PRIVATE PILOT · VERSION PILOT-V1
Privacy notice
RoboStaffer handles company context, job responsibilities, staffing and compensation assumptions, plan revisions, permissions and reports to help invited users develop staffing proposals. Avoid unnecessary personal, confidential or sensitive detail.
Where information goes
The connected application uses Vercel for hosting and Supabase for authentication and database storage. Google sign-in establishes your account identity; RoboStaffer does not request Gmail or Drive access. When you request AI assistance, relevant plan inputs pass through Vercel AI Gateway to the selected inference provider: Baseten for GPT-OSS, OpenAI for GPT-6 Sol, or Anthropic for Claude. The model and processing provider are shown before generation. Open weights do not mean the model runs locally; Baseten receives the relevant inputs for GPT-OSS.
Company-page research fetches the public URL you supply. It does not send private plan contents to that website. The sample workspace is separate: synthetic data stays in that browser and makes no AI calls.
Access and retention
Company membership and explicit plan/report grants control app access. Infrastructure operators have separate operational responsibilities. Raw prompts and plan content are excluded from operational logging by default; saved proposals remain part of the plan history.
Company plan data is retained while the company is active, then deleted 90 days after offboarding or earlier following an authorized request. AI operational metadata is retained for 12 months. Authorized deletion requests cover relevant stored content and identifying metadata.
Backups expire according to the configured retention schedule and may temporarily retain deleted records. Deletions are reapplied before restored data is made accessible. The operator must confirm the actual backup and provider retention settings before client onboarding; this notice makes no zero-retention, training-use or universal data-residency promise.
Help, export and deletion
Contact your consulting engagement owner; the dedicated support address will be configured before client onboarding. Requests are handled manually after checking authority for shared company information. Revocation prevents future app access, but previously downloaded copies cannot be recalled.