Privacy Notice
Data controller
UDD LLC
2803 Philadelphia Pike
Suite B #1283
Claymont, DE 19703
United States
No Türkiye-based KVKK data-controller representative has been appointed. The privacy contact address above is a service contact and is not described as a statutory representative.
This notice explains how UDD LLC, operating MPA – My Payscale App, processes personal data, including under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) where it applies. Your employer may be a separate controller when it receives an authorized HR export.
Completed calculation results are retained for 24 months. To calculate your pay accurately, the scheduled flight times from your rosters are also kept with your account for up to 24 months. Uploaded roster files are not retained. eCrew passwords are not retained unless you turn on autopilot (see Autopilot).
Data we process
- Membership and identity data: company email, username, company, Crew ID, account status, membership dates and authentication/security records.
- Completed calculation results: member ID; Crew ID, company, rank and nationality selection captured at calculation time; calculation month/year, source and UTC timestamp; salary slab and seniority inputs; base airport; basic, consolidated, fixed, allowance and deduction amounts; day/night flight credit, payable credit/block hours, duty and layover hours; relevant cabin-crew inputs; final calculated pay, currency, and parser/calculation version.
- Scheduled flight times: for each sector on a roster you calculate that has not yet been flown, your member ID, the flight number, departure and arrival airports, the scheduled departure and arrival times (UTC), the roster month, when eCrew generated that roster, whether it came from a manual upload or eCrew retrieval, and when it was first and last saved. When that flight later appears on a roster as flown, MPA uses these stored scheduled times to calculate your pay under the scheduled-time pay rules. A newer roster replaces the stored times of a sector that has not yet been flown with the latest published schedule; an older roster never replaces them.
- Billing metadata supplied by Stripe, such as subscription and transaction identifiers and status. MPA does not receive or retain raw payment-card details.
- Support communications and limited security/audit records needed to protect the service and investigate problems.
Autopilot (optional)
If you turn on autopilot, we store your eCrew password in encrypted form so that our automatic update service can sign in to eCrew for you about every 4 hours, retrieve your roster and update your salary calculation. The password is sealed so that our website cannot read it; only the update service, which runs on Google Cloud in Belgium, can open it, and only to sign in to eCrew. We also store the payroll settings you had when you turned autopilot on, the calculated results, a log of each update (time and outcome only, never your password) kept for 90 days, and a record of when you turned autopilot on or off. Your legal basis is your consent. You can turn autopilot off at any time; your stored password is deleted at that moment, and also if you delete your account. If eCrew rejects your password 3 times in a row, autopilot pauses and we email you once.
What we do not retain
- The uploaded roster PDF binary or file after processing. Only the scheduled flight times described above are kept from it.
- Your eCrew password (unless you turn on autopilot; see Autopilot) or any other temporary eCrew retrieval credential.
- Raw card details, MFA secrets in reports, or passwords in readable form.
- Subjective performance rankings, disciplinary flags, employment scores, or automated employment decisions.
Purposes and legal grounds
We process the data to provide and administer the service; calculate and explain pay; support payroll review; produce aggregate company fairness statistics; investigate disputes and support requests; maintain security and an audit trail; and meet applicable legal obligations. Depending on the context and applicable law, processing is based on providing the requested service, legitimate interests in accurate payroll administration and service security, compliance with law, or another lawful basis made available to you.
Access and sharing
Calculation history is available only to authorized MPA administrators protected by separate administrator authentication and MFA. Normal members cannot browse calculation-history records or other members’ data. An administrator may export relevant results to the member’s employer or HR where this is applicable, authorized, and lawful. Service providers such as hosting, email, and payment processors may process only the data needed to provide their services under appropriate safeguards. We do not sell calculation history.
Fairness statistics
Company statistics use retained calculation-result data to show aggregate counts and averages by company, rank, and month. They are intended for payroll consistency and fairness review only. They do not rank employees or make employment decisions.
Retention
Calculation-history records expire 24 months after creation, and stored scheduled flight times expire 24 months after the scheduled departure; both are deleted by MPA's daily retention process. Stored scheduled flight times are also deleted immediately if your account is deleted. Uploaded roster files are not retained. eCrew passwords are not retained unless you turn on autopilot (see Autopilot). Other account, billing, support, and security records follow their applicable operational or legal retention requirements.
Security
MPA uses access controls, administrator MFA, CSRF protection, parameterized database queries, audit logging, session controls, and data minimization. No internet service can promise absolute security; suspected privacy or security issues should be reported promptly.
Your privacy rights
Subject to applicable law, you may ask whether your data is processed; request information about processing, purposes, recipients, and transfers; request correction; request deletion or destruction where the legal conditions are met; object to a result produced exclusively by automated processing; or seek a remedy for unlawful processing. Send requests to help@mypayscale.app. We may need to verify identity before acting on a request.
Updates
Material changes will be posted here with a new effective date. This notice should be reviewed with qualified local counsel before relying on it as a complete legal compliance instrument.