Overview
PrizeBot is a Slack-based rewards and recognition app. Workspace members give rewards in Slack using configured emoji, track balances, redeem prizes, participate in raffles, use the spin wheel, and receive automated birthday and work anniversary celebrations.
We collect, store, or temporarily cache only the information reasonably needed to provide the service, operate workspace features, support customers, handle billing and account administration, maintain security, and comply with legal obligations.
Information we collect, store, or temporarily cache
Depending on how PrizeBot is used, we may collect, store, or temporarily cache:
- Slack workspace identifiers and app installation details
- Slack user IDs and workspace access or role records needed to operate the service
- Limited Slack profile information such as display names and profile images, when needed to display users inside the product or in Slack messages
- Reward activity, including who gave or received rewards and when
- Reward balances, prize catalog records, redemption records, raffle entries, spin activity, spin ticket balances, and related activity
- Celebration data such as birthday dates, work anniversary dates, opt-out preferences, and related announcement records, when configured by workspace administrators or individual users
- Workspace settings configured in PrizeBot, such as reward types, time zone, raffle settings, spin settings, celebration settings, and admin or manager assignments
- Billing, checkout, subscription, and service administration records, including limited Stripe-related identifiers and contact details returned during billing flows
Slack message access
PrizeBot may receive message content from Slack in channels where PrizeBot has been added, or where Slack otherwise provides relevant events needed to operate the service. PrizeBot uses that access only to detect and process reward activity, operate related workspace features, and troubleshoot issues.
PrizeBot does not store full Slack message content. Instead, it stores the resulting activity records needed to operate the service, such as who gave a reward, who received it, the reward type, and when it occurred.
How we use information
We use information we receive or collect to:
- Provide PrizeBot features inside Slack and in the PrizeBot web dashboard
- Detect configured reward activity in Slack and process resulting transactions
- Track balances, prize redemptions, raffle entries, spin tickets, spin results, and related activity
- Manage and deliver birthday and work anniversary celebrations, including scheduled announcements and optional reward or spin ticket grants
- Display workspace users, leaders, admins, managers, and related information
- Support workspace users and administrators
- Operate billing, checkout, account management, and subscription administration
- Maintain service security, reliability, abuse prevention, and troubleshooting
- Comply with legal obligations and enforce our terms
- Improve PrizeBot over time
Profile information and caching
PrizeBot may fetch limited Slack profile information, such as display names and profile images, to show users inside the product and in Slack messages. This information may be temporarily cached for performance. PrizeBot does not permanently store profile images as part of its main application data.
Uploaded prize images
Workspace administrators may upload images for prize catalog items. PrizeBot stores those images and related file metadata only as needed to operate and display the prize shop and related redemption workflows.
Uploaded prize images may be stored with infrastructure or storage providers that help us operate PrizeBot. When a workspace administrator removes or replaces a prize image, the old image may be deleted from active use, though related records may remain in backups or logs for a limited additional period.
Public website and browser-tool analytics
PrizeBot's free spin wheel and raffle drum run in your browser. Names, entries, prize lists, and draw results entered into these tools are not sent to PrizeBot.
We record limited usage events for public pages and browser tools, such as page views, engaged visits, completed spins or draws, and selections of free-trial links. We also record whether a trial checkout started, checkout completed, and Slack installation activated the workspace trial. These records may contain the public page path, referring site or PrizeBot page, campaign labels, event time, short-lived random session and event IDs, a one-way install identifier, the activated workspace ID, and coarse device, browser, operating-system, and probable-bot categories.
A short-lived first-party cookie keeps events from the same visit together. These records do not contain names, entries, prizes, results, URL query strings, IP addresses, raw user-agent strings, exact locations, or browser fingerprints.
Celebration data
When workspace administrators enable birthday or work anniversary celebrations, PrizeBot stores the dates, opt-out preferences, and related configuration provided by administrators or individual users. This data is used solely to schedule and deliver celebration announcements and optional reward or spin ticket grants.
Users can opt out of birthday or work anniversary celebrations through their profile settings, or a workspace administrator can manage opt-out preferences on their behalf.
Slack data use restrictions
PrizeBot uses Slack-provided data only to operate the app and related support, billing, security, administrative, and troubleshooting functions.
PrizeBot does not use Slack data for unrelated marketing purposes and does not use Slack data to train general-purpose artificial intelligence or large language models.
Sharing of information
We do not sell personal information. We may share information only as reasonably necessary with service providers that help operate PrizeBot, such as hosting, infrastructure, payment, security, or support tools, or when required by law, legal process, or to protect the rights, security, or integrity of the service.
Data retention
We retain workspace information for as long as PrizeBot is installed and the workspace account is active. This includes reward balances, recognition history, prizes, raffle and spin records, and the settings an admin has configured.
When PrizeBot is uninstalled: your Slack access token is deleted immediately, which ends our ability to read or post anything in your workspace. Remaining workspace records are kept so that reinstalling restores your balances and history, until a workspace owner or admin asks us to delete them.
Deletion on request: a workspace owner or admin can request deletion of their workspace data at any time by emailing support@prizebot.app. We complete verified deletion requests within 30 days. Individual teammates should contact an admin of their workspace, who controls the workspace account and its data.
Billing and tax records are retained for up to 7 years as required by law and are not removed by a deletion request. Copies of deleted records may remain in encrypted backups, archives, and security logs for a limited additional period before those are rotated out. Different categories of information may otherwise be kept for different periods depending on operational, contractual, tax, accounting, legal, or security needs.
Security
We use reasonable administrative, technical, and organizational safeguards to protect information against unauthorized access, misuse, alteration, and disclosure. No method of transmission or storage is completely secure, but we apply safeguards appropriate to the nature of PrizeBot and the information involved.
Access, export, correction, and deletion requests
Workspace administrators control PrizeBot installation and configuration. To access, correct, export, transfer, or delete information associated with your workspace or use of PrizeBot, contact your workspace administrator or reach out to us directly at support@prizebot.app.
Depending on where you live, you may have rights regarding access to, correction of, export of, transfer of, deletion of, or restriction of certain personal information. This may include rights available under laws such as the European Union’s General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) and related California privacy laws.
Even if you are not covered by a specific privacy law, you may still contact us to request access, correction, export, transfer, or deletion of your information, and we will review the request based on the nature of the data, our legal obligations, and the operation of the service.
We may need to verify identity, workspace authority, or account ownership before fulfilling certain requests.
Changes to this policy
We may update this Privacy Policy as PrizeBot evolves or as legal or operational requirements change. When we do, we will update the "Last updated" date on this page.
Contact
For privacy questions or data access, export, correction, or deletion requests, contact support@prizebot.app.