Trust is the product

Global salary and compensation data on EarnWell is aggregated and anonymised. There is no path from a benchmark, percentile or distribution back to an individual employee — and no mechanism inside the platform for anyone, including us, to reverse-engineer an individual contribution. Statistical privacy floors suppress any group too small to be safely aggregated, and terms of use prohibit all attempts to re-identify contributors.

We collect the minimum data required to produce accurate benchmarks: role, level, location and compensation figures — nothing more. We do not collect names of submitted employees, employee identifiers, or any attribute that is not needed for statistical aggregation. Employer bulk files are processed to generate internal analyses and are not exposed to other customers.

All data held in the platform is encrypted at rest with AES-256. Every connection to EarnWell — web, API and database — is protected in transit with TLS 1.3. Payment details never touch our systems: card data is handled entirely by Stripe.

Every production database table is protected by PostgreSQL Row-Level Security, so access is enforced at the database layer itself — users can only read or modify rows they are authorised to access. Sensitive operations (benchmarks, subscription checks, seat management, AI access) additionally run through authenticated server functions with server-side verification, never through direct client calls.

Benchmarks, pay bands and equity analyses are produced by statistical algorithms and reviewed with human-in-the-loop oversight before they drive decisions on the platform. In line with our position as a deployer under the EU AI Act, AI-generated output — including the “Ask EarnWell” assistant — is always presented as indicative guidance, is reviewed by humans, and never makes an automated decision about an individual.

Under GDPR, UK GDPR and comparable regimes you can request access, rectification, erasure, restriction, portability and objection at any time. You can delete your account and identifiable data directly from your profile page, or email us and we will action the request within one month. De-identified compensation submissions may remain within aggregated datasets, where they can no longer be linked back to any individual. Full detail is in our Privacy Notice.

We share personal data only with a short, published list of sub-processors:

• Supabase (hosted on AWS) — database, authentication and application hosting for the platform.
• Stripe — payment processing, billing, tax and invoicing. Stripe never receives compensation data.

We do not sell personal data, and we do not use advertising cookies or third-party ad trackers. The current sub-processor list is available on request at any time.

For any trust, privacy, security or data-rights question — including vulnerability reports — contact spacenation@protonmail.com. We treat responsible disclosure seriously and will work with you to resolve any issue promptly.