Privacy Policy

Last updated: March 8, 2026

FollowBot ("we", "our", or "us") operates the FollowBot Slack application ("the App") and the website followbot.app ("the Site"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

1. Data We Collect

When you install and use FollowBot, we collect the following data:

• Workspace and authentication data: Slack workspace ID, bot access token (to send messages on behalf of the App), and the Slack user ID of the person who installed the App.
• Task content: When a user reacts to a message with ✅, we store the first 200 characters of that message as the task description. We do not store the full text of messages beyond 200 characters, and we do not scan or index messages you do not react to.
• Task metadata: Channel ID, message timestamp, Slack user ID of the message author and reactor, task status (open/done/cancelled), deadline, priority, and reminder schedule.
• User preferences: Reminder timing, quiet hours, daily briefing time, timezone, and notification settings — stored per Slack user ID.
• Usage metrics: Aggregate counts of tasks created and completed, used for leaderboard and analytics features within the App. No individual behavior is profiled or sold.

2. Slack API Scopes We Use

FollowBot requests only the minimum permissions required to function:

• reactions:read — Detect when a user reacts with ✅ to create a task
• channels:history, groups:history, im:history, mpim:history — Read the reacted message to extract task text
• chat:write — Post task confirmations, reminders, and notifications
• commands — Register slash commands (/tasks, /task, /followbot)
• users:read — Read user timezone for scheduling reminders in local time
• im:write, conversations.open — Send direct messages (reminders, briefings)

3. How We Use Your Data

Data is used exclusively to provide the FollowBot service:

• Create and track tasks within your Slack workspace
• Send reminders, briefings, and digest reports to users
• Display task lists, leaderboards, and statistics within the App
• Apply user preferences (quiet hours, reminder timing, timezone)
• Respond to support requests

We do not use your data to train AI models, build advertising profiles, or share it with third parties for any commercial purpose.

4. Data Storage and Security

Task and preference data is stored in a database hosted on Railway (railway.app), a cloud infrastructure provider. Railway data centers are located in the United States.

We implement the following security measures:

• All data in transit is encrypted via HTTPS/TLS
• Slack bot tokens and secrets are stored as environment variables, not in code
• Slack request signatures are verified on every incoming event to prevent spoofing
• Access to production systems is restricted to authorized personnel only

5. Data Retention and Deletion

We retain your workspace data for as long as FollowBot is installed in your workspace.

When you uninstall FollowBot from your Slack workspace:

• Your workspace token is invalidated immediately by Slack
• All associated task data and user preferences are deleted from our database within 30 days

To request immediate data deletion, contact us at support@followbot.app. We will process deletion requests within 14 days.

6. Third-Party Services

FollowBot operates as a Slack application and is subject to Slack's Privacy Policy and Terms of Service.

Infrastructure providers we use:

• Railway (railway.app) — Hosting and database. Railway Privacy Policy

These providers process data only as necessary to provide their infrastructure services and are bound by their own privacy policies.

7. Your Rights (GDPR / Data Subject Rights)

Regardless of your location, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about your Slack user ID
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request an export of your data in a machine-readable format
• Restriction: Request that we limit how we process your data
• Objection: Object to processing of your data

To exercise any of these rights, contact us at support@followbot.app with your Slack workspace ID and user ID. We will respond within 14 days.

8. Cookies

The followbot.app website does not use tracking, advertising, or analytics cookies. No cookies are set by the Slack App itself.

9. Children's Privacy

FollowBot is a workplace productivity tool intended for users aged 16 and older. We do not knowingly collect data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify workspace administrators via a Slack message and update the "Last updated" date above. Continued use of FollowBot after notification constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, data requests, or to report a concern:

📧 support@followbot.app
🌐 followbot.app

We aim to respond to all privacy inquiries within 14 days.