Skip to content
Staff Stack

Privacy Policy

Effective date: September 25, 2026

This Privacy Policy explains how Staff Stack collects, uses, shares and protects personal information. Staff Stack is a service of Kaizen Brands LLC, a limited liability company organised in Wyoming, United States, doing business as Staff Stack. Kaizen Brands LLC is the controller of the personal information described here.

Send privacy requests through our contact form. We do not publish a phone number or street address.

1. Personal information we collect

Agency buyers (prospective and current clients)

  • Contact and enquiry data: what you submit through our contact, lead and intake forms — typically your name, work email, company name and what you tell us about the roles you need.
  • Account data: the email address and basic profile tied to your portal account, and the messages and approvals you send through the portal.
  • Payment metadata: what Stripe reports back to us about your payments, such as amount, status, card brand and last four digits. Payments are processed by Stripe; we never see or store your full card number.

Candidates and operators

  • Applications and profiles: the resume, work history and role preferences you give us when you apply, plus contact details and links you include.
  • Assessments and scores: your submissions to our practical tests and AI-workflow exercises, and the scores and notes our assessors record.
  • Scorecards: summaries of the above shared with prospective clients during matching, so they can decide who to interview.

Automatic data

  • Vercel logs requests to the website (URLs, IPs, timestamps) to serve and protect the site.
  • Sentry captures errors and performance traces, which can include request data.
  • PostHog measures product and page usage. It is configured cookieless — events are held in memory rather than in cookies — and session recording is off.
  • Google Analytics (loaded through Google Tag Manager) does set cookies on staffstack.co. These cookies let Google and us measure visits, traffic sources and page performance, and Google may use them to recognise your browser across sites. To block it, you can use your browser's Do Not Track or cookie-blocking settings, an ad-blocker, or Google's own opt-out tools; Google Analytics loads only on our production site, so visiting a preview environment, or blocking third-party scripts, prevents it entirely.

2. How we use information, and why

  • To run our service — respond to enquiries, run intake, match candidates to roles, share scorecards, manage payments: performance of a contract, or steps before one.
  • To operate the website — logs, error tracking and analytics: our legitimate interest in a working, secure site.
  • To communicate — reply to you, send transactional email about your enquiry, shortlist or engagement: performance of a contract or legitimate interest.
  • To comply with law — tax, accounting and legal obligations: legal obligation.
  • To improve — aggregate, de-identified usage patterns: legitimate interest.

3. Processors we share information with

We use these providers to operate the service. They process personal information on our instructions:

  • Vercel — website hosting and logs.
  • Convex — application database.
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Sentry — error and performance monitoring.
  • PostHog — product analytics (cookieless).
  • Google — Google Tag Manager and Google Analytics.

We also share candidate scorecards with prospective clients during matching, and may disclose information where the law requires it or to protect our rights. We do not sell personal information.

4. International transfers

Our infrastructure runs primarily in the United States, and our operations include people in the Philippines, so personal information may be transferred to and processed in the US and the Philippines. Where your local law applies, we rely on appropriate safeguards for such transfers and handle information as described in this policy regardless of where it is processed.

5. Retention

  • Buyer records: kept while you are engaged with us, plus 3 years afterwards, then deleted or anonymised (except records we must keep for tax or legal reasons).
  • Candidate records: kept for 2 years after your last activity with us, unless you are placed with a client, in which case we keep the record while the placement is active and as needed afterwards.

6. Your rights

You can ask us to give you access to your personal information, correct it, delete it, or object to our processing of it. We honour these requests under the Philippine Data Privacy Act (RA 10173), the EU and UK General Data Protection Regulation, and the Australian Privacy Act, as applicable to you. Use our contact form; we answer within 30 days. We may ask you to verify your identity before we act.

7. Children

Our services are for businesses and working professionals. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, use our contact form and we will delete it.

8. Changes

We may update this policy. We post the new version on this page with a new effective date, shown at the top.

9. Contact

Questions or requests about privacy: contact form. See also our Terms of Service and Refund Policy.

Candidate privacy notice

If you apply to Staff Stack: we collect your application, profile and assessment results to assess and match you to roles. We share your scorecard with prospective clients during matching — by applying you agree to this. We keep candidate records for 2 years after your last activity unless you are placed. To access, correct or delete your information, or to withdraw your application, use our contact form; we answer within 30 days. We never charge candidates fees, and we do not sell your information.