Privacy Policy

1. Introduction

This Privacy Policy explains how Unified ("we", "us", or "our") collects, uses, and protects your information when you use our Slack application and related services (the "Service").

2. Information We Collect

When you install and use Unified, we collect the following information from your Slack workspace:

• Workspace Information: Workspace ID, workspace name, and domain.
• User Information: User IDs, display names, and email addresses of users who interact with the Service.
• Interaction Data: Kudos messages, survey responses, and raffle entries submitted through the Service.

3. How We Use Your Information

We use the collected information solely to:

• Provide, maintain, and improve the Service.
• Authenticate users and manage workspace access.
• Process kudos, surveys, and dashboard analytics.
• Communicate with you regarding service updates or support.

4. Data Storage and Security

• Data Residency: All workspace data we store is processed and held in the United States — our application hosting, primary database and caching layer are all located in US regions. Analytics are processed by PostHog in the United States. Transactional email is handled by Brevo, whose hosting and data storage are located in the European Union; when we send you email your name and email address are sent to Brevo. Some other third-party processors may process limited data in other regions.
• Hosting: Our infrastructure is hosted on secure, industry-standard cloud providers (AWS, Fly.io, PlanetScale and Upstash).
• Data Retention: Workspace data is automatically and permanently deleted within 90 days of your workspace uninstalling the Unified application.

5. Third-Party Processors

We may use trusted third-party services to operate the Service, including:

• Hosting and infrastructure: Amazon Web Services (AWS) and Fly.io (application hosting), PlanetScale (database), Upstash (caching, queues and sessions) — all in United States regions
• Email Delivery: Brevo (for transactional emails) — hosting and data storage in the European Union
• Analytics: PostHog (PostHog Cloud, United States), used for product analytics and feature flags. It runs only if you accept analytics cookies. Once you are signed in, the data sent includes your user ID, name, email address, role and workspace. No third-party tracking cookies are set on Slack interactions.

We do not sell your data to third parties.

6. Your Rights

You have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, or to request a full data export prior to uninstallation, please contact us at support@getunified.io.

7. Cookies

Our landing page at getunified.io and the Unified app both use the same cookie consent banner, and share the choice you make in it:

• Necessary cookies (session, CSRF) are always active.
• Analytics cookies (PostHog — see section 5) are opt-in and off unless you turn them on. On our public pages this data is not tied to an identity. Once you are signed in to the app, it is linked to your account and carries your name, email address, role and workspace.
• No marketing cookies are currently deployed.

You can change your choice at any time: manage cookie preferences. If you're signed in, the same control is on your profile page.

8. Security

We take the security of Unified seriously. If you discover a vulnerability, please report it to security@getunified.io.

We follow responsible disclosure practices and request:

• Give us 90 days to address the issue before public disclosure.
• Do not access or modify user data without permission.
• Provide a detailed report with reproduction steps.

Our security policy is published at /.well-known/security.txt per RFC 9116.