1. Purpose
   This policy outlines the data retention practices of Slackify to ensure compliance with data protection regulations, including HIPAA, while maintaining the functionality and integrity of our service.
   
2. Scope
   This policy applies to all data collected, processed, and stored by Slackify in relation to its users and their Slack workspace activities.
   
3. Types of Data and Retention Periods
   3.1 User Account Information
   Data Type: Slack user ID, team ID, email address
   Retention Period: Retained for the duration of the user’s active account, plus 30 days after account deletion or last activity
   Justification: Necessary for account management and service provision
   3.2 Subscription Information
   Data Type: Plan type, subscription status, payment information
   Retention Period: Retained for the duration of the active subscription, plus 7 years after cancellation
   Justification: Required for financial record-keeping and audit purposes
   3.3 Activity Data and Reports
   Data Type: Aggregated activity metrics (e.g., message counts, time spent in channels) and generated reports
   Retention Period:
   Free Plan: Data is processed in real-time and not stored
   Basic Plan: Data is processed in real-time and not stored
   Premium Plan: Data and generated reports are stored for 30 days, then automatically deleted
   Justification: Balances service functionality for Premium users with privacy considerations for all users
   3.4 Detailed Message Content
   Data Type: Actual content of Slack messages
   Retention Period: Not stored by Slackify
   Justification: Slackify does not retain message content to protect user privacy
   3.5 API Access Tokens
   Data Type: Slack API tokens
   Retention Period: Retained for the duration of the active account, revoked immediately upon account deletion
   Justification: Required for ongoing service functionality
   3.6 Usage Logs
   Data Type: Application logs, error reports
   Retention Period: 90 days
   Justification: Necessary for troubleshooting and service improvement
   
4. Data Processing and Report Generation
   4.1 Real-time Processing
   For Free and Basic plans, activity data is processed in real-time to generate reports without persistent storage of individual metrics or reports
   For Premium users, data is processed and stored to allow access to historical reports for a 30-day period
   4.2 Report Delivery and Storage
   For Free and Basic users, activity reports are generated on-demand or at scheduled times and delivered directly to users via Slack without being stored
   For Premium users, reports are generated, delivered via Slack, and stored for 30 days to allow for report access and analysis
   4.3 Automatic Deletion
   For Premium users, all stored activity data and reports are automatically deleted after 30 days
   
5. Data Deletion Procedures
   5.1 Automatic Deletion
   Premium user activity data and reports are automatically deleted after 30 days
   Usage logs are automatically purged after 90 days
   5.2 User-Initiated Deletion
   Users can request immediate deletion of all their data through the account management interface
   Upon request, all user data, including account information and activity data, will be permanently deleted within 30 days
   5.3 Account Closure
   When a user closes their account, all associated data will be deleted within 30 days, except for financial records required for audit purposes
   
6. Data Protection During Retention
   All retained data is encrypted at rest and in transit
   Access to user data is strictly limited to authorized personnel on a need-to-know basis
   Regular security audits are conducted to ensure the integrity and protection of retained data
   
7. Compliance with Legal Requirements
   In the event of a legal hold or ongoing investigation, relevant data may be retained beyond the stated periods until the hold is lifted or the investigation is closed
   Slackify will comply with all valid legal requests for data retention or deletion
   
8. User Rights
   Users have the right to:

Request a copy of their personal data
Request correction of inaccurate data
Request deletion of their data, subject to legal and operational requirements
For Premium users, access and download their stored reports within the 30-day retention period
Opt-out of certain data collection practices, where applicable
To exercise these rights, users can contact our Data Protection Officer at privacy@slackify.com.

9. Policy Review and Updates
   This policy will be reviewed annually and updated as necessary to reflect changes in our services, legal requirements, or best practices in data protection.

Last Updated: October 06, 2024