Last updated: 30 April 2026
PayslipIQ Ltd (“we”, “us”, “our”) operates the website payslipiq.co.uk and is the data controller for any personal data processed through this service. For data protection enquiries, contact us at privacy@payslipiq.co.uk or our Data Protection contact at dpo@payslipiq.co.uk.
Data Controller (UK GDPR Article 13(1)(a))
PayslipIQ does not store payslip images, documents, or extracted figures on our own servers. When you submit a payslip (image or manual entry) to our analysis tool, the data is held in memory on our servers only for as long as it takes to forward the request to our AI processor and return the results. Once the response is delivered, the data is discarded from our memory. We do not log payslip contents and we do not retain copies. We do not create user accounts and do not require registration.
However, your data is processed by a third-party AI provider (Anthropic: see Section 7). We have no control over Anthropic's retention policy beyond what their published terms allow. You should review Section 7 carefully before deciding whether to upload sensitive personal information.
We may collect the following limited information:
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:
We use a single essential cookie (psiq:consent) to record your cookie preference. This is strictly necessary for the site to function and does not require consent.
Third-party analytics cookies (Google Analytics, Microsoft Clarity) are only set after you explicitly accept analytics cookies via our consent banner. You can change your preference at any time by clearing your browser cookies and revisiting the site.
We use the following third-party data processors:
Some of our third-party processors (Anthropic, Vercel, Google, Microsoft) process data outside the UK, primarily in the United States. Where this occurs, transfers are protected by the UK Addendum to the EU Standard Contractual Clauses (UK SCC Addendum), the EU-US Data Privacy Framework where the processor participates, or the processor's participation in an adequate data protection framework as recognised by the UK Government.
All data transmitted to and from payslipiq.co.uk is encrypted using TLS 1.2+ (HTTPS). We do not store sensitive financial data on our servers. Access to our infrastructure is restricted and protected by multi-factor authentication. We follow the principle of least privilege for sub-processor access.
PayslipIQ uses artificial intelligence (Anthropic Claude) to analyse the figures you submit and produce educational explanations of your payslip. Under Article 22 of the UK GDPR, you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you.
PayslipIQ does not make automated decisions that have legal or similarly significant effects on you. Our AI produces informational, educational guidance only. We do not approve or refuse loans, employment, benefits, tax assessments, or any other regulated decision. We do not score, rank, or profile you. We do not share AI outputs with third parties for decision-making purposes. The figures and explanations we return are for your own understanding and should be checked against your employer's payroll, HMRC, or a qualified adviser.
You retain the right to (a) request human review of any output, (b) contest any AI-generated explanation you believe is incorrect, and (c) receive a plain-English explanation of how the AI reached its conclusion. To exercise any of these rights, email privacy@payslipiq.co.uk.
Data Protection Impact Assessment (DPIA): Because PayslipIQ processes payslip data (which can include identifiers, salary, tax-code, and National Insurance information) using a third-party AI processor based outside the UK, we have completed a DPIA under Article 35 of the UK GDPR. The DPIA identifies the following risk factors: (1) financial-adjacent personal data flowing to an automated processor, (2) third-country transfer to the United States, and (3) AI-assisted analysis that, while not fully automated decision-making under Article 22, still warrants documented mitigations. The DPIA also documents our mitigations: no payslip persistence on PayslipIQ servers, hashed IPs only in our rate-limit cache, transport encryption (TLS 1.3) end-to-end, contractual controls on Anthropic, and explicit consent for any analytics. The full DPIA, the risk register, and our Transfer Impact Assessment are published on the Trust Centre and reviewed at least every 12 months or whenever a new processor is added.
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
Since PayslipIQ does not store payslip data on its servers, there is no financial data on our systems to access or delete. If you have subscribed to our newsletter, you can unsubscribe at any time or contact us to request deletion of your email address. To request deletion of any data Anthropic may hold under their 30-day retention window, contact privacy@payslipiq.co.uk and we will forward the request.
To exercise any of these rights, email privacy@payslipiq.co.uk. We will respond within 30 days.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
PayslipIQ is not intended for use by individuals under the age of 13 (the UK's digital age of consent under UK GDPR). We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete it promptly. Parents or guardians who believe a child has submitted information to PayslipIQ may contact privacy@payslipiq.co.uk.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be highlighted via our newsletter where applicable.
For any questions about this Privacy Policy or to exercise your data rights: