Legal

Privacy Policy

Last updated: July 20, 2026

Introduction

Staffiva, LLC ("Staffiva," "Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website staffiva.com (our "Website") or use our AI-powered marketing and social-media management platform and related features made available through the Website (the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to information we collect:

On this Website.
In email, text, and other electronic messages between you and this Website.
Through your use of the Services, including information we retrieve from the third-party accounts, profiles, pages, stores, or properties that you connect to the Services ("Connected Accounts").
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Privacy Policy.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by the Company or any third party; or
Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. BY USING THE WEBSITE OR BY CLICKING TO ACCEPT OR AGREE TO THE PRIVACY POLICY WHEN THIS OPTION IS MADE AVAILABLE TO YOU, YOU ACCEPT AND AGREE TO BE BOUND AND ABIDE BY THIS PRIVACY POLICY, THE WEBSITE'S TERMS OF USE (AVAILABLE AT /terms), AND THE SOFTWARE AS A SERVICE AGREEMENT (AVAILABLE AT /saas-agreement) ("SAAS AGREEMENT") IF APPLICABLE, INCORPORATED HEREIN BY REFERENCE. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy frequently for updates.

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this Website. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at info@staffiva.com.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website and the Services, including information (collectively "personal information"):

By which you may be personally identified, such as name, postal address, email address, telephone number, or any other identifier by which you may be contacted online or offline;
That is about you but individually does not identify you, including, but not limited to, your login date and time and the time zone from which you access the Website; and/or
About your internet connection, the equipment you use to access our Website, and usage details.

More specifically, the categories of information we collect and process in connection with the Website and the Services include:

Account and business information. Information you provide when you register for an account and set up your organization, such as your name, email address, business name, business website, industry, and the account credentials you create.
Brand and marketing materials and audited website content. Brand assets, marketing materials, business facts, and the content of any website you submit for, or that we analyze in connection with, our free brand audit, which we use to learn your brand and generate marketing content.
Connected Account content and data. When you link a Connected Account (for example, X, LinkedIn, Facebook, Instagram, Threads, WordPress or WordPress.com, Shopify, or Google) so the Services can create, schedule, publish, message, or read data on your behalf, we access and process content, metrics, comments, messages, and follower and engagement data from that Connected Account, as authorized by you and by the applicable platform.
Access tokens for Connected Accounts. OAuth access and refresh tokens that authorize the Services to act on your Connected Accounts. These tokens are stored in encrypted form.
Payment information. Payment information you provide to purchase a subscription or credit pack is collected and processed by our payment processor, Stripe. Staffiva does not store full payment card numbers; we retain limited billing details (such as the last four digits, card brand, and billing metadata) needed to administer your account.
Content you submit and content the Services generate. The content, data, and information you or your authorized users submit to or make available through the Services ("Customer Content"), and the text, captions, social posts, articles, images, video, audio, replies, direct messages, and suggestions produced by the artificial-intelligence and machine-learning features of the Services ("Generated Content").
Usage, technical, and cookie data. Usage details, IP addresses, device and browser information, and information collected through cookies and similar technologies as described below.

We collect this information:

Directly from you when you provide it to us, including when you register, complete forms, submit a website for the brand audit, or communicate with us.
Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, a first-party analytics identifier, and other tracking technologies.
From the Connected Accounts and the Third-Party Platforms (the third-party social, publishing, commerce, analytics, payment, and artificial-intelligence services with which the Services integrate) you authorize, through their application programming interfaces, when you link them to the Services.
From third parties, for example, our business partners and the analytics and data providers described in this Privacy Policy.

When you provide personal data in connection with subscription or credit-pack billing, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy.

Information You Provide to Us

The information we collect on or through our Website and the Services may include:

Information that you provide by filling in forms on our Website or in the Services. This includes information provided at the time of registering to use our Website, setting up your organization, submitting a website for a brand audit, connecting a Connected Account, purchasing a subscription or credit pack, or requesting further services. We may also ask you for information when you report a problem with our Website.
Records and copies of your correspondence (including email addresses), if you contact us.
Brand materials, business facts, and other Customer Content you submit so the Services can generate and manage marketing content on your behalf.
Your responses to surveys that we might ask you to complete for research purposes.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website, including traffic data, logs, referral sources, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically is primarily statistical data and, except where it is associated with your account, does not by itself identify you; however, we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Measure how visitors move through our sign-up and onboarding funnel so we can improve it.
Store information about your preferences, allowing us to customize our Website according to your individual interests.
Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. For information about managing your privacy and security settings for cookies, see Choices About How We Use and Disclose Your Information.
First-party analytics cookie and identifier. We use a first-party analytics cookie (named `sfa`) together with a first-party local-storage identifier to measure our site funnel and attribute sign-ups. This identifier is set by us, is used only for our own first-party analytics and attribution, and is not used to serve you interest-based advertising.
Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain content and verifying system and server integrity).

We do not collect personal information automatically for the purpose of serving you third-party interest-based advertising, but we may tie non-personal information collected automatically to personal information about you that we collect from other sources or that you provide to us.

How We Use Your Information

Except to the extent limited by the SaaS Agreement, we use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide, operate, maintain, and improve the Services, including generating marketing content and operating the Services' AI agents (marketed as Scribe, Scout, and Herald) on your behalf.
To generate and analyze content using third-party AI and data providers. Operating the Services requires us to transmit Customer Content, prompts, and related data to third-party artificial-intelligence providers (OpenAI, Google, and xAI) and to a third-party SEO and analytics data provider (DataForSEO), which process that data on our behalf to generate, evaluate, and analyze content and to produce marketing insights. These providers process data under their own terms.
To publish, schedule, cross-post, and manage content, and to draft and (where you enable it) send replies, comments, and direct messages, through the Connected Accounts you authorize; and to retrieve metrics and engagement data from those Connected Accounts to provide analytics and reporting.
To provide you with information, products, or services that you request from us.
To provide you with notices about your account, including expiration, renewal, billing, and dunning notices.
To process subscription and credit-pack payments through Stripe, and to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Website or any products or services we offer or provide through it.
To allow you to participate in interactive features of the Services.
In any other way we may describe when you provide the information.
To fulfill any other purpose for which you provide it, and for any other purpose with your consent.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Except to the extent limited by the SaaS Agreement, we may disclose personal information that we collect or you provide as described in this Privacy Policy:

To our subsidiaries and affiliates.
To contractors, service providers, sub-processors, and other third parties we use to support our business and to provide the Services, who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them (see Service Providers and Sub-processors below).
To the Connected Accounts and Third-Party Platforms you authorize, in order to publish, schedule, message, or read data on your behalf as you direct.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Staffiva, LLC's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Staffiva, LLC about our Website users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our Terms of Use (available at /terms), SaaS Agreement (available at /saas-agreement) (if applicable), and other agreements.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Staffiva, LLC, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Service Providers and Sub-processors

We rely on a limited set of third-party service providers and sub-processors to operate the Services. These providers process personal information and Customer Content on our behalf to deliver specific functions, under contractual confidentiality and data-protection obligations and their own privacy terms:

Stripe — subscription and credit-pack payment processing.
OpenAI, Google, and xAI — artificial-intelligence generation and evaluation of content (text, images, video, audio, and related outputs).
DataForSEO — SEO, ranking, backlink, and AI-answer-visibility data used to produce marketing insights and analytics.
Amazon Web Services (AWS) — cloud hosting, storage, and email delivery infrastructure.
The Connected-Account platforms you link (for example, X, LinkedIn, Facebook, Instagram, Threads, WordPress and WordPress.com/Automattic, Shopify, and Google) — to which we transmit and from which we retrieve data at your direction so the Services can act on your behalf. Your use of each such platform through the Services is also governed by that platform's own terms and privacy policy.

Google API Services User Data Policy — Limited Use Disclosure

Staffiva's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Consistent with those requirements, information we receive from Google APIs (for example, when you connect Google Search Console or otherwise authorize Google access) is used only to provide and improve the connected features you have enabled, is not sold, is not used or transferred for advertising purposes, and is not transferred to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users. We do not use Google user data to train generalized artificial-intelligence or machine-learning models.

