Privacy Policy

SnackSync ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Slack application and associated web dashboard (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2.1 Information from Slack

When you install SnackSync to your Slack workspace, we collect:

• Workspace name and Team ID
• Bot access token (for sending messages to your workspace)
• Installing user's Slack User ID
• Basic profile information of workspace members (name, email, profile picture)

2.2 Information from Usage

When you interact with SnackSync, we collect:

• Snack requests submitted via Slack commands
• Voting and preference data
• Order history and fulfillment status

2.3 Sign-In Information

When you sign in via "Sign in with Slack," we receive your Slack user ID, email, name, and profile picture through Slack's OpenID Connect (OIDC) flow.

We use the information we collect to:

• Provide and maintain the Service
• Process and track snack requests from your team
• Generate analytics and insights about snack preferences
• Facilitate ordering through third-party services (e.g., Instacart)
• Authenticate users and manage workspace access
• Send notifications and updates through Slack
• Improve and optimize the Service

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate (e.g., cloud hosting, payment processing via Stripe)
• Instacart: When you use the one-click ordering feature, relevant order data is shared with Instacart to fulfill your order
• Legal Requirements: If required by law, regulation, or legal process

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including encryption in transit (TLS) and at rest to protect your information.

Slack bot tokens are stored securely and are only used to interact with your workspace on your behalf.

We retain your data for as long as your workspace has SnackSync installed. When the app is uninstalled from your workspace, we will delete your workspace data, including all associated user profiles and request history, within 30 days.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Uninstall SnackSync from your Slack workspace at any time
• Opt out of non-essential communications

To exercise any of these rights, please contact us at support@snacksync.org.

SnackSync complies with Slack's API Terms of Service and data handling requirements. We only request the minimum Slack permissions (scopes) necessary to provide the Service. We do not store message content beyond the snack request commands directed at our bot.

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us:

• Email: support@snacksync.org
• Support page: snacksync.org/support