PRIVACY POLICY

Last updated: February 2026

1. WHAT WE COLLECT

When you use Staffel, we collect the following data:

  • Account information: Your name, email address, and industry.
  • Conversation content: Messages you send to AI workers and the responses they generate.
  • Project data: Project names, descriptions, tasks, and saved outputs.
  • Usage data: Message counts, feature usage patterns, and login timestamps.
  • Payment data: Processed by Stripe. We store your Stripe customer ID but never your card details.

2. HOW WE USE YOUR DATA

  • To provide and operate the Staffel service
  • To process AI conversations through Anthropic's Claude API
  • To manage your subscription and billing through Stripe
  • To improve the service based on aggregate usage patterns
  • To communicate important service updates

3. THIRD-PARTY PROCESSORS

We share data with the following services to operate Staffel:

  • Firebase (Google Cloud): Authentication and database storage
  • Anthropic: AI conversation processing (messages are sent to Claude)
  • Stripe: Payment processing and subscription management
  • Vercel: Application hosting
  • PostHog: Product analytics (anonymised)
  • Sentry: Error tracking

4. DATA RETENTION

Your data is retained for as long as your account is active. When you delete your account, all associated data (profile, projects, conversations, outputs) is permanently deleted from our systems.

5. YOUR RIGHTS

You have the right to:

  • Access: Request a copy of your data
  • Delete: Delete your account and all associated data via Settings
  • Export: Export your saved outputs (Pro plan)
  • Correct: Update your profile information at any time

6. BYOK (BRING YOUR OWN KEY)

If you provide your own Anthropic API key, it is encrypted using AES-256-GCM before storage. Your key is only decrypted server-side when making API calls on your behalf. It is never logged, shared, or accessible to other users.

7. COOKIES

Staffel uses essential cookies for authentication (Firebase Auth session) and optional analytics cookies (PostHog). No advertising or third-party tracking cookies are used.

8. INTERNATIONAL USERS

Staffel complies with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). For EU users, we also comply with the General Data Protection Regulation (GDPR) requirements for data processing, consent, and the right to erasure.

9. CONTACT

For privacy-related inquiries, contact us at hello@staffelhq.com.