Terms of Use & Privacy

Last updated: May 2025

These Terms of Use apply exclusively to the use of our application within Slack. By using our app for Slack, you agree to the following terms and the associated data processing practices.

1. Data We Collect

We are the data controller in accordance with the GDPR (General Data Protection Regulation) for all data processing activities related to this app.

We only collect and process data that is strictly necessary for the technical operation of the app. No data is sold or commercially transferred to third parties.

We do not store directly identifiable personal data such as real names or private email addresses, unless required for billing purposes.

Specifically, we collect the following data:

  • Slack IDs of organizations, teams, and users (pseudonymized)
  • Slack bot tokens (stored in encrypted form)
  • Approval request data (status, Slack IDs of requesters and approvers, comments)
  • Settings related to approval requests (e.g., reminder intervals)
  • Slack channel IDs of discussion channels created on user request
  • Timestamps, message links, and channel IDs of messages sent by the app
  • Links to files attached to approval requests (no access to file content)
  • Names and Slack IDs of defined approver groups
  • Email address of the billing subscriber (only for billing purposes)

2. Purpose of Data Processing

We process data based on Art. 6(1)(b) and (f) GDPR, for the following purposes:

  • To provide and maintain the core functionality of the app
  • To improve user experience and personalize usage
  • To fulfill contractual obligations (e.g., billing and subscription management)
  • To offer customer support and technical assistance
  • To analyze and optimize the app and our services

Data will only be shared with third parties if necessary to fulfill the above purposes (e.g., payment processors). If data is transferred outside the EU, this is done in compliance with GDPR (e.g., under an adequacy decision or using standard contractual clauses).

3. Data Retention

We retain personal data only for as long as necessary to provide the app’s services, fulfill contractual obligations, or comply with legal requirements.

Specifically:

  • Slack metadata (e.g., user IDs, channel IDs, timestamps) is retained only as long as needed for the app’s operation and functionality.
  • Billing-related data (e.g., subscriber email address, transaction records) is retained for up to 10 years, as required by commercial and tax laws.
  • Support-related data (e.g., inquiries or email correspondence) is retained for up to 1 year after resolution.
  • Access tokens are stored encrypted and deleted promptly upon app uninstallation or revocation.

If you delete your team’s data or request deletion, we will erase all associated records within 30 days, unless retention is required by law.

4. Data Deletion

You can request the deletion of all stored data associated with your team or user account at any time.

To do so, contact us at: 📧 info@centoor.com

We will process your request and delete all applicable data within 30 days, unless retention is required by law (e.g., for billing or audit purposes).

5. Cookies

Our website does not use cookies or tracking technologies.

6. Data Security

We implement technical and organizational measures to protect your data, including:

  • Encryption of sensitive data (e.g., API tokens)
  • Access restrictions to authorized personnel only
  • Data transfer exclusively via encrypted connections (HTTPS)

Despite these safeguards, we cannot guarantee 100% security due to the inherent risks of internet data transmission.

7. Changes to These Terms

We reserve the right to modify these terms as needed. The latest version will always be published on our website.

For significant changes, we will notify users appropriately (e.g., via email or Slack message).

By using our approve app for Slack and website, you agree to these Terms of Use and the described privacy practices.

9. Contact

If you have questions about data protection or would like to exercise your rights under GDPR, please contact us at:
📧 info@centoor.com