Privacy is a top priority for us at Snackbot. In order to protect you and ourselves we only process the minimum amount of data required for Snackbot to function and we secure that data with modern and well-established security measures. Below you can find a complete and honest overview of the data being processed by us, what exactly the data is used for and which other parties are involved.
By using Snackbot you accept and consent to this policy and the rest of the Terms of Service.
If you ever decide to stop using Snackbot a simple uninstall is sufficient to remove all your personal data.
What data can we see?
Before Snackbot is added to your Slack workspace, we ask you for permission to add a bot user. Theoretically this bot user can do and see the same things as a normal team member (except joining channels on its own). In practice Snackbot only uses a small subset of these permissions. For maximum privacy and security we recommend to create a separate channel for Snackbot (e.g.
#lunch) and keep Snackbot out of channels where sensitive data is exchanged.
Snackbot may also collect anonymized aggregated statistics (e.g. order count per product) to get insights into the usage of Snackbot.
Last but not least, Snackbot may keep and use all added product names and prices to create public menus accessible for all users. Of course, product names that appear to contain personal information (e.g. "John's special burger") will not be included in public menus.
Which other parties are involved?
Amazon Web Services
Amazon Web Services (AWS) belongs to Amazon and is a well-known provider for cloud computing with many certificates assuring the security and reliability of their services. We use AWS for running and monitoring servers and storing all data.
Google Cloud Platform
Google Cloud Platform (GCP) is Google's cloud computing service. Like AWS it is an established secure and reliable provider. We only use GCP for fetching public information about restaurants matching the query passed to the commands
We have configured Google Analytics according to the strict recommendations of the Dutch Data Protection Authority, i.e.:
- IP addresses are being anonymized
- Sharing of data and remarketing is deactivated
- Unaggregated data is automatically removed after 14 months
Still don't like it? You can opt-out at any time with the Google Analytics opt-out browser add-on.
Please note that Google Analytics is only used for the website. Any activity within Slack is not analyzed with Google Analytics.
How do we secure your data?
We do our best to secure your data. This includes a strict access control with strong passwords and encrypted transfer using SSL connections. Daily backups are being made for the database and automatically deleted after 7 days.
How can you access and remove all your data?
At any time you can ask Snackbot what we know about you. Just send a direct message with
mydata to receive an overview.
Do you want your personal data to be removed? Simply uninstall Snackbot from your workspace or send a request to firstname.lastname@example.org including your Slack user id and we will make it happen.
Can we change this policy?