Your data, protected.

STAFFD only uses your business information to make your staff produce better output for you. We do not sell your data, and you can delete everything at any time.

• Account information — your name, email, and password (hashed) when you sign up.
• Business Vault data — anything you enter into your Business Vault (business name, industry, target audience, contact info, etc.).
• Work product — documents, drafts, and reports your staff produces for you.
• Subscription data — your plan, billing status, and payment-processor customer ID (we never store your card details).
• Anonymous usage analytics — collected via Plausible Analytics, which does not use cookies or track individuals.

• To personalize the work your staff produces for your business.
• To remember context across sessions so your team gets better over time.
• To deliver, maintain, and improve the STAFFD platform.
• To process subscription payments via our payment processor.
• To communicate with you about your account or service updates.

STAFFD does not train its own model on your data. To produce a draft, your task and the relevant Vault context are sent to a model provider. AI drafts are currently processed by Google Gemini, through the Gemini API free tier. Anthropic (Claude) is used as a backup when Gemini is unavailable.

On the Gemini API free tier, Google may use the content you submit and the drafts it returns to improve its products, and human reviewers may read them. Please do not put passwords, payment card numbers, health records, or other sensitive personal information into a task. We will update this page before this changes.

STAFFD shares the minimum data necessary with these service providers:

• Google (Gemini API): to produce the work your staff delivers (your task and Vault context). See the AI disclosure above for how the free tier uses that content.
• Anthropic: as a backup model provider when Gemini is unavailable (the same task and context).
• Our payment processor — to process subscription payments. It handles all card data directly.
• Vercel — to host the STAFFD application.
• Railway — to host backend services (database, integrations).

We never sell your data. We never share it with advertisers. We never use it for marketing other products.

You can, at any time:

• Access your data — see everything we store about you in your account dashboard.
• Export your data — request a complete data export via email.
• Correct your data — edit anything in your Vault directly.
• Delete your data — request full account deletion. We will permanently delete all of your data within 30 days.
• Opt out — California residents can opt out of any sale of personal information (we do not sell any data, so this is automatic).

To exercise any of these rights, email privacy@urstaffd.com.

All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and logged. Passwords are hashed using industry-standard algorithms. We follow the principle of least privilege for all internal access.

STAFFD does not use third-party tracking cookies. We use a single first-party session cookie to keep you signed in. Our analytics provider (Plausible) is cookie-free and does not track individual users.

STAFFD is built for businesses and is not directed at children under 16. We do not knowingly collect personal information from anyone under 16.

If we change this policy in a material way, we will notify you by email and post a notice in the dashboard at least 30 days before the change takes effect.

Questions, requests, or concerns? Email privacy@urstaffd.com.