Privacy Policy

1. Overview

Askify is a self-hosted Slack bot designed for internal team polling. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your data.

Because Askify is self-hosted, you maintain full control over where and how your data is stored. This policy describes the data handling practices of the Askify application itself.

2. Data Collection

Askify collects and stores the following data to provide poll functionality:

Poll Data

• Poll questions and descriptions
• Poll options and configuration settings
• Poll type (single choice, multi-select, yes/no/maybe, rating)
• Target channel IDs and message timestamps
• Poll creator user ID
• Scheduled and close timestamps

Vote Data

• Voter user IDs (Slack user IDs)
• Selected options
• Vote timestamps

Template Data

• Template name and configuration
• Template owner user ID
• Creation timestamps

Workspace Data

• Workspace ID
• Channel IDs
• User IDs (for poll creators and voters)

What We DO NOT Collect:

• Message content outside of poll interactions
• Personal information beyond Slack user IDs
• Email addresses or contact information
• Financial or payment information
• Conversation history or channel messages

3. Data Usage

We use the collected data solely to:

• Create and display polls in Slack channels
• Record and tally votes
• Generate and display poll results
• Prevent duplicate voting (vote deduplication)
• Send reminder DMs to non-voters (when enabled)
• Send results DMs to poll creators
• Manage scheduled polls and auto-close functionality
• Store and load poll templates

We do not use your data for advertising, marketing, or any purpose outside of providing poll functionality.

4. Data Storage

Since Askify is self-hosted, all data is stored in your own PostgreSQL database. You have full control over:

• Where your data is physically located
• Who has access to the database
• Data retention policies
• Backup and recovery procedures
• Security configurations

We recommend using a managed database service like Supabase for security, backups, and reliability. Ensure your database follows industry-standard security practices, including encryption at rest and in transit.

5. Anonymous Voting

When anonymous voting is enabled on a poll:

• Voter user IDs are stored in the database for vote deduplication (to prevent voting multiple times)
• Voter names are NOT displayed in poll results messages
• Voter names are NOT displayed in results DMs or shared results
• Only vote counts and percentages are shown
• The poll creator cannot see who voted for which option

Anonymous voting protects voter privacy while maintaining poll integrity by preventing duplicate votes.

6. User Rights

You have the following rights regarding your data:

Access Your Data

• Use /askify list to view all polls you've created
• View your votes within poll messages
• Access your templates via /askify templates

Delete Your Data

• Close polls to disable voting (polls remain in database)
• Delete templates individually
• Contact your workspace administrator to remove poll data from the database directly

Retract Votes

• Click the same vote button to retract your vote (if vote change is enabled)
• Your vote is removed from the poll immediately

Uninstall

• Uninstalling the Askify Slack app stops data collection immediately
• Existing data remains in your database until manually deleted by your administrator

7. Security

Askify implements the following security measures:

• Request verification using Slack's signing secret to prevent unauthorized access
• Socket Mode communication (no public endpoints required)
• Parameterized database queries to prevent SQL injection
• Environment-based credential management (never hardcoded)
• Vote deduplication to maintain poll integrity

As a self-hosted application, you are responsible for securing your deployment, including:

• Keeping environment variables and API tokens secure
• Maintaining database security and access controls
• Updating to the latest Askify version for security patches
• Following Slack's security best practices

8. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• GitHub Issues: github.com/jnahian/askify-bot/issues
• GitHub Repository: github.com/jnahian/askify-bot

Since Askify is open-source and self-hosted, your workspace administrator has primary responsibility for data management and user privacy within your organization.