Meta Data Deletion, Deauthorization, and Disconnecting a Connected Account

When you connect a Meta platform (Facebook, Instagram, or Threads) as a Connected Account, we access only the data you authorize through Meta's permission flow — such as your connected Pages or profiles, the content and metrics for content published through the Services, and the comments, mentions, and messages you direct Herald to help manage — and we use that data solely to provide the Services you have enabled.

You may disconnect any Connected Account, including any Meta account, at any time from within the Services, which revokes the Services' access and deletes the associated stored access tokens. Removing the Staffiva application from your Meta account settings (deauthorizing the app) will also signal us to delete the data associated with that connection; we maintain data-deletion and deauthorization callbacks for this purpose.

To request deletion of your personal information or of data associated with a Connected Account, you may disconnect the account as described above and/or email us at info@staffiva.com. We will process verified deletion requests as described in Retention and Deletion of Your Information and in the SaaS Agreement.

Retention and Deletion of Your Information

We retain personal information and Customer Content for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

Access tokens and the content and data we retrieve from a Connected Account are retained while that Connected Account remains connected and are deleted when you disconnect the Connected Account or close your account, in each case as further described in the SaaS Agreement. When you close your account, we delete or de-identify personal information associated with your account within a commercially reasonable period, except where retention is required by law or for legitimate business purposes such as billing records, fraud prevention, and dispute resolution.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Connected Accounts. You control which third-party accounts you link to the Services and may disconnect any Connected Account at any time from within the Services, which revokes the Services' access and deletes the associated stored access tokens.
Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
Interest-based advertising. We do not use the information we collect to serve you interest-based advertising. We do not control third parties' collection or use of your information to serve interest-based advertising on other sites; however, those third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Accessing and Correcting Your Information

You may send us an email at info@staffiva.com to request access to, correct, or delete any personal information that you have provided to us. We will honor verified requests to delete your personal information to the extent required by applicable law, subject to the retention exceptions described in Retention and Deletion of Your Information and to other exceptions permitted by law, regardless of whether you close your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. The exact scope of these rights may vary by state. To exercise any of these rights, please contact us by email directed to info@staffiva.com or by mail to the address listed below.

Delaware provides its state residents, not acting within a commercial or employment context, with certain rights regarding our use of their personal information, and other states, including California, Colorado, Connecticut, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, and Washington, have provided similar rights, including the right to:

Know whether we are processing their personal information;
Access or request deletion of their personal information;
Correct inaccuracies in their personal information, considering the nature of the personal information and the processing purposes;
Obtain a copy of their personal information in a portable and readily usable format;
Obtain a list of the categories of third parties to which the controller has disclosed their personal information; and/or
Opt out of personal information processing, including through the use of universal opt-out mechanisms, for purposes of:

a. targeted advertising;

b. personal information sales; or

c. profiling to support automated decisions that produce legal or similarly significant effects for the consumer.

For Delaware residents, personal information does not include de-identified data and publicly available information. We respond to your requests to exercise your rights within forty-five (45) days of receipt, which may be extended once for an additional forty-five (45) days if we provide you with a reason for the extension within the initial forty-five (45) day period.

The exact scope of these rights may vary by state. To exercise any of these rights, please submit requests to info@staffiva.com. To appeal a decision regarding a consumer rights request, please notify us at info@staffiva.com.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Among other measures, the OAuth access tokens for your Connected Accounts are stored in encrypted form, and payment card details are handled by our payment processor rather than stored on our systems. All information you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website or the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users' personal information, we will notify you by email to the email address specified in your account and/or through a notice on the Website home page. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.

Entire Agreement

The Terms of Use (available at /terms), this Privacy Policy, and our Software as a Service Agreement (available at /saas-agreement) constitute the sole and entire agreement between you and Staffiva, LLC regarding the Website and supersede all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral, regarding the Website.

Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at info@staffiva.com or at the following mailing address:

Staffiva, LLC

131 Continental Drive, Suite 305

Newark, Delaware 19713