contract performance: To provide the services you requested.
- Legitimate interests: To improve our services and communicate with you.
- Consent: Where you have given explicit consent (e.g., marketing emails).
- Legal obligation: To comply with applicable laws.
4. Data Sharing & Third-Party Services
We do not sell your personal data. We may share data with trusted third parties that help us operate our service:
- Hosting & infrastructure: Vercel, Supabase
- Authentication: Clerk
- Payment processing: Stripe
- Analytics: Privacy-focused analytics tools
All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.
5. Data Retention
We retain your personal data only for as long as necessary to provide our services and fulfill the purposes described in this policy. Account data is retained while your account is active. After account deletion, we retain data for up to 90 days for backup and legal purposes, after which it is permanently deleted.
6. Your Rights
Depending on your location, you may have the following rights:
GDPR Rights (EEA residents)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
CCPA Rights (California residents)
- Right to know what personal information is collected
- Right to request deletion of personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at privacy@walnutshr.com.
7. Cookies
We use cookies and similar technologies to enhance your experience. For full details, see our Cookie Policy.
8. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest, multi-tenant data isolation with row-level security, and regular security audits. However, no method of transmission over the Internet is 100% secure.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.
10. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy, contact us at:
- Email: privacy@walnutshr.com
- Address: WalnutsHR Inc., 300 Market Street, Suite 400, San Francisco, CA 94105