Privacy Policy

1. Introduction

mystaff is owned and operated by Burrak AI, LLC, a limited liability company registered in the United States ("Burrak AI, LLC", "we", "us", or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use our platform, websites, APIs, and related services (the "Services"). It also describes the choices you have regarding your information.

By using the Services, you agree to the practices described in this policy. If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws, please also see our GDPR page for additional rights.

2. Information we collect

Information you provide

• Account details such as your name, email address, and organization.
• Billing information processed through our payment providers.
• Customer Content, including prompts, instructions, files, and data you submit to agents.
• Voice input, if you use voice dictation — audio is processed to produce a transcription and is not stored by us after transcription.
• Communications you send to us, such as support requests and feedback.
• Your email address, if you subscribe to our newsletter. You do not need an account to subscribe, and we keep newsletter subscriptions for mystaff separate from those for our other products.

Information collected automatically

• Usage data, such as features used, agent runs, and API calls.
• Device and log data, such as IP address, browser type, and timestamps.
• Push notification tokens, if you install our mobile or desktop apps and enable notifications, used solely to deliver notifications to your device.
• Cookies and similar technologies, as described in our Cookie Policy.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services.
• Process transactions and manage your account and subscription.
• Run, monitor, and secure the autonomous agents you configure.
• Respond to your requests and provide customer support.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our agreements.
• Send you newsletters and product updates, where you have asked to receive them.

4. Legal bases for processing

Where required by law, we process personal information on the basis of: performance of a contract with you; your consent; our legitimate interests in operating and improving the Services; and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share information only as needed to operate the Services, including with:

• Service providers and subprocessors that host infrastructure, process payments, or provide analytics under contract.
• Third-party tools and platforms you choose to connect to your agents.
• Authorities or other parties when required by law or to protect rights, safety, and security.
• A successor entity in connection with a merger, acquisition, or sale of assets.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

7. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

We may process and store information in countries other than where you live. Where we transfer personal information internationally, we use appropriate safeguards such as standard contractual clauses to protect your information.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us. You may also update your account information directly within the Services. To delete your account and associated data, see mystaff.live/account/delete.

10. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by other reasonable means. The "Last updated" date above indicates when this policy was last revised.

12. Marketing communications

If you subscribe to our newsletter, we use the email address you give us to send product updates, announcements, and related material about mystaff. We rely on your consent for this, and you can withdraw it at any time — every marketing email contains an unsubscribe link, and unsubscribing takes effect without you needing to contact us or sign in.

We do not sell or rent our mailing list, and we do not use it to send you anything unrelated to mystaff. Subscribing does not create an account, and unsubscribing from marketing email does not stop service messages about an account you hold, such as billing notices or security alerts.

We keep your address on the list until you unsubscribe. When you unsubscribe we retain a record of that choice so we can honour it, rather than deleting the address and risking adding it again later. You can ask us to erase it entirely by contacting privacy@mystaff.live.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@mystaff.live.