Privacy Policy

Last updated: 22 March 2026

1. Who we are

SalaryCrush is operated by Gwat Tech, a company registered in England and Wales.

  • Company number: [XXXXXXXX]
  • Registered address: [Your registered address]
  • Privacy contact: privacy@gwattech.co.uk

As the operator of SalaryCrush, Gwat Tech is the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We collect the following categories of personal data:

Account data — name, email address, hashed password. Provided by you on sign-up.

Salary data — current salary, salary history, job role, location, employer. Entered by you when using the app.

Usage data — features accessed, calculations run, benchmarks viewed, reports generated. Collected automatically.

Technical data — IP address, browser type, device type, session identifiers. Collected automatically.

Payment data — transaction reference, subscription status, billing country. Handled by Stripe; we do not store card details.

Support data — messages, bug reports, and diagnostic information you provide when contacting us.

We do not knowingly collect personal data from anyone under the age of 16.

3. Why we use your data

We only process your data where we have a lawful basis under UK GDPR Article 6:

PurposeLawful basis
Providing and running the SalaryCrush serviceContract — Art. 6(1)(b)
Salary benchmarking and market comparisonsContract — Art. 6(1)(b)
Generating reports and salary insightsContract — Art. 6(1)(b)
Diagnosing and resolving technical issuesLegitimate interests — Art. 6(1)(f)
Improving the product and user experienceLegitimate interests — Art. 6(1)(f)
Processing subscription payments via StripeContract — Art. 6(1)(b)
Complying with legal and tax obligationsLegal obligation — Art. 6(1)(c)
Sending service and security notificationsLegitimate interests — Art. 6(1)(f)
Marketing communications (if opted in)Consent — Art. 6(1)(a)

4. How long we keep your data

Account and salary data While active + 2 years after closure
Payment records 7 years (HMRC requirement)
Support correspondence 2 years
Anonymised analytics Indefinitely

When an account is deleted, personal data is purged from active systems within 30 days, subject to any legal retention obligations above.

5. Who we share your data with

We do not sell your personal data. We share it only with the following trusted third-party processors, under contractual obligations to protect it:

Supabase

Database hosting and authentication

Stripe

Payment processing and subscription management — USA (Standard Contractual Clauses apply)

We may also disclose data where required by law, court order, or regulatory authority.

6. Your rights under UK GDPR

You have the following rights regarding your personal data:

Access

Request a copy of the data we hold about you

Rectification

Ask us to correct inaccurate or incomplete data

Erasure

Request deletion of your data

Restriction

Ask us to limit how we process your data

Portability

Receive your data in a structured, machine-readable format

Objection

Object to processing based on legitimate interests

Withdraw consent

Withdraw marketing consent at any time without penalty

To exercise any of these rights, email privacy@gwattech.co.uk. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. Cookies

SalaryCrush uses cookies and similar technologies to keep you signed in and understand how the app is used:

Essential cookies

Required for authentication and session management

Required

Analytics cookies

Used to understand usage patterns and improve the product

Optional

You can manage cookie preferences through your browser settings or our in-app consent banner.

8. Security

We take reasonable technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (TLS) and at rest
  • Secure hosting via Supabase with access controls
  • Password hashing — we never store plain-text passwords
  • Payment processing handled entirely by Stripe — we do not handle card data

No system is completely secure. If you believe your account has been compromised, please contact us immediately at security@gwattech.co.uk.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by a prominent notice within SalaryCrush at least 14 days before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent revision.

10. Contact us

For any questions, requests, or concerns about this policy or how we handle your data:

Gwat Tech

Email: privacy@gwattech.co.uk

Address: [Your registered address]

We aim to respond within one calendar month of receiving your request. You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

© 2026 Salary Crush. All rights reserved.