Privacy Policy

Last updated: January 9, 2025

1. Information We Collect

What We Do Collect:

• Slack User IDs: Anonymous identifiers from Slack (like "U1234567") to track votes and poll ownership
• Slack Team IDs: Anonymous workspace identifiers (like "T1234567") for multi-workspace support
• Slack Channel IDs: Anonymous channel identifiers (like "C1234567") to display polls in the correct channel
• Poll Content: Poll questions and answer options that you create (including any text or content you choose to include)
• Voting Data: Records of votes cast on polls
• Bot Tokens: Encrypted Slack bot tokens to enable functionality (stored securely)
• Basic Metadata: Poll creation time, settings (anonymous/public), and voting statistics

What We DON'T Collect:

• ❌ Real names or display names
• ❌ Email addresses
• ❌ Phone numbers
• ❌ Profile pictures
• ❌ Channel names
• ❌ Workspace names
• ❌ Message content outside of polls
• ❌ Personal conversations
• ❌ Any other personally identifiable information (PII)

2. How We Use Your Information

We use the limited information we collect only to:

• Provide the polling service: Create polls, track votes, display results
• Authenticate requests: Verify that requests are coming from Slack
• Prevent duplicate voting: Ensure users can only vote once per poll (when not anonymous)
• Enable poll management: Allow poll creators to edit and close their polls
• Calculate billing: Determine workspace size for pricing (enterprise plans only)
• Improve the service: Basic analytics to understand usage patterns

3. Data Retention and Deletion

What Gets Deleted Based on Your Plan:

• Free Plan (7 days): Poll questions, answer options, votes, voters, and most metadata
• Basic Plan (30 days): Poll questions, answer options, votes, voters, and most metadata
• Enterprise Plan: Custom retention periods as configured

What We Retain (For Service Operations):

• Slack workspace ID (for billing and access control)
• Basic usage statistics (when polls were created, how many votes cast - no content)
• The Slack user ID of the poll creator (for poll management)
• Bot installation records (to maintain service access)

4. Data Sharing and Third Parties

We Do NOT:

• ❌ Sell your data to anyone
• ❌ Share data with advertisers
• ❌ Use data for marketing purposes
• ❌ Provide data to data brokers
• ❌ Share polls or votes outside your Slack workspace

We Only Share Data:

• With Slack: When making API requests to display polls and manage the app (required for functionality)
• With AWS: Our hosting provider, under strict data processing agreements
• When Required by Law: Only if compelled by valid legal process (we will notify you if legally permitted)

5. Security

We implement industry-standard security measures:

• Encryption: All data is encrypted at rest and in transit
• Access Controls: Strict access controls and authentication
• Infrastructure Security: Built on AWS with enterprise-grade security
• Request Verification: All Slack requests are cryptographically verified
• Minimal Permissions: We only request the minimum Slack permissions needed

6. Your Rights

You have the right to:

• Access: Request information about data we have about your workspace
• Deletion: Request immediate deletion of all data (we'll delete everything within 48 hours)
• Correction: Request correction of any inaccurate data
• Uninstall: Remove TinyPoll from your Slack workspace at any time
• Data Portability: Request a copy of your poll data (before the 30-day deletion)

7. Children's Privacy

TinyPoll is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

8. International Users

TinyPoll is hosted on AWS infrastructure primarily in the Asia-Pacific region. If you are using TinyPoll from outside Australia, your data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for international data transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• For significant changes, sending a notification in Slack workspaces using TinyPoll

10. Slack-Specific Information

Slack Permissions We Request:

• commands: To enable the /tinypoll slash command
• chat:write: To post polls to channels
• chat:write.public: To post polls to public channels
• users:read: To display user names for non-anonymous polls (only when explicitly enabled by poll creator)

How We Use the Bot Token:

The bot token allows TinyPoll to interact with your Slack workspace. We use it only to:

• Post poll messages to channels
• Update poll results in real-time
• Retrieve user display names for non-anonymous polls (when enabled)
• Verify that requests are coming from your workspace