Privacy Policy

StaffPortal is owned and operated by Underline LLC ("Underline LLC," "StaffPortal," "we," or "us"). References to StaffPortal in this Privacy Policy mean Underline LLC.

1. Information We Collect

StaffPortal may collect and process information necessary to provide and operate the service, including:

• Account information, such as names, email addresses, login credentials, and account identifiers
• Workspace and organization membership information
• Staff profile information entered or managed within a workspace
• Policies, announcements, acknowledgements, tasks, and other workspace content
• Administrative and audit activity
• Device, browser, session, and authentication information
• Support requests and communications
• Operational logs, request identifiers, and security telemetry

Customers determine what information they choose to enter into their StaffPortal workspace.

2. How We Use Information

StaffPortal uses information to:

• Provide, maintain, and improve the StaffPortal service
• Authenticate users and manage accounts
• Operate customer workspaces and enforce access controls
• Provide administrative, audit, and security functionality
• Deliver platform communications and service-related notifications
• Respond to customer support requests
• Monitor platform reliability and performance
• Prevent fraud, abuse, unauthorized access, and security incidents
• Comply with applicable legal obligations

StaffPortal does not sell tenant workspace data.

3. Customer and Tenant Data

Organizations using StaffPortal control the information they submit to their workspaces.

Where StaffPortal processes personal information on behalf of a customer, StaffPortal generally acts as a service provider or data processor, and the customer determines the purposes and means of processing that information.

Tenant information is logically separated by organization and is accessible only according to applicable workspace permissions and administrative controls.

Additional data processing obligations may be governed by a separate Data Processing Agreement between StaffPortal and the customer.

4. Cookies and Authentication

StaffPortal uses cookies and similar technologies necessary to operate the service, maintain authenticated sessions, provide security protections, and remember certain platform settings.

Some cookies are essential for StaffPortal to function properly.

5. Security

StaffPortal uses reasonable administrative, technical, and organizational safeguards designed to protect customer information.

These safeguards may include:

• Authentication controls
• Role-based and permission-based access restrictions
• Tenant isolation
• Audit logging
• Security monitoring
• Administrative safeguards
• Infrastructure and application security controls

No service can guarantee absolute security, but StaffPortal continuously works to protect its systems and customer information.

6. Service Providers and Subprocessors

StaffPortal may use third-party infrastructure, hosting, communications, analytics, security, payment, and operational service providers to help operate the platform.

These providers may process limited information on StaffPortal's behalf as necessary to provide their services.

Where required, StaffPortal enters into appropriate contractual or data-protection arrangements with these providers.

7. Data Retention

StaffPortal retains information for as long as reasonably necessary to provide the service, meet contractual obligations, maintain platform security, resolve disputes, enforce agreements, and comply with applicable law.

Workspace information may also be retained according to the configuration, contractual terms, or instructions of the applicable customer organization.

Following account termination, StaffPortal may retain certain information for a limited period before deletion or anonymization, subject to legal, security, backup, and contractual requirements.

8. Data Access, Correction, Export, and Deletion

Users may be able to review or update certain information directly within StaffPortal.

Requests relating to information controlled by an organization should generally be directed to that organization's workspace administrator or owner.

Customers may contact StaffPortal for assistance with data access, correction, export, or deletion requests.

StaffPortal may retain certain information where required for legal, security, fraud prevention, or legitimate operational purposes.

Deleting your StaffPortal account

You can delete your StaffPortal account at any time, in the StaffPortal app for iPhone, iPad or Android or on the website: sign in, open Account & security, and choose Delete my account.

Deleting your account removes your StaffPortal sign-in, your name, email address and profile photo, your sign-in methods (such as passkeys and Sign in with Apple), and signs you out on every device.

Records an employer keeps about your work, such as shifts, timesheets, time-off requests and signed documents, belong to that employer's workspace and stay with them under their own retention settings.

Remaining copies in backups are removed within 30 days.

If you can't sign in, email privacy@underline.team from the address on your account and ask us to delete it.

9. Legal Requirements

StaffPortal may disclose information when reasonably necessary to:

• Comply with applicable laws, regulations, legal processes, or governmental requests
• Protect the security or integrity of StaffPortal
• Investigate fraud, abuse, or security incidents
• Protect the rights, property, or safety of StaffPortal, its customers, users, or others

10. Business Transfers

If StaffPortal or its business operations are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable legal requirements.

11. Children's Privacy

StaffPortal is intended primarily for organizational and workforce use and is not designed as a consumer service directed toward children.

Customers are responsible for ensuring that their use of StaffPortal complies with applicable laws concerning minors and employee information.

12. International Processing

StaffPortal and its service providers may process information in jurisdictions other than the jurisdiction in which a user or customer is located.

Where required by applicable law, StaffPortal will use appropriate safeguards for international transfers of personal information.

13. Changes to This Policy

StaffPortal may update this Privacy Policy periodically.

When material changes are made, StaffPortal may update the date shown at the top of this page or provide additional notice where appropriate.

Continued use of StaffPortal after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised policy to the extent permitted by law.

14. Contact

Questions or requests regarding privacy or data protection may be submitted through StaffPortal support or the contact methods published on the StaffPortal website, or sent to:

Underline LLC

StaffPortal Privacy

1703 N Park Ave

Grand Island, Nebraska 68803

United States

Email: privacy@underline.team

For customers with a Data Processing Agreement, additional privacy and data-processing terms may apply.