Privacy, data processing and terms.

Privacy summary

Your firm is the controller of the data it puts into Stafio; Stafio processes it to provide the service. We store work email, display name, role and time zone for each person; session metadata (hashed tokens, sign-in provider, MFA flag and timestamps); cost and bill rates, visible only to approved people; weekly status, hours, SOW estimates, approvals and the audit trail; and, for client sign-off, the signer's name, email, IP address, browser and time.

We use no third-party analytics or advertising trackers, we do not sell data, and we never use customer data to train AI models.

Data processing summary

• Purpose: status roll-up, hours and timesheets, SOW authoring, approval, sending and signature, margin reporting, and reminder emails.
• Data subjects: your firm's people (employees and contractors) and your client contacts who view or sign SOWs.
• Location: United States only (us-east-1), including backups, logs and email processing.
• Security measures: database-enforced tenant isolation, SSO and MFA, hashed tokens, append-only audit log, TLS 1.2+ in transit and AES-256 at rest, daily backups with restore testing. See Security.
• Return and deletion: self-service export at any time; 30 days of read-only export after termination, then permanent deletion from active stores, with backups aging out within the backup window.
• Sub-processors: the list of hosting and email providers will be published with the final addendum.

Terms of service summary

• Stafio is multi-tenant SaaS billed at $9.99 per active user per month, plus a one-time setup fee; pilot terms are agreed per firm.
• Your firm owns its data and can export it at any time.
• Phase 3 and later features are not part of the service until announced in the changelog.

Questions about these summaries: hello@stafio.link