Privacy Policy

Staff Party AI, LLC · Version 2026-10-22 · Effective 2026-10-22 · Contact: support@mail.staffparty.app

1. Who this policy covers
2. What we collect
3. How we use it
4. Who we share it with
5. Your customers' and prospects' data
6. AI processing
7. Connected social accounts
8. Cookies
9. Retention
10. Your rights
11. Security
12. Children
13. International transfers
14. Your choices about email
15. Other sites and services
16. Changes to this policy
17. Contact

1. Who this policy covers

This policy explains how Staff Party AI, LLC ("StaffParty", "we") handles personal data about the people who create accounts and operate businesses on the platform ("you"). For the customers of a business hosted on the platform, that business is the controller of their data and we act as its processor; see section 5 and the privacy notice on that business's own site.

2. What we collect

• Account data: name, email address, password hash, and the record of your acceptance of our terms.
• Business data: everything you and the AI workers create for Your Business — its site, content, products, settings, and the leads, contacts and customers it gathers.
• Payment data: your plan, wallet balance and transaction history with us. Card details are collected by Stripe, not by us; we hold a reference to your Stripe customer and, if you connect one, your connected account's identifier and verification status. We never see the identity documents Stripe collects.
• Usage and technical data, collected automatically: sign-ins, actions in the product, IP address and the approximate location it implies, device and browser type, log data, error reports, and whether you opened or clicked an email we sent, used to run, secure and improve the service.
• Communications: email we send you and your replies.
• Connected services: if you connect a third-party account (Stripe, Google Search Console, GitHub, or the social networks in section 7), the authorisation tokens and the data that service returns for Your Business, used only for the feature you connected.
• Data the AI workers gather for Your Business: information from public sources, search and the providers in section 4, collected on your instructions to do the work you asked for — including, where Your Business uses the sales Products, the names, roles and business contact details of prospects. That data belongs to Your Business (section 5).

3. How we use it

To provide and operate the service; to run the AI workers for Your Business; to bill you; to send you product, billing and security notices; to prevent fraud and abuse; to comply with the law; and, with your permission where required, to tell you about the platform. We do not sell personal data.

4. Who we share it with

Providers who process data for us under contract, each for the purpose named: Stripe (payments, identity verification of connected accounts, payouts); Twilio SendGrid (email we and Your Business send, and the support mail you send us); Amazon Web Services (hosting and storage, United States); Anthropic and OpenAI (the AI models behind the AI workers, section 6); Twilio (text messages, where Your Business uses them); Sentry (error reporting); and, for businesses that use the Products concerned, Salesforge and Mailforge (outbound email), Hunter (contact enrichment), fal.ai (generated video, and AI photos for social posts), Google (Search Console data you authorise), and the social networks you connect, which receive the posts you approve (section 7). We update this list when a provider changes. We may also share data where the law requires, to protect rights and safety, or in a merger or acquisition with notice to you; with our professional advisers under confidentiality; and with other businesses on the platform only as far as a purchase between Your Business and theirs requires. What you publish is public: your hosted site, its content and your business's name are visible to anyone.

5. Your customers' and prospects' data

When Your Business's customers sign up, buy, or write in — and when the AI workers gather the business contact details of prospects for Your Business's sales outreach — that data is collected on your behalf and belongs to Your Business. You are its controller and you are responsible for having a lawful basis to hold it and to contact those people; the Acceptable Use Policy says what you may not do with it. We store and process it to run your site, your emails, and your payments, and we act on your instructions in the product. We do not use it for our own marketing. Each hosted site carries a privacy notice naming Your Business as the operator and us as host and processor; replace it with your own if you prefer.

6. AI processing

The AI workers are powered by third-party language models. Content you provide and content about Your Business may be sent to those providers to perform the work you asked for. Under their commercial terms, our model providers do not use data sent through their APIs to train their models, and they retain it only briefly for abuse monitoring. When you ask for an AI-generated photo for a social post, a short description drawn from the post is sent to our image-generation provider (fal.ai) to make it.

7. Connected social accounts

When you connect a social media account (Facebook, Instagram, TikTok, Pinterest, LinkedIn, X or Reddit), we store the access token that platform issues, the account, page or board name, and the IDs of the posts we publish for you, so that we can publish the posts you approve and show you their engagement. We do not read your private messages, your followers' data or other content. The token is held in our secrets store, never in your business's application. You can disconnect an account at any time on the Social page, which deletes the stored token immediately. You can also revoke access from the platform's own settings. How to have this data deleted is set out on our data deletion page.

8. Cookies and browser signals

We use strictly necessary cookies to keep you signed in and to protect forms, and a first-party cookie that remembers how you first arrived (a referral or an invitation) so the right person is credited. Hosted business sites may set cookies for the same purposes and, where the business enables it, measurement cookies described in that site's notice. We do not use third-party advertising cookies. We do not sell or share personal information, so a browser "Do Not Track" or Global Privacy Control signal changes nothing; we treat a Global Privacy Control signal as an opt-out request where the law gives it that effect.

