Privacy

Staffena holds employee records on behalf of the company that put them there. That company decides who inside it can see what; we provide the rules and enforce them, and we do not use anybody's data for anything other than running the service for them.

What we hold

• About your people: the records your company enters — names, work contact details, job and department, start and leaving dates, leave requests and decisions, work log entries, and whatever custom fields you define.
• About your account: the email address you sign in with, and when you last signed in.
• About the company: your plan, what you were charged and the record of our agreement.
• About what happened: an audit trail of who changed what, which is a feature rather than a by-product — leave decisions in particular cannot be rewritten.

Who can see it

Access is decided in the database, not in the screens. An employee sees their own record; a manager sees their reports; a department administrator sees their departments; HR and the owner see the company. One company can never see another's data — the separation is structural, not a filter somebody has to remember to apply.

Our own staff have no standing access to your data. Support access means explicitly entering your company with a reason, and that is written to your audit trail as well as ours, so you can see when we looked and why.

Where it lives

Your data is stored in a managed Postgres database with encryption at rest and in transit. We will name the region and our processors here before we take payment; if that matters to you now, ask us and we will tell you plainly.

Your rights

The company holding the records is the controller and we are its processor, so requests from an employee normally go to their own HR team. We will help with an export or a deletion whenever we are asked by the company, and we will not stand in the way of anybody's rights over their own data.

The detail

How the product is built and what we have not certified is on the security page, and everybody who processes data on our behalf is listed on the sub-processors page. A data processing agreement and the record of processing are available on request.