Privacy Policy

Last updated: February 2026

This Privacy Policy describes how Staff Hub ("we", "us", or "our") collects, uses, and shares information about you when you use our services (the "Service"). The Service is available both as a Shopify embedded application and as a standalone web platform at app.staffhubapp.com.

1. Information We Collect

Information from Shopify

When you install Staff Hub as a Shopify app, we receive the following information from Shopify:

  • Store name and domain
  • Store owner email address
  • Store timezone and currency settings
  • Staff member information (names, email addresses) as authorized by the store owner

Information from Web Platform Registration

When you create an account on our web platform, we collect:

  • Registration data: email address, name, and password (stored securely using one-way hashing)
  • Organization name and settings
  • Payment data: processed securely through Stripe, our payment processor. We do not store credit card numbers on our servers.

Information You Provide

We collect information you voluntarily provide, including:

  • Training content and materials you create
  • Announcements and communications
  • Tips and best practices shared by staff
  • Profile information and preferences
  • Support inquiries and feedback

Automatically Collected Information

We automatically collect certain information when you use the Service:

  • Usage data (features accessed, time spent, actions taken)
  • Device information (browser type, operating system)
  • IP address and general location
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage your account
  • Send administrative notifications and updates
  • Respond to support requests and inquiries
  • Analyze usage patterns to enhance user experience
  • Detect, prevent, and address technical issues or fraud
  • Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: With third-party vendors who assist in operating our Service (hosting, analytics, customer support)
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law, subpoena, or government request
  • Protection: To protect our rights, privacy, safety, or property

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you uninstall the Shopify app or cancel your web platform account, we will delete or anonymize your data within 30 days, unless we are required to retain it for legal purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Regular security assessments and updates
  • Access controls and authentication

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing activities

To exercise these rights, contact us at [email protected].

7. GDPR Compliance (EEA Users)

For users in the European Economic Area, we process personal data based on:

  • Contract performance (providing the Service)
  • Legitimate interests (improving our Service, security)
  • Legal obligations
  • Your consent (where applicable)

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email.

11. Contact Us

If you have questions about this Privacy Policy, please contact us: