Privacy Policy

This Privacy Policy explains how StaffEng (“StaffEng”, “we”, “us”) collects, uses, and shares personal information when you use staffeng.co (the “Service”). We are based in Newfoundland and Labrador, Canada, and handle personal information in line with Canada's PIPEDA and, where applicable, the EU/UK GDPR.

1. Information we collect

• Account information: your name, email address, and password (stored in hashed form), or the details from your Google account if you sign in with Google.
• Profile information (engineers): your headline, location, experience, education, skills, achievements, work preferences, contact details you choose to add, and any resume you upload.
• Company information (employers): your company name, details, and the job listings you post.
• Messages and contact requests you send or receive through the Service.
• Usage and technical data: basic information your browser sends automatically, such as device and log data, used to operate and secure the Service.

2. How we use your information

• To create and operate your account;
• To display engineer profiles to employers according to the visibility settings the engineer chooses;
• To enable contact requests, messaging, and job applications;
• To secure the Service and prevent abuse;
• To communicate with you about the Service;
• To comply with legal obligations.

3. Legal bases (GDPR)

Where the GDPR applies, we process personal information on the basis of: performance of a contract (to provide the Service); your consent (for example, choosing to make your profile visible); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. You may withdraw consent at any time by changing your settings or deleting your account.

4. How we share information

We do not sell your personal information. We share it only:

• With other usersas needed for the Service — for example, an engineer's visible profile is shown to employers, and messages are shared with their recipient.
• With service providers who host and power the Service on our behalf, including Supabase (database, auth, and file storage), Vercel (hosting), and Google (sign-in). These providers process data under their own security and privacy terms.
• When required by law or to protect the rights, safety, and security of StaffEng and its users.

5. International transfers

Our service providers may store and process data on servers located outside your country, including in the United States. Where required, we rely on appropriate safeguards for such transfers.

6. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information, except where we must retain certain data to comply with legal obligations or resolve disputes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most of your information directly in your profile, and you can permanently delete your account and associated data at any time from your account settings. To make any other request, contact us at the address below.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

StaffEng is not intended for anyone under 18, and we do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, where appropriate, notify you of material changes.

11. Contact

For privacy questions or requests, contact us at privacy@staffeng.co.