Draft. This notice is being reviewed and may change.

Privacy notice

Who runs StaffPen

StaffPen is run by Coretrix Technologies Limited.

Your account email.
The name and rank you enter.
Your documents and every saved version of them.
Your checks and their findings.
Your research sessions.
Your credits and payments ledger.
Your Document Q&A history.
When you sign in: a scrambled code for your network (never your IP address) and your browser and system type. Kept for 7 days, only to warn you if your account may be shared.

StaffPen uses the services below. Each one receives only what is listed.

DeepSeek (operated from the People's Republic of China, outside Nigeria). The text of your document for AI checks, drafting, research, reports and slides. For Document Q&A, your question and up to six passages from StaffPen's reference library.
Exa (United States). Your research topics.
Google Cloud and Vertex AI (Europe). StaffPen is hosted on Google Cloud, so all the data described in this notice is stored and processed there.
PostHog (United States). Usage events and masked session replays, linked to your account id. Replays hide all text, so the words of your documents are not recorded.
Resend (email delivery). Your email address and the emails StaffPen sends you.
Paystack (payments). The payment details you enter on Paystack. StaffPen does not receive your card details.

Documents you mark CONFIDENTIAL or above are not sent to AI providers.

A deleted account is removed after 30 days. This covers your documents, versions, checks, research sessions, reports and files.
A file you uploaded is removed 90 days after you delete the document it belongs to.
When an account is removed, StaffPen keeps a record of which AI provider handled an item. This record does not hold your name or account id.

You can delete your account yourself from Profile.

Contact: to be added