Privacy

Who this covers

PEOLens is operated by PEO Consulting Partners. This notice covers peolens.com, the PEOLens application, and any broker-branded portal running on a custom domain that PEOLens serves. Two different groups of people show up in this data: the brokers and PEO consultants who use PEOLens, and the employer clients they invite in to complete an intake.

What is collected, and why

Nothing is collected speculatively. Every field exists because a specific part of the product needs it.

• Account details: your name, work email, firm, phone, and title. Used to sign you in, to address emails to you, and to print the broker-of-record contact line on the PDFs you export.
• Access requests: if you use the request-access form, your name, work email, firm, and whatever you typed in the optional volume and note fields. This is emailed to the person who runs onboarding. It creates no account and no marketing list.
• Submission data: the company facts an employer client provides for a quote, including headcount, states, payroll figures, benefits and workers compensation information, and answers to the eligibility and risk questions.
• Documents you upload: censuses, invoices, payroll registers, plan summaries, loss runs, and quotes returned by PEOs.
• Activity records: status changes, notes, messages, and sensitive actions are written to an append-only audit log, so a deal can always be reconstructed.

Cookies and tracking

PEOLens sets exactly one cookie: a signed session token named peolens_session. It is HttpOnly, SameSite=Lax, and expires after thirty days. It exists so you stay signed in.

• There are no advertising cookies.
• There are no analytics, session-replay, or heat-mapping scripts on the site or in the application.
• There are no third-party tracking pixels, and no data is shared with advertising networks.

Who your data is shared with

Two categories, and nothing outside them.

• The vendors on the deal. When you send a submission to market, the PEOs and ASOs you selected receive exactly the submission you approved for dispatch. Nothing is ever emailed to a vendor without an explicit human action.
• Infrastructure providers who process data on our behalf: Vercel (hosting and document storage), Airtable (application data), Resend (transactional email), Anthropic (reading uploaded quote documents), and Apollo (only for brokers who have the Lead Finder add-on turned on).

What is never done with it

Your data is not sold. It is not rented, licensed, or traded. It is not used to train anyone's models. It is not used to build a marketing list, and it is not shared with any vendor outside the deal you asked us to work.

How it is protected

Every request is authorized on the server against the signed-in user's role, so hiding something in the interface is never the control. Sign-in uses expiring signed links rather than passwords, so there is no password to steal. Documents live in access-controlled storage reachable only through the same ownership checks as everything else. The full technical description is on the security page, including what PEOLens has not been audited against.

How long it is kept

Deal records, documents, and audit entries are retained while your account is active, because a placed deal has a renewal and a broker needs the history behind it. Ask and your account and its data can be closed out. The audit log is append-only by design, so entries recording that an action happened are not rewritten.

Your choices

Email hello@peoconsultingpartners.com to see what is held about you, correct it, have it deleted, or ask a question about anything on this page. Requests are handled by a person, not a ticket queue. If you are an employer client, your broker of record can also action most of this for you.

Changes

This page changes in the same commit as the behaviour it describes, so it never drifts ahead of or behind the product. Material changes are communicated to account holders by email.