Stipulate LogoStipulate
Your Privacy Matters

Privacy Policy

Last Updated: December 17, 2024

Stipulate Inc. is committed to protecting your privacy and ensuring the security of your data.

1. Introduction

This Privacy Policy describes how Stipulate Inc. ("Stipulate," "we," "us," or "our") collects, uses, and shares information when you use our Slack application and related services (collectively, the "Service").

By using Stipulate, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Information from Slack

When you install Stipulate in your Slack workspace, we collect:

  • Workspace information (workspace ID, name)
  • User information (user ID, name, email address)
  • Channel information (channel IDs, names) for channels where Stipulate is added
  • Message content from channels where Stipulate is added (to identify action items and project information)
  • User interactions with Stipulate (slash commands, button clicks, form submissions)

2.2 Information You Provide

We collect information you provide directly through:

  • Project creation and management
  • Action item creation and updates
  • Support requests and communications
  • Account settings and preferences

2.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

  • Usage data (features used, frequency of use)
  • Technical data (IP address, browser type, device information)
  • Log data (access times, error logs)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Analyze Slack conversations to identify action items and project information
  • Send reminders and notifications about action items
  • Provide the Manager Dashboard with project insights
  • Respond to your support requests and communications
  • Monitor and analyze usage patterns to improve our Service
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

4. AI Processing

Stipulate uses artificial intelligence (AI) to analyze Slack conversations and identify action items. Specifically:

  • We use OpenAI's services to process message content from channels where Stipulate is added
  • Message content is sent to OpenAI's API for analysis and action item extraction
  • OpenAI processes this data in accordance with their own privacy policy and data processing agreements
  • We do not use your data to train AI models
  • OpenAI does not retain your data beyond the processing period required to provide the service

For more information about OpenAI's data practices, please visit OpenAI's Privacy Policy.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Slack: For core application functionality and user authentication
  • OpenAI: For AI-powered action item identification and analysis
  • MongoDB Atlas (AWS): For secure data storage in the United States
  • Render: For application hosting and infrastructure

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If Stipulate is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Data encryption in transit and at rest
  • Secure data storage in MongoDB Atlas with AWS infrastructure
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Workspace isolation to prevent cross-workspace data access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

  • Active account data is retained while you use our Service
  • When you uninstall Stipulate or your subscription ends, we delete your data within 14 days
  • Some information may be retained longer if required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements)
  • Aggregated, anonymized data may be retained indefinitely for analytics and service improvement

8. Your Rights and Choices

You have certain rights regarding your personal information:

  • Access: You can request access to the personal information we hold about you
  • Correction: You can request correction of inaccurate information
  • Deletion: You can request deletion of your information by uninstalling Stipulate from your Slack workspace
  • Data Portability: You can request a copy of your data in a structured, machine-readable format
  • Opt-Out: You can opt out of certain data collection by adjusting your Slack workspace settings or uninstalling the app

To exercise these rights, please contact us at support@stipulate.work.

9. California Residents' Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You can request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information. If our practices change, we will update this policy and provide an opt-out mechanism
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, please contact us at support@stipulate.work with "California Privacy Rights" in the subject line.

Do Not Sell My Personal Information: We do not sell personal information to third parties. We share information only as described in Section 5 of this Privacy Policy.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date at the top of this policy
  • Sending a notification through Slack (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: support@stipulate.work

Company: Stipulate Inc.

Location: Delaware, United States

For support inquiries, please visit our Support Page.