Privacy Policy

Your privacy is of the utmost importance

We take the greatest care with any personal information you entrust to us. Here is what you can expect from us.

Personal information we collect and store

As a matter of policy, we only store the bare minimum information about you that is necessary to provide service to you.

  • Cookies: We may store essential cookies on your device(s). Essential cookies are those that are absolutely required for our service to function normally. Current essential cookies we use:
    • Security cookies to protect you from cross-site request forgery (CSRF) attacks during authorization of an activity integration. Maximum lifetime: 7 days.
  • Email addresses:
    • The email address associated with your Slack user account will be used, only with your explicit consent, to respond to any customer support requests that you submit from our app’s customer support form within the Slack application.
    • The email address you provide on the website’s contact form will be used to respond to any messages you send to us.
    • The email address you provide during our app’s subscription checkout process may be used to inform you of billing issues (for example, if your payment method has expired or will expire soon).
  • Time zones: We use your time zone, as provided to us by the Slack API, to automatically translate event times (for example, your standup notification time and your team’s standup summary time) from one time zone to another.
  • Slack messages: Never, under any circumstance, do we store the contents of Slack messages sent by you or any member of your Slack workspace. Whenever our app needs access to your Slack messages (for example, to generate a standup announcement from the answers you gave during a direct message standup session), our app retrieves the corresponding messages by their unique IDs from Slack’s web API just in time to perform the necessary operations, without ever writing the data to a nonvolatile storage medium.

Third party services we use

We use a handful of third party services that may collect and store personal information about you.

For our app:

  • Amazon Web Services: Amazon Web Services (AWS) provides the computing infrastructure for our app. Information about your usage of our app’s computing resources may be collected and stored by AWS according to AWS’s privacy policy. Furthermore, since operational emails generated by our app are sent via Amazon Simple Email Service, the email address associated with your Slack user account is revealed to AWS whenever such an email is sent.
  • Fastmail: Fastmail is our corporate email service provider. Any correspondence (and associated metadata) you send to an @standupforme.app email address, including messages sent via our app’s contact form or the website contact form, may be stored by Fastmail indefinitely. See Fastmail’s privacy policy for more information.
  • Slack: When you register for a Slack user account and as you use their services, Slack may collect and store your personal information (including messages you send to Standup for Me via the Slack application) according to their privacy policy.
  • Stripe: Stripe is the payment processor we use for billing and subscription management. The payment details you provide when subscribing or updating your subscription to our app will be stored by Stripe according to their privacy policy.

For our website (standupforme.app and its subdomains):

  • Cloudflare: We use Cloudflare Turnstile on this website as an alternative to CAPTCHAs to prevent email and comment spam from bots. Cloudflare may collect and store your personal information according to their privacy policy.
  • Netlify: We rely on Netlify to host a dedicated instance of Umami at analytics.standupforme.app for website analytics. Netlify may collect and store your personal information (including your IP address) as you use this website according to their privacy policy. Umami provides us with analytics that respect your privacy; it never sets cookies on your device(s) and it always anonymizes the data it collects from you so that you are not individually identifiable. Also, because we maintain our own standalone instance of Umami, none of our analytics data are ever accessible by anyone else.
  • SiteGround: SiteGround is the hosting provider for this website and they may collect and store your personal information (including your IP address) as you use this website according to their privacy policy.

Third party integrations

Our app allows you to link to your accounts from other online services via a feature called “activity integrations”. This feature is entirely optional and you can revoke your authorization for an activity integration at any time. When you choose to add an activity integration, we use it to retrieve your recent and upcoming activity data from the activity integration service’s API(s) on an ongoing basis to provide you with activity overviews during your standup sessions.

Whenever you authorize a new activity integration, we always try to limit the scope of access we request from the activity integration service to the bare minimum set of permissions we require. Furthermore, all access to an activity integration service that you authorize is strictly read only; that is, we never intentionally make changes to your data via an activity integration and, wherever possible, we ensure that the access that is granted to us by the service does not allow write access at all.

To provide the feature we retrieve and indefinitely store a unique identifier for your account from the activity integration service (for example, your username). When you choose to revoke your authorization for an activity integration, we immediately delete all records of the activity integration, including unique account identifiers and any credentials (for example, access tokens) that were provided to us by the activity integration service.

Never, under any circumstance, do we store your recent or upcoming activity data from other services. Whenever our app needs access to your activity, our app retrieves the corresponding data from the services’ API(s) just in time to perform the necessary operations, without ever writing the data to a nonvolatile storage medium.

Information security

We use security best practices for the storage of all customer data. All application data are encrypted at rest at the platform level with additional application-level encryption for all Slack workspace access tokens and any other secrets or credentials that are provided to us to prevent unauthorized access to our users’ Slack workspaces and connected services. We also adhere to the principle of least privilege to prevent unauthorized access; data and services are protected by strict network and application access controls. Data are backed up on a nightly basis and such backups are similarly encrypted and have strict access controls.

Data retention

For the limited amount of personal information we do collect as part of your usage of our app, we retain it for as long as our app remains installed in your Slack workspace(s) plus a period of up to one year after either our app is uninstalled from your Slack workspace(s) or your Slack workspace(s) is (are) deleted, unless we are required by a lawful court order to retain the information for longer.

Please use this website’s contact form to request that your personal information be archived or deleted early.

Mandatory disclosures

We may disclose your personal information only if we are required to do so by law or if you are in violation of the Terms of Use of our app. We do not sell or otherwise share your personal information with anyone else for any reason other than those reasons already stated in this policy.

Personal information of minors

Our services are not targeted to minors. We do not knowingly collect or store personal information from anyone under the age of 13.

Effective date

This privacy policy is effective as of November 14, 2025.