GetCredoPricing

Privacy Policy

Last updated: May 2026

1. Information We Collect

When you use GetCredo, we collect:

  • Account information: your name, email address, and Slack User ID obtained through Slack OAuth
  • Workspace data: Slack team ID, bot token (encrypted), workspace name and timezone
  • Employee data: Slack User IDs, names, job titles, and onboarding progress of your team members
  • Usage data: onboarding flow content, step completions, task submissions, and audit logs
  • Payment information: handled by our payment processor (Paddle); we do not store card details

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the GetCredo service
  • Send Slack messages to employees as part of onboarding flows you configure
  • Process subscription payments and send billing notifications
  • Respond to support requests and technical issues
  • Monitor service performance and prevent abuse

3. Data Storage and Security

Your data is stored on secured servers hosted on Railway (PostgreSQL) and Vercel (application). Slack bot tokens are encrypted at rest using AES-256-GCM. We use HTTPS for all data in transit. We retain data for as long as your account is active. You may request deletion of your data at any time by contacting us.

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Slack Technologies — to deliver bot messages via their API
  • Paddle — our payment processor, for subscription billing
  • Railway / Vercel — infrastructure providers for hosting and database

5. Cookies

We use a single HTTP-only session cookie for authentication purposes. We do not use tracking or advertising cookies.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at contact@getcredo.io. We will respond within 30 days.

7. Employee Data

GetCredo processes employee data on behalf of your organization. Your organization is the data controller and is responsible for informing employees about data processing and obtaining any required consents under applicable law (including GDPR).

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the admin panel. Continued use of the Service after changes constitutes acceptance of the updated Policy.

9. Contact

For privacy-related questions or data requests, contact us at contact@getcredo.io.