Privacy Policy

Effective Date: December 2, 2025

This Privacy Policy describes how Andrii Mishchenko (the "Developer," "I," or "me"), an independent developer based in The Netherlands, collects, uses, and discloses information in connection with your use of the Slack application, Workspace Memories (the "App").

By installing and using the App within a Slack Workspace, you confirm that you have read and agree to the collection and use of information in accordance with this policy and the Terms of Use.

1. Developer and Data Controller

I am the Controller of the limited Configuration Data collected by this App.

2. Principles of Data Handling

Workspace Memories adheres to strict data minimization principles:

No Content Stored: The App does not store, analyze, or process the content (text) of any Slack messages retrieved for determining "most memorable" status. Only metadata (reaction count and comment count) is used and processed in memory during the daily execution, and then discarded immediately after the reposting action.

Organizational Focus: The data stored is limited to organizational and technical identifiers necessary for the App to function.

3. Information We Collect and Store

We only store the minimum information necessary to execute the App's core function (retrieving and reposting old memories). This data is classified as "Service Configuration Data."


Data Type Description Purpose and Legal Basis
Workspace ID and Title Unique identifier and name of the Slack workspace. To associate the Bot Token and channels with the correct service instance. Legal Basis: Necessary for the performance of the contract (Terms of Use).
Channel ID and Title Unique identifier and name of the channel where the App is active. To schedule the daily retrieval and posting into the correct channel. Legal Basis: Necessary for the performance of the contract (Terms of Use).
Slack Bot Access Token A highly sensitive, unique, encrypted credential provided by Slack for the App to operate in your workspace. Required to communicate with the Slack API, retrieve history metadata (reactions/comments), and post messages. Legal Basis: Necessary for the performance of the contract (Terms of Use).

We DO NOT store any personal user identifiers (like user names or email addresses) or message content.

4. How We Use Your Data

The Service Configuration Data is used solely for:

  • Service Provision: To enable the daily scheduled function of retrieving message metadata and posting the corresponding message link into the designated channel.
  • Account Management: To confirm the App's installation status and manage its connection to your Slack Workspace.

5. Data Processing and Storage Location

Processing: All data processing, including the temporary retrieval and counting of reactions/comments from message history, is performed by the App's backend infrastructure.

Storage Location: All Service Configuration Data is stored and processed on servers located in the United States (Phoenix, AZ).

International Data Transfer (GDPR Compliance)

As the Developer is based in The Netherlands (European Union/EEA) and the data is hosted in the United States, this constitutes an international transfer of data. The security and integrity of your data are maintained through:

  • Encryption: All sensitive data, particularly the Slack Bot Access Token, is stored securely using industry-standard encryption.
  • Access Control: Access to the database is strictly limited and protected.

By installing the App, you acknowledge and agree that your Service Configuration Data is transferred to, and stored in, the United States.

6. Data Security and Retention

Security

I implement robust technical and organizational measures to protect the integrity and security of the Service Configuration Data, including encryption, access controls, and secure hosting.

Data Retention and Deletion

I retain Service Configuration Data only for as long as the App is installed on your Slack Workspace.

Uninstallation: If the App is uninstalled from your Slack Workspace, all associated Service Configuration Data (including Workspace ID, Channel IDs, and the Bot Token) will be securely and permanently deleted from the database within seven (7) days).

Inactivity: If the App is inactive and consistently fails to connect to the Slack API for a period of [e.g., 90 days], I reserve the right to delete the associated data.

7. Your Rights (For EU/EEA Users)

If you or your Workspace are located in the EU or EEA, you have certain rights under the General Data Protection Regulation (GDPR) concerning your data. As the App only stores organizational/technical data, these rights primarily apply to the technical data associated with your workspace:

  • Right of Access: You can request confirmation of what data I store about your workspace.
  • Right to Rectification: You have the right to have inaccurate data corrected.
  • Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your data (this is automatically executed upon uninstallation).
  • Right to Object/Restrict Processing: You can object to or request the restriction of processing.
  • To exercise any of these rights, please contact me directly at the email address provided in Section 1.

8. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or for legal reasons. I will notify you of any material changes by posting the new Privacy Policy on the App's website (https://workspace-memories.com/privacy-policy) and updating the Effective Date.