Called privacy policy

Called is a Slack app that turns a question into a recorded prediction. People predict before a deadline, predictions lock at close, and a resolver settles the result. This policy covers the data Called collects when a workspace installs it, and the data collected by this website.

• -Slack workspace and account identifiers: your team ID, channel IDs, and the Slack user IDs of the person who creates a call, the people who predict on it, and the assigned resolver.
• -The Slack OAuth access token issued when your workspace installs Called, scoped to: commands, chat:write, chat:write.public, im:write, users:read.
• -The content you post: the question text of a call, the prediction text or value each participant submits, the format, the deadline, any resolution notes or optional non-monetary consequence you attach, and the result with any evidence recorded at settlement. Evidence may be a link, a quote, or an attachment reference.
• -A permalink to the original Slack message a call was created from.
• -If you subscribe to a paid plan: your workspace identifier, a subscription ID and customer ID issued by our payment provider, the plan, and the billing period dates. Payment card details are collected and processed entirely by Paddle.com Market Ltd, our payment provider and merchant of record. Called never receives or stores your card number.
• -Display names, resolved at the moment a call or summary is rendered using Slack's own API. These are used only to render that output. They are cached in memory and not stored in our database.
• -Standard server logs generated by normal operation: timestamps, error messages, and workspace or event identifiers.

We do not read or store Slack messages that have not been turned into a call or a prediction. We do not collect data for advertising, and we do not sell personal data. This website uses no tracking cookies and no third-party analytics.

• -To operate the service: creating calls, collecting predictions, locking them at the deadline, settling results, and running the command surface.
• -To bill you for a paid plan.
• -To keep the service secure and to diagnose problems.

Our legal bases are: performance of our contract with you, which covers operating the service and billing paid plans; our legitimate interest in keeping the service secure and diagnosing faults; and compliance with legal obligations such as tax record-keeping.

Called has no special handling for sensitive personal data, such as health or biometric data. Please do not post that kind of information as question, prediction, or evidence text.

• -Application data: PostgreSQL, hosted on a Hostinger virtual private server located in the European Union.
• -Billing and payment data: Paddle.com Market Ltd. Paddle's own privacy policy at paddle.com/legal/privacy sets out how they handle it.
• -Anything outside what Called records remains governed by Slack's own privacy policy.

Data is held within the European Union. Where a processor transfers data outside the EU or EEA, that transfer relies on an adequacy decision or on Standard Contractual Clauses.

• -Slack Technologies, LLC, the platform Called operates within.
• -Paddle.com Market Ltd, merchant of record for the sale of paid plans. They handle payment processing, subscription management, tax compliance, and invoicing, for paying workspaces only.
• -Hostinger International Ltd, our infrastructure host, with no independent access to your data.
• -Professional advisers in law and accounting, and public authorities, where required by law.

We share data with no other third party, and we do not sell personal data.

Calls, predictions, results, and your workspace's OAuth token are kept for as long as Called remains installed. Uninstalling Called revokes and deletes the stored OAuth token immediately. Recorded calls and predictions are not deleted automatically on uninstall, so that a reinstalled workspace keeps its history. They are deleted on request. You can request deletion of your workspace's data at any time by emailing miguel@neuronetix.be, and we will action it within 30 days. Billing records are retained by Paddle for as long as tax and accounting law requires.

We apply appropriate technical and organisational measures to protect this data. Traffic is encrypted in transit over TLS. Slack OAuth tokens are stored server-side and never exposed to the browser. Access to production systems is restricted to the operator. Slack request signatures and payment webhook signatures are verified before any payload is processed.

If you are in the EU, the EEA, or the UK, you have the right to access, rectify, erase, restrict, or port your personal data. You may object to processing carried out on the basis of our legitimate interests, and withdraw consent where processing relies on it. You may also lodge a complaint with your supervisory authority. In Belgium that is the Data Protection Authority, at gegevensbeschermingsautoriteit.be. To exercise any of these rights, email miguel@neuronetix.be. We respond within one month.

This website sets no analytics or marketing cookies. Paddle's checkout sets cookies that are strictly necessary to process your payment.

Called is a workplace tool. It is not directed at children, and we do not knowingly collect data from them.

We will update the effective date above when this policy changes. For material changes, we will do our best to notify installed workspaces directly.

Questions about this policy or your data: miguel@neuronetix.be.