Privacy Policy

Last updated October 25, 2026

This policy explains what the job application service at trystaff.ai, operated by Staff AI ("Staff", "we"), collects, how it is used, and the choices you have.

What we collect

• Your resume and profile: the file you upload and what we extract from it (name, contact details, location, work history, education, skills).
• Your answers: roles, location preferences, work authorization, minimum salary, years of experience, companies to skip, and answers to questions employers' forms ask.
• Application records: the jobs we applied to, the answers submitted, confirmation details and a screenshot of each form.
• Mail to your application address: messages employers send to the address we create for you, which we read to file confirmations and rejections, enter verification codes and forward what needs you. Replies you send through it are relayed to the employer.
• Sign in with Google: if you choose it, Google shares your name, email address, profile picture and Google account ID. See below.
• Payment: handled by Stripe. We receive the payment status and your email address, not your card number.
• Technical data: logs our hosting providers keep, such as IP address and browser type.

How we use it

• to build your profile, find matching jobs and fill out and submit applications you authorized;
• to ask you questions a form needs and reuse your answers on later forms;
• to show your dashboard, send login links, receipts and alerts;
• to process payments and refunds;
• to keep the Service working and secure.

We do not sell your personal information and do not use it for advertising.

Sign in with Google

When you sign in with Google, we ask only for your basic profile (the openid, email and profile scopes): your name, email address, profile picture and Google account ID. We keep your Google account ID and email address to sign you in and recognize your account next time; that email address is your account email, used as for any account. We use your name to fill in your account when you create it. We do not store your profile picture. We do not access your Gmail through sign-in alone, or your contacts, calendar or files. We do not keep a Google access token after sign-in, and we do not sell Google data or use it for advertising. To stop, remove Staff from your Google account's third-party connections and set a password from the sign-in page.

Optional Gmail connection

Connecting Gmail is separate from signing in with Google. With your consent, Staff requests read-only Gmail access to handle application verification and track employer replies. Staff does not request permission to send or delete Gmail messages. You send replies from your own inbox.

Staff reads message metadata to identify correspondence related to applications it has started, and retains relevant application messages, codes and reply drafts. Relevant employer messages may be processed by our AI provider to classify replies and draft answers. Gmail data is not used for advertising or to train general-purpose AI models. Staff's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Gmail in Settings or revoke access in your Google account. Disconnecting deletes saved mailbox credentials and holds applications using your personal address until you reconnect or choose the managed inbox. Imported application messages remain in your history until you delete your account. We encrypt refresh tokens on the server and never expose them to the browser.

Who receives it

• Employers you apply to, through their career sites and applicant tracking systems, receive your resume and answers for that application.
• Service providers that process data for us: Vercel (hosting), Neon (database), OpenAI (reading your resume, matching and sorting employer mail), Browserbase (the browsers that fill forms), Stripe (payments) and Resend (sending, receiving and forwarding email). They may use it only to provide their services to us.
• Authorities, when the law requires it.

How long we keep it

We keep your profile and application records while your account is active so you can see your history. Email us to delete your account and data; we delete it within 30 days, except records we must keep for payments, taxes or legal claims. Applications already submitted stay with the employers that received them, under their own policies.

Your choices and rights

• Correct your profile and answers from the onboarding pages and dashboard.
• Ask us to close your application address at any time.
• Ask for a copy of your data, its correction or its deletion by emailing us.

Depending on where you live, including California, you may have additional rights to know, delete and correct personal information and to not be discriminated against for using them. We honor these requests regardless of where you live.

Security

Data is encrypted in transit. Access to production systems is limited to people who need it. No system is perfectly secure; tell us right away if you believe your account was accessed without permission.

Children

The Service is for people 18 and older. We do not knowingly collect information from children.

Changes

We will post updates here and change the date at the top. Material changes will be emailed to active customers.

Contact

Staff AI · spencer@trystaff.ai

Terms · Privacy · trystaff.ai