Privacy Policy

1. Introduction

RetroRail ("we", "us", and "our") provides AI-powered retrospective tooling for teams using Slack. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

2. Information We Collect

• Account and workspace data: workspace IDs, user IDs, and basic profile metadata from connected platforms.
• Retro content: retrospective items, comments, votes, action items, and status updates submitted through RetroRail.
• Usage data: logs, feature interactions, timestamps, device/browser metadata, and diagnostics.
• Billing and plan data: subscription tier and billing-related metadata handled through payment providers.

3. How We Use Information

• Provide, operate, and improve RetroRail features.
• Generate AI-assisted grouping, summaries, and action-item recommendations.
• Maintain service reliability, security, and abuse prevention.
• Communicate service updates, policy changes, and support responses.
• Meet legal and contractual obligations.

4. Legal Bases (Where Applicable)

Where required by law, we process personal data under one or more legal bases, including performance of a contract, legitimate interests, legal obligations, and consent where applicable.

5. Sharing of Information

We may share information with infrastructure providers, analytics vendors, customer support tools, and payment processors that help us run RetroRail. We may also disclose information when required by law or to protect rights, safety, and security.

6. Data Retention

We retain data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention timelines may vary by data category and workspace settings.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of personal data. You may also object to certain processing and withdraw consent where processing is based on consent.

9. International Transfers

Your information may be processed in countries other than where you live. We apply appropriate safeguards for cross-border data transfers where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide additional notice as required.