Effective Date: August 31, 2026
Data Controller: Emerging S.R.O., IČO 14113902
Emerging S.R.O. operates StaffGrid and the other directories in the Veracity Media Network. We aim to collect only the information needed to operate and secure the service, understand its use, publish documented AI-agent activity, and respond when someone contacts us.
You can browse StaffGrid without creating an account or logging in. We do not accept user reviews, and we do not sell, rent, or trade personal data.
Our web server records technical request information needed to deliver and protect the site. Depending on the request, this may include an IP address, timestamp, host, requested URL and query string, HTTP method and response status, bytes sent, referring page, user-agent string, and response time.
We identify requests matching user-agent patterns in a maintained AI-agent manifest. For internal analysis, we derive a minimized event record containing the timestamp, host, request method, path without its query string, response status, bytes sent, recognized agent classification, response time, and inferred content type.
These derived records do not contain the requester’s IP address, query string, referrer, or full user-agent string. A recognized pattern does not prove the identity or purpose of the requester because user-agent strings can be changed or spoofed.
StaffGrid currently uses Google Analytics 4 to understand general website use, such as pages viewed, session activity, device or browser characteristics, referring sources, and approximate geographic information. GA4 may set or read cookies and process technical identifiers when the site opens. Google acts as a service provider for this processing and may process information outside the European Economic Area subject to its applicable safeguards.
We are preparing an opt-in analytics-consent mechanism across all six directories. This mechanism is not yet deployed. Once deployed, GA4 will not load until the visitor gives consent, and this policy will be updated accordingly.
We do not use GA4 for targeted advertising or to build advertising profiles.
If you contact us by email, we receive your email address, name, message, and any other information or attachments you choose to provide.
The Shortlist feature stores selected tools in your browser’s LocalStorage. Shortlist data remains on your device and is not transmitted to us. We cannot view or recover it. It remains until you remove it, clear your browser data, or your browser removes it.
We use server request information to deliver the website, investigate errors, maintain security, prevent abuse, and understand service reliability.
We use minimized AI-agent activity records to produce weekly aggregate reports, conduct network-level research, and document recognized request patterns. These records do not establish whether a page was parsed, cited, recommended, ranked, or used in an AI-generated answer.
We use aggregate analytics to understand how visitors use the directory and to improve its structure and content.
We use information sent by email to answer inquiries, review corrections, process Vendor Verified requests, maintain relevant correspondence, and address business or legal matters raised in the message.
Our processing may rely on legitimate interests in operating, securing, evaluating, and documenting the service; steps requested before entering into an agreement; compliance with legal obligations; or consent where consent is required and available.
Raw Nginx server logs are rotated daily and may be retained for up to 90 days under the current server configuration.
Minimized AI-agent event records are retained for up to 365 days.
Aggregate weekly reports, published research, and downloadable aggregate datasets may be retained indefinitely as part of the network’s public research record. These publications do not include IP addresses, query strings, referrers, or full user-agent strings.
GA4 data is retained according to the settings of the relevant GA4 property and Google’s applicable retention processes. We will review and clarify this section when the opt-in consent mechanism is deployed.
Email correspondence is retained only while reasonably necessary for the inquiry, vendor relationship, record keeping, dispute handling, or a legal obligation. It is deleted when it is no longer needed for those purposes.
Shortlist data remains in your browser until you or your browser removes it.
Infrastructure, analytics, and email providers may process limited information on our behalf when operating their services.
We may disclose information when required by law or when reasonably necessary to protect our rights, systems, services, or users. We do not provide personal data to vendors in exchange for payment or use personal data from this directory for targeted advertising.
AI Visibility reports contain aggregate counts of recognized requests to public review pages. Public research datasets contain aggregate counts by date, site, recognized agent type, or review-page slug.
These reports and datasets do not contain raw server-log records. They do not publish IP addresses, query strings, referrers, full user-agent strings, or email correspondence.
Some links to vendor websites may be affiliate links or pass through a network-operated redirect. A click is recorded in our ordinary server logs like other requests. When you leave StaffGrid, the destination vendor or affiliate platform may receive technical request information and apply its own cookies or tracking technologies.
Third-party websites have their own privacy practices and policies. This policy applies to StaffGrid and the processing performed by Emerging S.R.O.
Affiliate relationships cannot affect CTI scores, rankings, factual corrections, editorial coverage, or eligibility for a Vendor Verified badge.
Depending on the circumstances, the GDPR may give you rights to access, correct, delete, restrict, or object to the processing of your personal data and to receive certain data in a portable format.
Because some technical records are minimized, aggregated, or retained without a direct account identifier, we may not always be able to associate a record with a specific person. We may request information reasonably necessary to verify and process a rights request.
You may lodge a complaint with the Office for Personal Data Protection in the Czech Republic or another competent supervisory authority.
To make a privacy request, contact contact@emerging.cz. For directory-specific questions, contact hello@staffgrid.net.
We use access controls and operational safeguards intended to limit access to server logs, minimized event records, correspondence, and administrative systems. No internet service can guarantee absolute security.
We may update this policy when our websites, service providers, legal obligations, or data practices change. The effective date at the top identifies the latest published revision.