9. Retention

We keep account and business data while your account is open and for thirty days afterwards so you can export it, then delete it except what we must keep to meet legal obligations, complete payments and payouts, and resolve disputes. Transaction records are kept as long as tax and financial regulation require. Operational logs are kept for a limited period.

10. Your rights

Depending on where you live you may have rights to access, correct, delete, export, or restrict the use of your data, and to object or withdraw consent. Write to support@mail.staffparty.app; we will respond within the time the law allows, and we will not treat you differently for exercising a right.

If you are in the European Economic Area, the United Kingdom or Switzerland: we process your data to perform our contract with you (your account and Your Business), for our legitimate interests (running, securing and improving the service), to meet legal obligations, and, for marketing, with your consent, which you can withdraw at any time. You also have the right to lodge a complaint with your local data protection authority. We have not appointed a data protection officer or an EU/UK representative; write to the address above.

If you are a California resident: you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we do not use sensitive personal information to infer characteristics about you. An authorised agent may make a request on your behalf; we will verify it through your account.

11. Security

We protect data with access controls, encryption in transit, and monitoring, and we limit who inside the platform can read secrets. No system is perfectly secure; tell us at once if you suspect a problem.

12. Children

The service is for adults. We do not knowingly collect data from anyone under 18 as an account holder.

13. International transfers

We operate from the United States and our providers may process data there and elsewhere. Where the law requires, transfers out of the EEA, the United Kingdom or Switzerland are made under the European Commission's Standard Contractual Clauses (and the UK Addendum), or another mechanism the law recognises at the time.

14. Your choices about email

Every marketing or recap email we send has an unsubscribe link and a preferences page, and you can turn categories off in your account. Account, billing and security notices cannot be turned off while you have an account, because they are part of running it.

15. Other sites and services

The platform links to, and the AI workers act on, services we do not control — Stripe, Google, GitHub, the providers in section 4 and the sites your business links to. Their privacy practices are their own; read their notices.

16. Changes to this policy

We may change this policy. The version and effective date are at the top of this page and every change is listed at the bottom. For a material change we will tell you by email or in the product before it takes effect.

17. Contact

Staff Party AI, LLC · support@mail.staffparty.app

Changes to this document

• 2026-10-22 — Money you add to the wallet by card is for spending: it can be spent on the platform or paid to other businesses, is spent before your earnings, and is refundable to the card, but cannot be withdrawn. What can be withdrawn is your business's earnings — the reinvested share of its sales, its customers' payments through the platform, and money other businesses pay it out of their own withdrawable money. Money added before this date keeps the withdrawability it had; unspent card money is refunded to the card on request after closure.
• 2026-10-21 — Third revision that day. Our fee on payments to your business is 0% (Stripe's own fee is unchanged); paying your sellers is removed, because StaffParty no longer holds or pays a seller's share; a reinvested share comes back on a refund to the extent the wallet still holds it; we may hold a wallet withdrawal for review (payouts from your Stripe account are Stripe's); and withdrawable money stays yours after closure, by request to support.
• 2026-10-21 — Later the same day, Taking money from your customers (platform terms §5) rewritten again: the business's Stripe account is a full Stripe account between it and Stripe (the Stripe Services Agreement), which carries its refunds, chargebacks and negative balances; StaffParty is no longer its payment collection agent; our 3% fee no longer pays Stripe's processing fee, which Stripe charges the account separately; payouts are Stripe's, on its own schedule, with no 31-day hold; Stripe issues the 1099-K forms; and a seller's share is at most 90%. The storefront terms no longer name a collection agent.
• 2026-10-21 — Taking money from your customers (platform terms §5) rewritten for the accounts every business now gets: StaffParty creates the Stripe account at founding and is the business's payment collection agent (the business stays merchant of record); our fee is 3% of each payment and pays Stripe's processing fee; each payment is held 31 days before payout and payouts are the owner's; refunds and chargebacks come out of the business's Stripe balance, with the owner responsible for any shortfall; sending sales to the wallet is the owner's choice; and 1099-K forms. The storefront terms say a customer's payment to the collection agent pays the business. Also: paying your sellers — a product's seller's share is received as our fee, held 30 days and paid to the seller on the business's behalf, and returned on a refund or chargeback. Written to match a comparable platform's terms; not yet reviewed by counsel.
• 2026-10-04 — Final version: the party is named as Staff Party AI, LLC, the contact is the platform's support mailbox, and every open point (governing law, liability cap, privacy rights, transfers, sub-processors) is settled in the text. Added the Acceptable Use Policy, a copyright-complaints procedure, export controls, what happens at termination, beta features and the general provisions; the privacy policy now covers prospects' data gathered for a business, automatic collection, public content, marketing choices and browser privacy signals, and connected social media accounts (what is stored, and how disconnecting deletes it), with a data-deletion page (/data-deletion).
• 2026-10-03 — First platform terms and privacy policy, and the storefront defaults. Drafts pending legal review.