Privacy Policy

Last updated: May 24, 2026

1. Introduction

At Crashtify, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our incident management platform and related services.

Please read this Privacy Policy carefully. By using Crashtify, you consent to the data practices described in this policy. If you have questions about any part of it, we're happy to explain. Feel free to reach out and we'll walk you through it.

2. Information We Collect

Information You Provide

  • Account Information: Name, email address, company name, and workspace details when you register or connect via Slack OAuth.
  • Incident Data: Information you submit through incident reports, including descriptions, severity levels, custom fields, and attachments.
  • Communications: Messages and feedback you send to us through support channels.

Information Collected Automatically

  • Slack Workspace Data: When you install our Slack app, we access workspace information, channel data (where the bot is invited), and message history for AI-powered suggestions.
  • Usage Data: Information about how you interact with our services, including features used, actions taken, and timestamps.
  • Device Information: Browser type, operating system, IP address, and device identifiers when accessing our web dashboard.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our incident management services.
  • Process and manage incident reports within your workspace.
  • Generate AI-powered suggestions based on your knowledge base and incident history.
  • Integrate with the tools you connect to Crashtify, as configured by you.
  • Send service-related notifications and updates.
  • Respond to your inquiries and provide customer support.
  • Analyze usage patterns to improve our services.
  • Detect and prevent security threats or fraudulent activity.
  • Comply with legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party vendors who assist us in providing our services (hosting, analytics, AI processing).
  • Integrations: Services you choose to connect to Crashtify to sync incident data.
  • Legal Requirements: When required by law, legal process, or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

  • Account Data: Retained until you delete your account or request deletion.
  • Incident Data: Retained according to your workspace settings and retention policies.
  • Usage Logs: Retained for up to 12 months for analytics and security purposes.
  • Backup Data: May be retained for up to 30 days after deletion for disaster recovery.

6. Data Security

We use technical and organizational safeguards designed to protect your information:

  • Encryption of data in transit and at rest.
  • Workspace-level data isolation. No data crosses between tenants.
  • Access controls limiting who can reach your data.
  • Secure OAuth authentication for Slack integration.

We take security seriously and apply multiple layers of protection. As with any online service, no system is completely infallible. If something ever goes wrong, we'll be transparent about it.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. Here's what you can request:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Data Portability: Request your data in a portable format.
  • Opt-Out: Opt out of marketing communications at any time.
  • Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us.

8. Slack Data and Permissions

When you connect Crashtify to your Slack workspace, we request specific permissions to provide our services:

  • Channel Access: To post incident reports and read messages for building your knowledge base (only in channels where the bot is invited).
  • User Information: To identify users creating and assigned to incidents.
  • Commands: To enable /crash and /crash-admin slash commands.

You can revoke Crashtify's access at any time from your Slack workspace settings. If you disconnect, we retain related workspace data for up to 30 days in case you reconnect, unless you request deletion sooner.

9. AI and Machine Learning

Crashtify uses AI to provide intelligent suggestions for incident resolution:

  • AI suggestions are generated based on your workspace's knowledge base and incident history.
  • Your data is processed by our AI infrastructure under strict data processing agreements.
  • Your data is not used to train general AI models without your explicit consent.
  • You can disable AI suggestions in your workspace settings.

10. Cookies and Tracking

We use cookies and similar technologies on our web dashboard:

  • Essential Cookies: Required for authentication and basic functionality.
  • Analytics Cookies: To understand how users interact with our dashboard (can be disabled).

You can control cookies through your browser settings. Disabling essential cookies may impact functionality.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by relevant authorities.
  • Data processing agreements with all service providers.
  • Compliance with applicable data protection laws.

12. Children's Privacy

Crashtify is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website.
  • Updating the "Last updated" date.
  • Sending an email notification for significant changes.

If we make material changes, we'll notify you by email before they take effect. You'll always have time to review before they apply to you.