Privacy Policy

Drafted August 23, 2026.

The short version

• If you use the free WH-347 generator without an account, what you type is deleted 30 days later. That is a real deletion — the rows are removed from the database, not flagged as hidden.
• We never store a full Social Security number. See "Identifying numbers" below.
• We do not sell your data, and there are no third-party advertising or analytics scripts on any page.
• If you have an account, you can export everything it owns at any time, without asking us.

Who this covers

Chalkline LLC ("we") operates Chalkline, a tool for preparing and filing certified payroll. This policy covers the website, the free Form WH-347 generator, and accounts.

We are not affiliated with, endorsed by, or approved by the U.S. Department of Labor or any state agency. Nothing here is legal advice.

Using the generator without an account

You can produce a WH-347 without giving us anything — no account, no card, no email. What you type is saved in our database so the form survives a page reload, and is linked to a token stored in a cookie in your browser rather than to you.

What that record can contain, because the form asks for it:

• Your business name and address, the project, and the contract number
• Each worker's name, identifying number, classification, hours, pay rates, fringe benefit contributions and deductions
• The certifying official's name, title, phone and email

Deletion after 30 days

A scheduled job deletes these records 30 days after they are created. The date is shown on the tool page before you enter anything and again on the generated document flow. There is no archive and no soft delete: once the job runs, the record and every worker row on it are gone from the database, and we cannot recover them for you afterwards.

If you gave us an email address, we send two reminders before that happens — on day 23 and day 29 — each offering a download and the option to keep the data by creating an account. If you ignore both, the deletion happens anyway.

Identifying numbers

Form WH-347 asks for an identifying number, not a Social Security number. If a value you enter or upload is long enough to be a government identification number, we keep only the last 4 digits and discard the rest before the record is written. There is no code path in this application that can store a full Social Security number.

CSV uploads

If you import a CSV into the free tool, the file itself is parsed in memory and is not stored. Only the rows you choose to apply to the form are saved, under the same 30-day deletion as everything else.

If you create an account

An account exists so you do not start over each week. It holds your contractor profile, your projects, your worker roster, your payrolls and the documents generated from them, and it keeps them until you delete them or close the account.

You can export everything the account owns — payrolls, documents, workers — at any time from inside the product. We do not require a support request for this and we do not put obstacles in front of it.

Email

• A copy of your own document. If you ask us to email you a WH-347, we use the address for that and for the deletion reminders above. That is service email about your own data, not marketing.
• The mailing list. Separate, optional, and never bundled with the copy request. We use double opt-in: you are not on the list until you click a confirmation link, and an unconfirmed request is deleted after 30 days. Every message has a one-click unsubscribe.

Cookies, and how we count visitors

There are no third-party analytics or advertising scripts anywhere on this site. We use:

• A draft cookie, so the form you are filling in is still there when you come back to the tab.
• A browser cookie lasting 12 months, mirrored in your browser's local storage, which lets us recognise that two visits came from the same browser. We use it to count visitors and to offer to carry your work into an account. It never restricts anything.
• A session cookie once you sign in.

Usage events are recorded on our own servers — pages visited, forms generated, which validation rules were triggered. They are stored against the browser token, not against your name, and the system refuses to write identifying values into them. Browser recognition records are deleted after 13 months, by which point the cookie has expired and no browser could present the token anyway.

Encryption

These fields are encrypted at rest, so they are unreadable in a database backup or a stolen dump:

• Anonymous WH-347 tool: worker names, worker identifying numbers, your business address, the signer's phone and email, and any address you gave us for a copy
• Accounts: worker first, middle and last names, worker identifying numbers, worker addresses, your FEIN last four, and the default signer's phone and email
• Email list: the subscriber's address

All traffic to the site is over HTTPS.

Who else touches your data

We use a small number of service providers, and no advertising networks:

• Amazon Web Services — hosting, database, file storage (United States)
• Postmark — sending email
• Sentry — error reporting
• Stripe — payment processing, once paid plans exist. We never see or store your card number.

What we do not do

• We do not sell your data, and we do not share it with data brokers.
• We do not send your data to an agency unless you tell us to file it.
• We do not use your payroll data to train models.

Your choices

• Use the generator without an account, and nothing survives 30 days.
• Export everything your account owns, at any time.
• Ask us to delete your account and its data.
• Unsubscribe from the mailing list in one click.

Contact

Write to hello@chalklinepayroll.com and a person will read it.

Changes

If we change this policy in a way that affects what we do with your data, we will say so on this page and, for account holders, ask you to accept the new version before you continue.