Privacy policy

Who is responsible

ZINTORA is responsible for the information described in this policy. For privacy questions or requests, email [email protected].

Information we handle

When a Slack workspace installs Zintora Gifts, we store its Slack workspace ID and name, the installing Slack user ID, and an encrypted bot access token. When a campaign is created, we store its name and message, selected gift products, recipient Slack IDs and display names, and delivery status.

We do not request permission to read members’ email addresses from Slack. When a recipient opens a private gift link, the claim page handles the gift choice, recipient-provided name, optional email address, and delivery address. We store a hash of the claim token, not the token itself.

The Slack installation flow also uses a short-lived, HTTP-only cookie to protect OAuth state. Slack sends signed command, interaction, and uninstall event requests to our service; these requests include workspace and user identifiers needed to process the action.

How we use it

We use workspace and recipient information to create gift campaigns, send the requested Slack direct messages, provide delivery and claim status, and arrange fulfilment. We use claim addresses to arrange delivery and resolve related support requests. If provided, we use a recipient email address only for gift-related follow-up. We do not use Slack information for advertising or to train AI models.

Sharing and security

Slack processes the installation, commands, and direct messages in Slack. ZINTORA stores campaign and claim records in its application database. Bot tokens are encrypted at rest, claim tokens are stored as hashes, and claim pages are excluded from analytics tracking. We do not publish a recipient’s address in Slack.

How long information is kept

On app uninstall, we clear the workspace token and cached member records. Campaign history, recipient identifiers, claim status, and delivery details are currently retained until a ZINTORA administrator deletes them. Contact us to request deletion; we are working toward a defined automatic retention period.

Your requests

You may ask us to access, correct, export, or delete personal information associated with a gift campaign or claim. Email [email protected] and describe the request and the workspace or gift involved. We may ask for enough information to locate the record and protect it from unauthorized disclosure.

Contact

For support, use our contact page or email [email protected].