Privacy Policy

1. Information We Process

Floater collects and processes only the workspace data necessary to manage on-call rotations:

• Workspace & Auth Data: Slack Team ID, bot access tokens, the installing user's OAuth token, install timestamps, plan status, and workspace settings.
• User Data & Preferences: Slack User ID, Team ID, last-active timestamp, interaction counts, notification preferences (on/off), and user deactivation status (cached boolean).
• Rotation Data: Rotation IDs, usergroup handle names, schedule parameters, channel IDs, message templates, override records, and creator user IDs.
• Temporary DM Records: Temporary message identifiers used strictly to clean up bot messages, deleted once processed.

What We Do Not Collect: We do not store real names, email addresses, passwords, profile photos, or the contents of your Slack channel messages. User details are queried live via Slack's API (users.info) without being persisted. We do not use third-party analytics or tracking cookies.

2. How We Use Your Information

We process your data strictly to deliver the core service:

• Automating on-call rotation schedules and temporary shift overrides.
• Updating Slack user groups to route mentions to active on-call users.
• Maintaining user notification preferences and workspace settings.
• Processing payments and subscriptions via our merchant of record, Lemon Squeezy (a Stripe company) - see Lemon Squeezy Privacy Policy.

3. Legal Bases for Processing (UK GDPR)

We process personal data under the following legal bases:

• Contract Performance: To provide the Service under our Terms.
• Legitimate Interests: To maintain, secure, and operate the App effectively for business users.

4. Data Sharing & Sub-processors

We never sell, rent, or trade your data. Information is shared strictly with infrastructure providers necessary to run the Service:

• Amazon Web Services (AWS): Cloud hosting, compute, and database infrastructure storing app state.
• Lemon Squeezy (a Stripe company): Payment processing and subscription billing, as our merchant of record.
• Google Workspace: Delivery of transactional account and billing emails.
• Slack API: Communicating directly with Slack to route mentions and messages.

See our full Sub-processors page for what each provider does and where data is located.

5. Data Retention & Account Deletion

• Active Workspaces: We retain workspace and rotation data for as long as Floater remains installed in your workspace.
• Post-Uninstallation: Uninstalling Floater from Slack revokes Slack's own access grant, but does not automatically delete your data from our database. Workspace and rotation records are retained until a deletion request is made.
• Manual Deletion: Workspace admins can request a purge of all workspace data at any time by emailing dataprotection@pelicanapps.com.

6. Security & International Transfers

We implement industry-standard technical measures to protect your data. Data is processed and stored in AWS's eu-west-1 (Ireland) region. Our payment processor (Lemon Squeezy) and email provider (Google Workspace) may process data outside the UK/EU as part of delivering their services, under their own standard contractual safeguards ensuring equivalent UK GDPR protection - see our Sub-processors page for details.

7. Your Privacy Rights

Under UK GDPR and US state privacy laws, you have rights to access, correct, export, or request deletion of your personal data.

To exercise your rights, contact dataprotection@pelicanapps.com. UK users may also lodge complaints directly with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Contact Us

For any privacy-related questions, please contact:

Pelican Apps
Email: dataprotection@pelicanapps.com
Website: https://floater.pelicanapps.com/