Privacy Policy

Scope and roles

This policy applies to StaffRooster websites, forms, dashboard, support, and related services. Pro Boost Local LLC is the controller of account, website, sales, and support data. For personal data a business customer submits for its own workflows, the customer is generally the controller and Pro Boost Local LLC acts as its processor or service provider.

Information we collect

• Account and contact: name, business email, company, account identifiers, role, and authentication data supplied by the platform.
• Customer content: agent instructions, workflow inputs, leads, messages, knowledge materials, approvals, and output.
• Commercial and support: plan selections, transaction records, inquiries, application answers, and support correspondence.
• Technical and activity: device/browser data, IP-derived security information, timestamps, audit events, feature use, and diagnostic logs.
• Connections: integration identifiers and configuration if a customer authorizes an external service. A connection request alone does not grant access.

Purposes and legal bases

We use data to provide and secure StaffRooster; authenticate users; execute configured workflows; prevent abuse; provide support; evaluate applications; bill customers; improve reliability; communicate about the service; and meet legal obligations. Where applicable, the basis is performance of a contract, legitimate interests in operating and securing the service, consent, or legal obligation.

AI processing

Customer inputs may be processed by AI services to generate requested output. Agents are draft-only by default, require human configuration before activation, and must not make solely automated decisions with legal or similarly significant effects. Customers must review output and avoid submitting data they are not authorized to process.

Disclosure

We disclose data to infrastructure, AI, security, support, and payment providers only as needed to operate StaffRooster; to professional advisers under confidentiality; in a corporate transaction; or when legally required. See Subprocessors. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by California law.

Retention

We retain account and customer content while an account is active and for a reasonable period afterward for retrieval, security, dispute resolution, backup rotation, and legal obligations. Contact and sales records are retained while relevant to the relationship; security logs are retained for a limited risk-based period; financial records may be retained as required by tax and accounting law. We delete or de-identify data when no longer reasonably necessary.

International transfers

StaffRooster is operated from the United States. If protected data is transferred from the EEA, UK, or Switzerland, the parties must put an approved transfer mechanism in place where required, such as applicable standard contractual clauses. The public DPA is not itself an executed transfer instrument.

Your rights

Depending on location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of sale/share, targeted advertising, profiling, or certain automated decisions; and appeal a denied request. Submit a request through Privacy Choices. You may complain to your local regulator. We will not discriminate against you for exercising a right.

Security, children, and changes

We use reasonable safeguards described in our Security Overview, but no system is perfectly secure. StaffRooster is not directed to children; see our Children’s Privacy Notice. We will post material changes here and provide additional notice when required.