CloudPAY.vu CloudPAY.vu
← Back to CloudPAY.vu

Privacy Policy

Last Updated: July 4, 2026

1. Introduction

ReefStack Technologies (“we”, “us”, “our”) operates CloudPAY, a Vanuatu payroll management application (“the App”). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

2. Information We Collect

  • Account information: name, email, phone number, role
  • Employer information: company name, business address, tax identification (VNPF, IRD)
  • Employee data: employee names, addresses, positions, salary, bank details, tax and VNPF numbers, leave balances
  • Payroll data: pay runs, gross/net pay, deductions (tax, VNPF, advances), allowances, timesheets
  • Financial data: payroll reports, wage summaries, statutory contributions
  • Technical data: device type, IP address, access logs, usage statistics

3. How We Use Your Information

To calculate and process payroll, generate payslips and statutory reports, manage employee records, authenticate users, and provide support. We do not sell your data.

4. Data Storage and Cloud Infrastructure

Your data is stored using Supabase, which runs on Amazon Web Services (AWS) infrastructure.

  • Primary Data Centre: Australia (Sydney) or Singapore, depending on your deployment region.
  • All data is stored on AWS servers physically located in Australia or Singapore.
  • AWS is a United States company and is subject to United States law, including lawful data-access requests under the CLOUD Act, regardless of server location.
  • Local data-protection law also applies: the Australian Privacy Act 1988 (Australia) or Singapore’s PDPA (Singapore).

5. Data Sharing

Employee payroll data is shared within your organization based on role permissions (e.g., payroll officers, finance), and with infrastructure providers (AWS/Supabase). We may disclose information where required by law, including to tax or social-security authorities.

6. Data Retention

Payroll and employee records are retained while the account is active and may be retained longer to meet Vanuatu tax, VNPF, and labour-law record-keeping obligations.

7. Your Rights

You may request access to, correction of, or deletion of your personal data, subject to legal record-keeping obligations. Contact privacy@reefstack.dev.

8. Account Deletion

Your access to CloudPAY.vu is provisioned and managed by your organization’s Administrator or Manager — CloudPAY.vu does not offer self-service account deletion.

If you want your account removed from the App, please contact your Administrator or Manager. They can disable or delete your user account, revoke your business and department access, and remove your personal data in line with the retention rules above. If you are unsure who your Administrator is, or you no longer have an internal contact, email privacy@reefstack.dev and we will direct your request.

9. Security

We use encryption in transit and at rest, role-based access control, and audit logging. Payroll data is sensitive; access is restricted to authorized personnel. No system is 100% secure.

10. Contact

ReefStack Technologies — https://www.reefstack.dev — privacy@reefstack.dev

11. Consent

By using the App, you acknowledge you have read and understood this Privacy Policy.