Privacy Policy

1. What Veranda does

When a Slack user adds a supported flag reaction to a message, Veranda retrieves that message from Slack, sends its text to a third-party translation provider, and posts the translation to the original Slack thread. Anyone who can access that Slack conversation may be able to see the translation.

2. Information we collect

Slack installation and workspace information

We collect Slack workspace and enterprise identifiers, workspace name, bot and installer user identifiers, authorized scopes, installation and uninstall timestamps, and an encrypted Slack bot access token. We do not request Slack members' email addresses.

Translation and operational metadata

We collect content-minimized event and service metadata, including Slack event, workspace, requester, channel, and message identifiers; reaction language; processing status and timestamps; quota usage; error stage or code; response duration; and a pseudonymous requester hash in application logs. Requester, channel, and message identifiers are used to retry delivery, send private failure notices, replay a failed job without retaining the message text, and calculate private workspace-level pilot summaries. Those summaries may show aggregate counts of successful translations, requesting members, active channels, and target languages. They do not show individual names, channel names, rankings, or employee-level behavior. This helps us prevent duplicate processing, enforce the trial, diagnose failures, and understand aggregate usage.

Pilot applications and support

If you apply through our Tally form or contact support, we collect the information you submit, such as your name, work email, company, team languages, workspace details, feedback, and correspondence. Please do not submit Slack message content or other confidential information through these forms.

Website information

The current Veranda site does not use first-party analytics or advertising cookies. The embedded Tally form may use technical storage and receive ordinary request information such as IP address, browser type, and device information under Tally's policies.

3. How we use information

• Provide, secure, troubleshoot, and improve the pilot.
• Authenticate Slack workspaces and post requested translations.
• Enforce the 14-day or 100-translation workspace trial.
• Review pilot applications and communicate with participants.
• Prevent abuse, comply with law, and protect users and the service.

We do not sell personal information or share it for cross-context behavioral advertising.

4. Service providers and disclosures

We disclose information only as needed to operate the service, respond to a lawful request, protect rights or safety, or complete a business transition with appropriate safeguards. Current service providers include:

• Slack, which provides workspace authorization, messages, reactions, and delivery of translations.
• Translation subprocessors. The current provider is OpenAI, which processes selected message text to produce translations. Veranda may change providers as the service evolves and will update this policy when a change materially affects data handling.
• Vercel, which hosts the application and operational logs.
• Neon, which hosts the application database.
• Tally, which hosts pilot application forms and responses.
• Resend, which processes inbound and outbound email for Veranda.

These providers may process information in countries other than where you live. Their handling of information is governed by their agreements and privacy terms.

5. Retention

• Slack message text and translations: not retained in Veranda's application database or intentional application logs. Translations posted to Slack remain subject to the workspace's Slack retention settings. The current translation provider's default abuse-monitoring retention may be up to 30 days.
• Workspace, installation, quota, and content-free event metadata: queue copies expire after 24 hours; database records are kept while the app is installed and ordinarily deleted or de-identified within 90 days after uninstall.
• Pilot applications: kept for up to 12 months after the last substantive contact. When deleted from Tally, a submission may remain recoverable in Tally's Trash for up to 90 additional days.
• Email and support correspondence: Resend may retain inbound and outbound email data for up to 30 days. Email forwarded to our support inbox may be kept for up to 24 months after the request is resolved.

We may retain limited records longer when reasonably necessary for security, dispute resolution, legal compliance, or to document a deletion request.

6. Security

We use measures appropriate to the pilot's size and risk, including encrypted Slack tokens, HTTPS transport, least-privilege Slack scopes, separated production infrastructure, and content-minimized logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your choices and requests

A workspace admin can uninstall Veranda at any time. Uninstalling revokes Veranda's Slack access and causes Veranda to clear its stored access token, but it does not automatically remove translations already posted in Slack.

You may ask to access, correct, export, or delete information associated with you or your workspace by emailing support@useveranda.com. We may need to verify your identity or workspace authority. See our Data Deletion Instructions for the process.

Depending on where you live, applicable law may provide additional privacy rights. We will not discriminate against you for making a privacy request.

8. Children

Veranda is a workplace service and is not directed to children under 18. We do not knowingly collect personal information from children through the pilot.

9. Changes

We may update this policy as the pilot changes. We will post the revised policy with a new effective date and provide additional notice when a change materially affects participants' privacy rights.