Privacy
Plain words on what we collect, who can see it and how to get it deleted. StaffPick is run by Qosmic Co Pty Ltd, an Australian company. Last updated 26 October 2026.
What we collect
- Your email address, to sign you in with a one-time code. We don't use passwords.
- If you join as talent: the profile you approve (name, headline, skills, experience, country, time zone, hours, rate), your CV if you upload one, a photo, an optional intro video, your test answers and scores, and an ID photo plus selfie for the ID check.
- If you hire: your company name and details, the briefs you write, the people you save and the intros you request.
- Basic technical data needed to run the site and stop abuse, such as a one-way hash of your IP address for rate limits. We don't store raw IP addresses for that.
What businesses can see
- Your first name and the first letter of your last name, your country, headline, skills, tools, experience summary, hours, rate, photo and test scores.
- Your intro video only when they are signed in.
- Never your surname, email, phone number, city, CV file or ID images. Intros go through StaffPick.
Your profile is only shown after you give consent and it passes review. You can withdraw consent at any time from your dashboard, and your profile is unlisted straight away.
ID checks
We use your ID photo and selfie only to confirm you are a real person. Once our team has reviewed them, the images are deleted. We keep only the result (verified or not).
How AI is used
AI reads the CV or text you give us to draft your profile, turns a business's request into a role brief, grades written test answers and writes the short reasons on a shortlist. To do this we send that text to AI model providers through OpenRouter. AI output is always a suggestion: you review and approve it before anything is saved or shown.
Your ID images are never sent to AI.
Who we share data with
- Supabase, which hosts our database and files.
- Vercel, which hosts the website.
- Resend, which sends our emails (sign-in codes and intro updates).
- AI model providers through OpenRouter, for the jobs above.
We don't sell your data and we don't share it for advertising.
AI assistants and our MCP server
Assistants like Claude and ChatGPT can search StaffPick through our MCP server. Without signing in they only get the same anonymised profile details a signed-out visitor sees, plus a link to finish an intro on StaffPick.
If you connect an AI app to your StaffPick account, you log in on StaffPick and approve it first. It can then act for you with the same access you have on the site: a business's app can see that business's briefs, saved people and intros and send intros for it; a worker's app can see and edit that worker's own profile and answer their intro requests. It never gets anyone else's contact details, cannot pay for you, and cannot take tests or submit a profile for you. What the app does with that information is covered by its own privacy policy. You can disconnect an app at any time at staffpick.ai/agents, and it loses access straight away.
Keeping and deleting your data
We keep your account while it is active. To download or delete your data, or to ask anything about privacy, send a request through the contact page or email anyro@iimagined.ai from the email on your account. We act on deletion requests within 30 days.
Cookies
We use cookies only to keep you signed in and to remember a brief you wrote before signing up. No advertising cookies.