Privacy policy

Last updated: October 11, 2026

At EA GROUP, LLC, doing business as Expert Accounting Group ("EA Group"), we are committed to protecting the personal information we receive through Xpayroll.

This policy explains how we collect, use, share and protect the information of clients, users and employees whose data is processed on the platform. It applies to the Xpayroll website, its payroll processing and direct deposit features, and communications related to these services.

1Information we collect

We collect the information necessary to provide the contracted services. Depending on the features used, it may include:

• Client and user data: name, address, Employer ID number, email, phone, business information, employer identification and access permissions.
• Employee data: name, address, Social Security number, tax information and other data needed to process their payroll.
• Payroll information: wages, hours worked, leave, benefits, deductions, withholdings, pay stubs and payment history.
• Banking information: account and routing numbers, account type and the authorizations needed to process direct deposits and authorized debits.
• Technical information: IP address, device and browser type, access logs and activity needed to operate and protect the platform.
• Communications: inquiries, support requests and documents sent to address them.

We may receive this information directly from the client, its authorized users, employees who use the available features, and banks or processors that confirm the status of transactions.

2How we use the information

We use the information to:

• Create and manage accounts and access permissions.
• Calculate and process payroll and generate pay stubs and reports.
• Process direct deposits and other expressly authorized payments.
• Prepare tax filings or deposits when those services have been contracted.
• Respond to inquiries and send notices about payments, changes or service incidents.
• Detect fraud, investigate errors and protect the platform.
• Comply with legal obligations and keep evidence of transactions.
• Evaluate and improve the operation of the service, seeking to use aggregated or de-identified data whenever possible.

We will not use bank data, Social Security numbers or individual wage information for advertising purposes.

Promotional messages will be sent in accordance with the applicable preferences and authorizations. Recipients may ask to stop receiving them, without affecting the communications necessary to provide the service.

3Information we share

We do not sell or rent personal payroll information. We may share the necessary information with:

• Banks and payment processors, to validate accounts, process transactions and handle rejections or returns.
• Technology and support providers that assist us with hosting, maintenance, security and operation of the service.
• Government agencies, to carry out contracted tasks or comply with legal obligations.
• Persons authorized by the client, within the corresponding permissions.
• Authorities or other recipients, when there is a valid legal obligation or it is necessary to investigate fraud or protect rights, in accordance with the law.

We will require providers acting on our behalf to meet confidentiality and data protection obligations, and we will limit their use of the information to the authorized services. Banks and other entities acting independently may also be subject to their own legal obligations and privacy policies.

4The client's responsibility as employer

When an employer provides information about its employees, EA Group processes it to provide the contracted services and in accordance with the client's authorized instructions, without prejudice to our own legal obligations.

The client must inform its employees about the use of their data in Xpayroll, obtain the required authorizations and keep the information correct and up to date.

5Protection of information

We will apply reasonable administrative, technical and physical measures to protect information against unauthorized access, use, alteration or disclosure. These must correspond to the sensitivity of the data and include access controls, protection of transmissions and backup and recovery procedures.

Access by our staff and providers will be limited to those who need the information to perform their duties.

No system can guarantee absolute security. If we identify an incident affecting personal information, we will investigate it, take measures to address it and make the notifications required by law.

Users must also protect their credentials and immediately report any suspicious activity.

6Retention and deletion

We will keep the information for as long as necessary to provide the service, comply with employment, tax and banking obligations, address claims and maintain records of transactions.

Cancelling an account does not mean the immediate deletion of all its data. Some records must be kept due to legal requirements or pending transactions.

When it is no longer necessary to keep the information, we will securely delete or de-identify it. Data in backups will remain protected until deleted in accordance with the corresponding retention cycle.

7Requests about your information

You may contact us to request access to or correction of your information, ask about its use or request its deletion where appropriate.

Before handling a request, we may verify the identity and authority of the requester. Some requests may be limited by legal obligations, third-party rights or the need to keep records.

If you are an employee of a client, corrections to wages, hours, withholdings or employment data should first be coordinated with your employer. You may also contact us if you have a concern about the handling or security of your data.

Withdrawing an authorization may prevent certain features from being provided and does not eliminate retention obligations or reverse transactions already processed.

8Cookies and similar technologies

Xpayroll may use cookies and similar technologies to maintain sessions, remember preferences and protect access. If analytics tools or other optional cookies are added, we will explain their purpose and offer the appropriate consent options.

Users can manage cookies through their browser. Blocking those necessary for operation may affect access to the platform.

9Providers and external links

If the service requires providers to access information from other jurisdictions, we will require the corresponding protection measures and disclose that processing in accordance with the applicable requirements.

Links to external sites are subject to the policies of their respective operators. This policy does not govern information you provide directly to those sites.

10Changes to this policy

We may update this policy to reflect changes in the service, our practices or legal requirements.

We will publish the current version with its update date and notify material changes through the platform or the registered email address. When a new use of information requires authorization, we will request it before carrying it out.

11Contact us

For privacy inquiries, requests related to your data or reports of possible incidents:

EA GROUP, LLC
Platform: Xpayroll
Email: info@xpayroll.net
Phone: 787-736-5020

For your security, do not send passwords, verification codes, full Social Security numbers or full bank details by email. We will tell you an appropriate channel when that information is needed.