Privacy Policy

1. Information We Process

Floater collects and processes only the workspace data necessary to manage on-call rotations:

• Workspace & Auth Data: Slack Team ID, bot access tokens, the installing user's OAuth token, install timestamps, plan status, and workspace settings.
• User Data & Preferences: Slack User ID, Team ID, last-active timestamp, interaction counts, notification preferences (on/off), and user deactivation status (cached boolean).
• Rotation Data: Rotation IDs, usergroup handle names, schedule parameters, channel IDs, message templates, override records, and creator user IDs.
• Temporary DM Records: Temporary message identifiers used strictly to clean up bot messages, deleted once processed.

What We Do Not Collect: We do not store real names, email addresses, passwords, profile photos, or the contents of your Slack channel messages. User details are queried live via Slack's API (users.info) without being persisted. We do not use third-party analytics or tracking cookies.

2. How We Use Your Information

We process your data strictly to deliver the core service:

• Automating on-call rotation schedules and temporary shift overrides.
• Updating Slack user groups to route mentions to active on-call users.
• Maintaining user notification preferences and workspace settings.
• Processing payments and subscriptions via our merchant of record, Lemon Squeezy (see Lemon Squeezy Privacy Policy).

3. Legal Bases for Processing (UK GDPR)

We process personal data under the following legal bases:

• Contract Performance: To provide the Service under our Terms.
• Legitimate Interests: To maintain, secure, and operate the App effectively for business users.

4. Data Sharing & Sub-processors

We never sell, rent, or trade your data. Information is shared strictly with infrastructure providers necessary to run the Service:

• Cloud Infrastructure: Secure hosting and database providers storing app state.
• Payment Processor: Lemon Squeezy for transaction handling.
• Slack API: Communicating directly with Slack to route mentions and messages.

5. Data Retention & Account Deletion

• Active Workspaces: We retain workspace and rotation data for as long as Floater remains installed in your workspace.
• Post-Uninstallation: Uninstalling Floater from Slack revokes Slack's own access grant, but does not automatically delete your data from our database. Workspace and rotation records are retained until a deletion request is made.
• Manual Deletion: Workspace admins can request a purge of all workspace data at any time by emailing dataprotection@pelicanapps.com.

6. Security & International Transfers

We implement industry-standard technical measures to protect your data. Data is processed in secure databases in the UK and US under standard contractual safeguards ensuring equivalent UK GDPR protection.

7. Your Privacy Rights

Under UK GDPR and US state privacy laws, you have rights to access, correct, export, or request deletion of your personal data.

To exercise your rights, contact dataprotection@pelicanapps.com. UK users may also lodge complaints directly with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Contact Us

For any privacy-related questions, please contact:

Pelican Apps
Email: dataprotection@pelicanapps.com
Website: https://floater.pelicanapps.com/