Privacy Policy

Last updated: March 2025

1. Information We Collect

Email address

Collected via the waitlist form. Used only to notify you when access is granted.

Google account information

Your name and email are returned from Google OAuth when you connect a Firebase project. This information is used to identify the connection and is not stored beyond what is operationally necessary.

Firebase OAuth token

Stored encrypted (AES-256-GCM) on our backend to execute Remote Config commands on your behalf. No Firebase project credentials or service account keys are ever stored.

Slack workspace data

Team ID, user ID, channel ID, and command payloads are received when you interact with the Configbot Slack app. This data is used to route commands and return results to your Slack thread.

2. How We Use Information

  • To operate the Service: route commands, identify app families, and return results to your Slack thread.
  • To notify waitlist members when access is granted.
  • We do not use your data for advertising or sell it to third parties.

3. Data Storage and Security

OAuth tokens are encrypted at rest using AES-256-GCM. We do not sell or share your data with third parties except as required to operate the Service (Google OAuth, Slack API). We use industry-standard security practices to protect your data, but no method of transmission or storage is 100% secure.

4. Third-Party Services

The Service integrates with the following third-party platforms:

  • Google — OAuth and Firebase Remote Config API. Subject to Google's Privacy Policy.
  • Slack — Bot platform for receiving and responding to commands. Subject to Slack's Privacy Policy.

5. Data Retention

  • Waitlist email addresses are retained until the waitlist closes or you request deletion.
  • OAuth tokens are retained until you disconnect the integration or request deletion.
  • Slack command payloads are not retained after a command is processed.

6. Your Rights

You can request deletion of your data at any time by contacting us. Disconnecting the OAuth integration from your Slack workspace removes your stored Firebase OAuth token. If you are in the EU/EEA or California, you may have additional rights under GDPR or CCPA — contact us to exercise them.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

8. Contact

Questions about this Privacy Policy? Email hello@configbot.app.