Privacy notice

Effective September 5, 2026

Information used to provide the service

StaffCubby stores director account details, center details, employee contact information, credential dates, uploaded credential documents, and activity records to provide staff-record organization and renewal workflows. Centers decide what information they enter and should inform their staff about this use.

Service providers

Account, database, and document services use Supabase. Transactional email uses Resend when configured. Hosting is provided by the selected deployment provider. Optional AI extraction sends a selected credential image to OpenAI only when requested; dates must be reviewed by a director.

Data boundaries

Do not upload SSNs, full background investigation reports, identity documents, criminal-history details, or medical records. StaffCubby is not designed to store this information. Credential documents are kept in private storage and authorized viewing links expire.

Retention and access

Records remain available until removed under the center’s retention process. Archiving a staff member does not delete their files. Contact the administrator who invited your center to request correction, export, or deletion; deployment operators must establish a retention period and contact channel before accepting customer data.

Cookies and analytics

Essential session cookies keep users signed in. The application records operational events and does not include advertising trackers. The public demo uses fictional records.

Questions

Employees should contact their center. Directors should contact their pilot administrator through their existing onboarding correspondence.