Privacy Policy
Last updated: June 3, 2026
What we collect
When you install Vibe Shift, we store your Slack workspace ID, bot access token, and the ID of the user who installed the app. When individual users authorize Vibe Shift to post on their behalf, we store their Slack user ID and personal access token.
We also collect basic usage counters (number of rewrites and replies per workspace per month) to enforce plan limits. We do not collect names, email addresses, or any personal information beyond what Slack provides during installation.
Message content
When you use a slash command or the Generate Reply shortcut, your message text (and, for replies, the few recent messages in that conversation) is sent to OpenAI's API to write the rewrite or reply. We do not save the content of your messages to a database or disk. The original text is held in server memory for up to 24 hours so you can regenerate a rewrite, then discarded. We never use your message content for training, analytics, or any other purpose.
How we use your data
The data we collect is used solely to operate the service: authenticating your workspace, delivering rewrites, enforcing usage limits, and processing billing. We do not sell, rent, or share your data with third parties except as required to operate the service (Slack, OpenAI, Stripe, and our hosting provider).
Third-party services
- Slack — workspace installation and message delivery
- OpenAI — message rewriting (text is not retained by OpenAI for training by default under API terms)
- Stripe — payment processing
- Railway — application hosting
Data retention
Installation data is retained for as long as your workspace has Vibe Shift installed. If you uninstall the app, you can request deletion of your workspace data by emailing us. Usage counters are reset monthly.
Security
Access tokens are stored in a secured database. All data in transit is encrypted via HTTPS. We follow security best practices and review our implementation regularly.
Contact
Questions about this policy? Contact us.