Privacy Policy

Last updated: March 16, 2026

Clipsus ("we", "our", "the app") is a Slack application that automates birthday celebrations in workspaces. This policy describes what data we collect, how we use it, and your rights.

1. Data We Collect

When you install and use Clipsus, we collect and store the following data:

• Slack workspace ID and bot tokens — required to operate within your workspace.
• Slack user IDs — to identify workspace members. We do not store names or email addresses permanently; they are fetched in real time from the Slack API when needed.
• Birthday dates (month and day only) — provided by users or admins. We never collect birth year.
• Greeting card messages and GIF URLs — text and media that teammates contribute to birthday greeting cards.
• Workspace settings — announcement channel, posting time, timezone, and feature preferences configured by admins.
• User preferences — opt-out choices for celebrations and greeting requests.

2. How We Use Your Data

We use collected data exclusively to provide the Clipsus service:

• Scheduling and posting birthday announcements
• Sending greeting card request DMs to teammates
• Compiling and displaying greeting cards
• Creating and managing birthday coordination channels
• Generating PDF exports of greeting cards
• Respecting user opt-out preferences

We do not sell, rent, or share your data with third parties. We do not use your data for advertising or analytics beyond basic service operation.

3. Data Storage and Security

All data is stored in a PostgreSQL database hosted on Railway.app infrastructure. Data is transmitted over encrypted connections (TLS). Access to the database is restricted to the application service only.

4. Data Retention

We retain your data for as long as the app is installed in your workspace. When the app is uninstalled, workspace data (settings, birthdays, greeting cards) is retained for 30 days in case of re-installation, then permanently deleted.

5. Your Rights

• Access — Any user can view their own birthday and preferences from the Clipsus App Home tab.
• Correction — Users can edit their birthday at any time from the App Home tab.
• Deletion — Users can remove their birthday from the App Home tab. Admins can remove any user's birthday. To request complete data deletion, contact [email protected].
• Opt-out — Users can opt out of birthday celebrations, greeting card requests, or both from the App Home tab.

6. Slack Permissions

Clipsus requests only the Slack permissions necessary to function:

• chat:write — Post birthday announcements and send DMs
• im:write, im:history — Send and update direct messages
• users:read — Look up user display names for announcements
• channels:read, channels:join — Access announcement channel membership
• groups:write — Create private birthday coordination channels
• files:write — Upload PDF greeting card exports

7. Third-Party Services

• Klipy API — Used for GIF search when composing greeting cards. Search queries are sent to Klipy; no user data is shared.
• Google Sheets API — Used only when admins import birthdays from a Google Sheet. The sheet URL is provided by the admin; we access it as a public export.

8. Children's Privacy

Clipsus is a workplace tool and is not intended for use by children under 16.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a message in installed workspaces.

10. Contact

For privacy questions or data requests, email [email protected].