PAGAProtector ("we," "us," or "our") is operated by Wicked Good Restaurants, LLC. This Privacy Policy explains what information we collect, how we use it, and your rights under California law. By using PAGAProtector, you agree to this policy.
Account & Restaurant Information
Employee Attestation Records
Connected Point-of-Sale Data (optional)
Technical & Usage Data
We do not sell your personal information or your employees' attestation data to any third party. We do not use attestation records for advertising purposes.
Your data is stored on servers operated by Supabase, Inc. (a U.S.-based infrastructure provider). Payment processing is handled by Stripe, Inc. We use industry-standard encryption in transit (HTTPS/TLS) and access controls to protect your data.
Because attestation records exist to serve as long-term compliance documentation, we retain them for as long as your account is active — by design across the multi-year period relevant to labor-claim recordkeeping. Upon account cancellation, we retain records for 12 months before deletion (or longer if required by applicable law, or if you ask us to preserve them), unless you request earlier deletion in writing.
We share data only with the service providers necessary to operate PAGAProtector:
We may disclose information if required by law, court order, or to protect the rights and safety of PAGAProtector or others.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
To exercise any of these rights, contact us at info@pagaprotector.com. We will respond within 45 days.
Note regarding employee attestation records: Attestation data submitted by employees is entered and controlled by the restaurant owner (our customer). If you are an employee who submitted an attestation form, please contact the restaurant owner regarding access to or deletion of your records. PAGAProtector acts as a data processor for this information on behalf of the restaurant.
PAGAProtector uses only technically necessary cookies to maintain your login session. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required because we do not set optional cookies.
PAGAProtector is a business service not directed at children under 13. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify account holders by email and update the effective date above. Continued use of PAGAProtector after a policy update constitutes acceptance of the revised policy.
PAGAProtector offers optional SMS text alerts. Account holders (restaurant owners and managers) opt in by entering and saving their mobile number in their account settings. Employees may receive employment-related text notifications where they have provided written consent (for example, in an onboarding communications-consent form).
No sharing of mobile information. Mobile phone numbers and SMS opt-in consent are used solely to deliver the text alerts you have requested. We do not sell or share mobile information, phone numbers, or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Information is shared only with our SMS delivery provider (Twilio) as needed to send the messages.
Message frequency. Message frequency varies and depends on activity in your account — for example, a text is sent when an employee flags a compliance issue or when a workplace incident notice is issued. There is no fixed number of messages.
Rates. Message and data rates may apply, depending on your mobile carrier and plan.
Opting out. You may opt out of text messages at any time by replying STOP to any message. Reply HELP for help. Opting out of SMS does not affect email notifications or your use of the service.
For privacy-related questions or requests: