Privacy policy.

Information We Collect

Sincere stores the following:

• Workspace installation data from Slack's OAuth flow (team ID, bot tokens), needed to post messages into your workspace
• The date your workspace first installed Sincere, with its workspace ID, which sets the start of the 14-day free trial
• The text of messages submitted via /sincere, together with their agree/disagree totals and the workspace and channel they were posted in, stored without any link to the author
• Hashed (HMAC) tokens used to enforce one vote per message, one post per day, and content-moderation limits
• If your workspace sets up reports: which channel they are posted to, and the timezone the weekly digest is scheduled in. Reports themselves are generated from the messages and vote totals above. We keep no list of who may view them
• If your workspace subscribes to a paid plan: a billing record for the workspace (subscription and customer reference numbers from our payment provider, plan, status, and renewal date). It identifies the paying workspace, never who posted or voted, and we never receive card details

Your Slack user ID is processed in memory when you interact with the bot, but it is never written to the database in raw form. One exception: if someone mentions you in an anonymous message, the message is stored as Slack sent it, and Slack writes a mention as your user ID. Wherever Sincere shows the message, including reports and exports, the mention appears as a plain @name.

How We Use Your Information

We use your information to:

• Provide and Maintain the Application: We use your information to deliver the functionality of our application and ensure it operates smoothly.
• Enforce the Rules: The hashed tokens exist only to enforce one vote per message and one post per day.
• Keep Feedback Safe: Every message is automatically screened before posting, so honest criticism gets through while harassment, threats, and doxxing do not. Rejected messages are not stored.
• Respond to Your Inquiries: We use your information to respond to your questions, requests, and support inquiries.

Sincere is built so that it cannot tie a post or a vote to the person behind it. That link is never stored, so we could not reveal it later even if asked. If misuse ever forces us to change this design, we will update this policy and the anonymity page before any change takes effect; a change can never apply retroactively to messages already posted.

Data Security

We implement appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. However, please note that no method of transmission over the internet is completely secure.

Data Retention

• Posted messages and their vote records are deleted from our database 12 months after posting.
• Rate-limit and moderation tokens expire within 24 hours and are deleted every minute.
• Uninstalling Sincere deletes all data belonging to your workspace: posted messages, vote records, queued submissions, reporting settings, and the installation itself.
• Two workspace-level records are kept after an uninstall. The billing record of a paid subscription stays because the subscription runs independently of the Slack install until it is cancelled. The date your workspace first installed Sincere stays so that installing again does not start a second free trial.
• Deleting our copy does not remove messages from Slack: they were posted publicly in your channel and remain subject to your workspace's own Slack retention settings.

Third-Party Services

Sincere runs on Slack. What Slack itself collects, including the fact that you used a slash command, is governed by Slack's own privacy policy, which we cannot change.

For content moderation, the text of a submitted message is screened using Anthropic's Claude API before it is posted. Only the message text is sent, never your name, user ID, workspace, or any other identifier, and under Anthropic's commercial terms, API data is not used to train their models. We store nothing from that exchange: neither rejected messages nor moderation verdicts are kept.

Our servers and database are hosted by Hetzner in the EU (Germany / Finland), so everything listed under "Information We Collect" is stored there. Traffic to this website and to the bot passes through Cloudflare (DNS, TLS, and content delivery) in transit; Cloudflare stores none of our application data.

Paid plans are sold through Paddle, which acts as merchant of record. If you subscribe, Paddle collects your billing contact and payment details directly; we receive only the billing record described above. Paddle never receives feedback content or member lists.

The chat bubble on this website is provided by Bubblegram. It loads on every page, so Bubblegram sees your IP address and keeps a session token in your browser's local storage; it sets no tracking cookies. If you write to us through it, Bubblegram also receives your message, the email you give, and your browser type, and stores them in the EU. The chat is separate from the product: it never receives feedback content, votes, or anything from Slack.

That is the complete list. It is also kept, with what each provider sees, on our security & trust page. We do not share your information with any other third party, and we do not sell data to anyone.

Your Rights

You have the right to:

• Request the deletion of information that can be tied to your Slack workspace and/or any users belonging to said workspace.

One consequence of the anonymity design: because posts are not linked to the people who wrote them, we cannot selectively delete your posts. A workspace admin can request deletion of all data belonging to the workspace.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

hello@orangevector.io

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website.