Privacy Policy
Last updated: January 22, 2025
1. Introduction
At Crashtify, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our incident management platform and related services.
Please read this Privacy Policy carefully. By using Crashtify, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use our services.
2. Information We Collect
Information You Provide
- Account Information: Name, email address, company name, and workspace details when you register or connect via Slack OAuth.
- Incident Data: Information you submit through crash reports, including descriptions, severity levels, custom fields, and attachments.
- Communications: Messages and feedback you send to us through support channels.
Information Collected Automatically
- Slack Workspace Data: When you install our Slack app, we access workspace information, channel data (where the bot is invited), and message history for AI-powered suggestions.
- Usage Data: Information about how you interact with our services, including features used, actions taken, and timestamps.
- Device Information: Browser type, operating system, IP address, and device identifiers when accessing our web dashboard.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our incident management services.
- Process and manage crash reports within your workspace.
- Generate AI-powered suggestions based on your knowledge base and incident history.
- Integrate with third-party services (Linear, Jira, etc) as configured by you.
- Send service-related notifications and updates.
- Respond to your inquiries and provide customer support.
- Analyze usage patterns to improve our services.
- Detect and prevent security threats or fraudulent activity.
- Comply with legal obligations.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party vendors who assist us in providing our services (hosting, analytics, AI processing).
- Integrations: Third-party services you choose to connect (Linear, Jira, etc.) to sync incident data.
- Legal Requirements: When required by law, legal process, or to protect our rights and safety.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Specifically:
- Account Data: Retained until you delete your account or request deletion.
- Incident Data: Retained according to your workspace settings and retention policies.
- Usage Logs: Retained for up to 12 months for analytics and security purposes.
- Backup Data: May be retained for up to 30 days after deletion for disaster recovery.
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
- Multi-tenant architecture with strict data isolation between workspaces.
- Regular security audits and vulnerability assessments.
- Access controls and authentication mechanisms.
- Secure OAuth 2.0 integration with Slack.
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data Portability: Request your data in a portable format.
- Opt-Out: Opt out of marketing communications at any time.
- Withdraw Consent: Withdraw consent where processing is based on consent.
To exercise these rights, please contact us.
8. Slack Data and Permissions
When you connect Crashtify to your Slack workspace, we request specific permissions to provide our services:
- Channel Access: To post incident reports and read messages for building your knowledge base (only in channels where the bot is invited).
- User Information: To identify users creating and assigned to incidents.
- Commands: To enable /crash and /crash-admin slash commands.
You can revoke Crashtify's access at any time from your Slack workspace settings. Revoking access will disable Crashtify functionality but will not automatically delete existing data.
9. AI and Machine Learning
Crashtify uses AI to provide intelligent suggestions for incident resolution:
- AI suggestions are generated based on your workspace's knowledge base and incident history.
- Your data is processed by third-party AI providers (e.g., OpenAI) under strict data processing agreements.
- Your data is not used to train general AI models without your explicit consent.
- You can disable AI suggestions in your workspace settings.
10. Cookies and Tracking
We use cookies and similar technologies on our web dashboard:
- Essential Cookies: Required for authentication and basic functionality.
- Analytics Cookies: To understand how users interact with our dashboard (can be disabled).
You can control cookies through your browser settings. Disabling essential cookies may impact functionality.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by relevant authorities.
- Data processing agreements with all service providers.
- Compliance with applicable data protection laws.
12. Children's Privacy
Crashtify is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website.
- Updating the "Last updated" date.
- Sending an email notification for significant changes.
Your continued use of Crashtify after changes become effective constitutes your acceptance of the revised policy.