Staffed Privacy Policy

2.1 Account and Authentication Information

We may collect:

• Account information: name (if provided) and email address.
• Authentication identifiers/tokens: identifiers and tokens associated with federated authentication providers (e.g., Sign in with Apple / Google sign-in).

Note: When you use federated authentication, your password is handled by the provider; Staffed does not store your raw password.

2.2 Customer Content: Inputs and Knowledge Base

The Service processes content you choose to provide. This content may include personal data about your customers or contacts.

Business-user responsibility (processor framing): If you use Staffed for business purposes, you control what Customer Content is submitted to the Service and are responsible for ensuring you have the necessary rights and consents (including any customer permissions required by law) to provide Customer Content for processing.

2.3 Photos and "Recent Screenshots" (If You Enable Permission)

If you enable photo library permissions, Staffed may access recent screenshots to support the screenshot-based workflow. This is designed to reduce manual steps when you choose to draft a reply from a screenshot.

• We do not access your photos without your permission.
• You can limit or revoke photo access in your device settings at any time (including using iOS "Limited Photos" controls, where available).

2.4 Support Communications

We may collect support emails/messages and related troubleshooting information you provide.

2.5 Billing and Subscription Information

If you purchase via Apple, Staffed does not receive your full payment card details. Apple provides us information such as subscription status and renewal events as needed to operate the Service.

2.6 Information Collected Automatically (Analytics, Device, Usage, Diagnostics)

We may collect:

• Device information: device model, OS version, app version, language, time zone.
• Usage/interaction data: feature usage, timestamps, interaction events (e.g., which features were used, in-app navigation/events).
• Diagnostics: crash logs and performance metrics.
• IP address: we may process IP address for security, fraud prevention, abuse detection, and rate-limiting.
• Firebase Analytics: We use Firebase Analytics to collect usage and device/app information to understand how the Service is used and to improve performance and reliability. We do not use Firebase Analytics for targeted advertising.

2.7 Cookies and Similar Technologies (Website)

Our website may use cookies and similar technologies for essential functionality, analytics, and security. You can control cookies via browser settings.

5.1 Human-in-the-Loop

Staffed generates draft replies. You remain responsible for reviewing, editing, approving, and sending any message.

5.2 Data Isolation and Model Training

• Account/workspace isolation: Your Knowledge Base and saved business facts are logically siloed to your account/workspace.
• No general/public model training on Customer Content: We do not use your Inputs, Knowledge Base content, or customer conversation content to train general-purpose or public AI models.
• Business-specific learning (within your account): We may store facts you approve and edits you make so the Service works better for your business over time.

If we ever offer an optional program that uses additional content for broader model improvement, we will provide a clear opt-in mechanism and describe it at the time of choice.

6.1 Service Providers (Processors)

We use vendors to help operate the Service (e.g., hosting, authentication, analytics, diagnostics, and AI inference). These providers process information on our behalf under contractual obligations to protect it and use it only to provide services to us.

Primary sub-processors (current as of the "Last Updated" date):

• Google (Gemini / Google Cloud): AI inference to generate drafts from Customer Content you submit.
• Google Firebase (including Firebase Authentication and Firebase Analytics): authentication and analytics infrastructure (and, if enabled in our configuration, diagnostics such as crash reporting).

We may update this list over time. Please check this page for changes.

6.2 Legal and Safety

We may disclose information if necessary to comply with law or lawful requests, enforce our terms/policies, or protect rights, safety, and security of Staffed, our users, or the public.

6.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

6.4 With Your Direction

We may share information when you request or authorize it (for example, when you connect a third-party integration).

11.1 Access, Correction, and Portability

You may be able to access and update certain account information within the app. You may also request access to certain personal information we hold.

11.2 Deletion (Including In-App Account Deletion)

If the Service supports account creation, you can initiate account deletion within the app (for example, through in-app Settings/Account controls). Deleting your account removes the account from our records and deletes associated personal data that we are not legally required to retain.

You may also contact info@staffed.me for assistance with deletion requests.

11.3 Device Permissions (Including Photos)

If the Service uses device permissions (e.g., Photos), you can manage permissions in device settings. If you disable permissions, some features may not work (for example, recent-screenshot workflows).

11.4 Marketing Communications

If we send marketing emails, you can opt out via the unsubscribe link. Service/administrative messages may still be sent.

11.5 U.S. and California Privacy Rights

Depending on your jurisdiction, you may have rights such as access, correction, deletion, and opting out of certain data sharing where applicable. We do not sell personal information in the traditional sense. If any activity is considered "sharing" under applicable California law for cross-context behavioral advertising, we will provide an appropriate opt-out mechanism.

To exercise rights, contact info@staffed.me. We may need to verify your identity before fulfilling requests.