Privacy policy

Last updated: 11 November 2026

This policy explains how Staffio Outsourcing ("Staffio", "we", "us") handles personal data in Staffio Connect, our customer service platform, and on this website (staffioapp.com). If you have any questions, email [email protected].

1. Who we are

Staffio Outsourcing is a customer service company based in Bethlehem, Palestine. We provide Staffio Connect to businesses ("clients") that use it to talk to their own customers by phone and by message.

2. Our role

For client data. When a business uses Staffio Connect, the messages, calls and contact details of its customers belong to that business. The business decides what to collect and why; we process that data only on its behalf and on its instructions, to provide the service.
For our own data. For the details of our clients' staff (for example names and login emails) and for people who contact us, we decide how the data is used.

If you are a customer of a business that uses Staffio Connect and want to see or delete your data, you can contact that business directly, or write to us and we will pass your request on.

3. What data we process

Data from connected channels

A client's owner or administrator connects the client's own accounts by signing in to them and approving access. Depending on what is connected, Staffio Connect receives:

WhatsApp Business, Facebook Messenger and Instagram (Meta): messages sent to and from the client's business accounts, Instagram comments on the client's posts, the sender's name, profile name or phone number, and leads submitted through the client's Facebook or Instagram lead forms.
TikTok (when available): direct messages sent to and from the client's TikTok business account, comments on its posts, and the public profile name of the people who write to it.
Google Business Profile: reviews of the client's business locations and the client's replies to them.
Email (Microsoft 365, Outlook or IMAP): emails in the mailbox the client connects, and replies sent from it.
Telegram and website chat: messages sent to the client's Telegram bot or website chat window, with the name the person gives.
Phone calls: phone numbers, call times and durations and, if the client turns it on, call recordings. Calls go through the client's own phone provider.

Data created in Staffio Connect

Notes, tags, tickets, quality scores, customer ratings and reports created by the client's team, and the names, login emails and activity of the client's agents.

This website

This website does not use cookies, analytics or advertising trackers. Our hosting provider (Cloudflare) keeps standard technical logs, such as IP addresses, to deliver and protect the site. If you email us, we keep your message to reply to you.

4. How we use data

We use data only to:

show messages, calls and reviews to the client's team and send their replies;
provide features the client turns on, such as call lists, tickets, quality scoring, reports and AI-suggested replies;
keep the service secure and working, and provide support when the client asks for it;
bill our clients and meet our legal obligations.

We do not sell personal data, use it for advertising, build profiles of people, share it with other clients, or use it to train AI models.

5. Data from Meta, TikTok, Google and Microsoft

We use data received through the Meta (WhatsApp, Messenger, Instagram), TikTok, Google and Microsoft platforms only to provide the features the client has connected, as described above, and in line with each platform's terms and developer policies. Access tokens are stored on Staffio's servers and are used only to read and send messages, comments, reviews or emails for the account that granted them. The client can remove access at any time in Staffio Connect or in the platform's own settings.

Staffio Connect's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. AI features

If a client turns on AI features, parts of a conversation may be sent to an AI provider to create a suggested reply or summary for the agent. The provider processes the data only to return that result. Agents check suggestions before sending them.

7. Where data is stored

Each client has its own dedicated server, hosted by DigitalOcean in Frankfurt, Germany. Data from one client is not stored with another client's data. Backups are encrypted and kept in the same region.

8. Service providers

We use these providers to run the service. They only process data needed for their part of it:

DigitalOcean: server hosting and backups (Germany);
Cloudflare: hosting of this website;
the platforms a client chooses to connect (Meta, TikTok, Google, Microsoft, Telegram) and the client's own phone and email providers;
an AI provider, only if the client turns on AI features.

9. How long we keep data

Conversations, calls and recordings are kept for as long as the client keeps them, or for the retention period the client sets.
When a client disconnects a channel, we stop receiving its data and delete its access tokens straight away.
When a client leaves Staffio Connect, its server and all data on it are deleted within 30 days, and backups within a further 30 days.
Billing records are kept as long as the law requires.

10. How to delete your data

Businesses using Staffio Connect: disconnect a channel at any time in Settings, or remove Staffio Connect in the platform's own settings (for example Facebook Settings › Business integrations, or TikTok's connected apps). To delete all data, email [email protected] from your account owner's address; we delete it within 30 days and confirm by email.

People who contacted a business that uses Staffio Connect: email [email protected] with the business name and the phone number, profile or email you used. We will pass the request to the business and help it delete your data within 30 days.

11. Security

All connections use encryption (HTTPS/TLS). Every agent has a personal login, and access is limited to what the client allows. Servers are kept up to date, and only Staffio staff who need to support the service can access them.

12. Your rights

Depending on where you live, you may have the right to see, correct, delete or receive a copy of your personal data, or to object to how it is used. Email [email protected] and we will reply within 30 days. You can also complain to your local data protection authority.

13. Children

Staffio Connect is a tool for businesses and is not meant for children. We do not knowingly collect data from children for our own purposes.

14. Changes

If we change this policy, we will update the date at the top of this page and tell clients about important changes by email.

15. Contact

Staffio Outsourcing, Bethlehem, Palestine · [email protected]