Data Processing Addendum

Roles

You are the controller of the personal data in your workspace (for example contacts in your inbox or customer lists you upload). Staffie is the processor and processes it only on your documented instructions, which are your use of the service and its settings.

Our commitments

• Process personal data only to provide the service.
• Make sure people who process it are bound by confidentiality.
• Apply appropriate technical and organisational security measures (see the Security page).
• Help you respond to data subject requests and, where relevant, with data protection impact assessments.
• Tell you without undue delay after becoming aware of a personal data breach affecting your data.
• Delete or return your data at the end of the service, unless the law requires us to keep it.

Sub-processors

You authorise our use of sub-processors for hosting, network delivery, AI model processing (Anthropic), payments and email delivery. We impose data protection obligations on them that are no less protective than this addendum. The current list is available on request from [email protected], and we will tell you before adding a new one.

International transfers

Where personal data is transferred across borders, we rely on appropriate safeguards, such as standard contractual clauses where they apply.

Audits

On reasonable request we will provide information needed to show compliance with this addendum.

Signed copy

For a countersigned copy of this addendum, email [email protected].