Privacy Policy
Effective date: 5 June 2026·Last updated: 5 June 2026
This Privacy Policy describes how Pinguin("we", "us", or "our") collects, uses, and protects information when you use Pinguin, our Slack application and related services (collectively, the "Service").
By installing or using Pinguin, you agree to this Privacy Policy. If you do not agree, do not use the Service.
1. Who we are
Pinguin is a Slack app that helps workspace members compose, schedule, send, and track broadcast messages across Slack channels.
- Service name: Pinguin
- Website: https://usepinguin.com
- Install URL: https://pinguin-slack.fly.dev/slack/install
- Contact: hello@usepinguin.com
If you use Pinguin on behalf of an organization, your organization controls the Slack workspace and is responsible for how its members use the Service.
2. Information we collect
2.1 Information from Slack
When you install or use Pinguin, we receive information from Slack as needed to operate the Service, including:
- Workspace information: Slack workspace (team) ID and name
- User information: Slack user IDs, display names, and profile photos when you send broadcasts as yourself
- Channel information: Channel IDs and names for destinations, audience lists, and delivery tracking
- Message content: Broadcast messages you compose, schedule, send, or edit through Pinguin
- Engagement data: Reactions and thread replies on broadcast messages, fetched from Slack when you view analytics
- OAuth credentials: Bot tokens issued when a workspace installs Pinguin
We do not request user email addresses, passwords, or Slack admin scopes.
2.2 Information you provide
You may provide:
- Broadcast content: Text, formatting, emoji, and images attached to messages
- Audience lists: Named groups of channels you create
- Sender profiles: Custom display names and image URLs you configure
- Schedule settings: Date, time, destination, and sender preferences for scheduled broadcasts
2.3 Information we do not collect
We do not intentionally collect:
- Your full Slack message history
- Direct messages unrelated to Pinguin
- Payment card details (if billing is handled elsewhere)
- Third-party advertising or analytics tracking data
3. Slack permissions
Pinguin requests the following Slack bot scopes:
| Scope | Purpose |
|---|---|
channels:read | List public channels for destinations and audience lists |
groups:read | List private channels the bot has been invited to |
channels:join | Join public channels in audience lists before posting |
channels:history | Read thread replies on broadcasts for analytics |
groups:history | Read thread replies in private channels for analytics |
chat:write | Post and update broadcast messages |
chat:write.customize | Send messages under a custom name and avatar |
users:read | Look up display names and profile photos |
files:read | Attach images uploaded through Slack |
reactions:read | Show reaction data in analytics |
commands | Handle the /broadcast slash command |
Pinguin subscribes to the app_home_opened event to display its Home tab.
For more information about Slack's data practices, see Slack's Privacy Policy.
4. How we use information
We use collected information only to:
- Install and authenticate Pinguin in your workspace
- Send, schedule, update, and deliver broadcasts you create
- Store audience lists, sender profiles, and broadcast history
- Display analytics such as delivery status, reactions, and replies
- Operate, maintain, and improve the Service
- Respond to support requests and security issues
We do not sell your data, use it for advertising, or use workspace content to train AI models.
5. How we store information
5.1 Stored data
Pinguin stores the following on persistent infrastructure, scoped by Slack workspace ID:
- OAuth installation tokens and metadata
- Short-lived OAuth state tokens during installation
- Broadcast records (content, delivery status, channel details, timestamps)
- Audience lists
- Sender profiles
- Scheduled broadcasts
5.2 Data not stored long-term
- Reaction and reply details are fetched from Slack when you view analytics and are not stored as a separate long-term database
- Compose previews are held temporarily in memory during the send flow
5.3 Hosting
The Service is hosted on Fly.io in the London, UK (lhr) region at https://pinguin-slack.fly.dev.
Slack communication uses Slack APIs and Socket Mode (an outbound WebSocket connection). Aside from OAuth and health checks, Pinguin does not expose a public webhook for Slack events.
6. How we share information
We do not sell or rent your information.
We share information only:
- With Slack, to deliver the Service
- With Fly.io, our hosting provider
- When required by law, such as in response to a valid legal request
- To protect rights and safety, where we believe disclosure is necessary to prevent harm or fraud
We do not use third-party analytics, advertising, or data brokers in the Pinguin application.
7. Data retention
- Broadcasts, audience lists, sender profiles, and scheduled messages are retained until you delete them through the app or uninstall Pinguin from your workspace.
- OAuth state tokens expire automatically after a short period.
- When you uninstall Pinguin, Slack revokes the bot token. Stored workspace data may remain until deleted or upon request.
To request deletion of your workspace data, contact us at hello@usepinguin.com.
8. Security
We take reasonable measures to protect information, including:
- HTTPS for production traffic
- OAuth 2.0 with CSRF state verification
- Workspace-scoped data isolation
- App secrets stored as environment secrets, not in source code
- Restricted broadcast editing to the original creator
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
9. Your choices and rights
Depending on your location, you may have rights to:
- Access information we hold about your workspace
- Request correction or deletion of stored data
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
Because Pinguin operates within Slack workspaces, workspace administrators may control installation, permissions, and member access. Contact your workspace admin for access or removal requests within your organization.
To exercise rights directly with us, email hello@usepinguin.com.
10. International transfers
If you access the Service from outside the United Kingdom, your information may be processed in the UK and in locations where our subprocessors operate. We take steps designed to protect information in accordance with this Privacy Policy.
11. Children's privacy
Pinguin is not intended for use by anyone under 16. We do not knowingly collect information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact us
Pinguin
Email: hello@usepinguin.com
Website: https://usepinguin.com