Slacify (“we”) provides a Google Forms add-on that posts form submissions to Slack or other webhooks, and this website where you manage your plan. This policy explains what we collect and why.
What we don’t collect
We never receive your form responses. Messages are rendered and delivered by the add-on inside your own Google account, directly to the webhook you configure.
What we collect
- Your Google account email, to identify your plan (verified with Google on each request).
- Notification rule settings: form id and title, rule name, message template, and the webhook URL (encrypted at rest).
- Usage counts (number of notifications sent) and the last delivery status per rule.
- Add-on usage information linked to your Google account email: the add-on version and your language setting, when you install the add-on, open the sidebar, send a test message or open Help, when you create, edit or delete a notification, daily counts of successful and failed deliveries, and when a notification is held back by your plan’s limits. This never includes your form responses or message contents. We use it to support you and to improve Slacify.
- Messages you send us through the contact form, with the email address you give.
- For website accounts: name, email and password hash (via Supabase Auth).
- Billing records. Payments are processed by Paddle.com, our Merchant of Record; we never see card details.
Website analytics
This website uses Vercel Web Analytics to count page views. It doesn’t use cookies, and it doesn’t identify or track individual visitors across sites.
Google user data
The add-on requests only the scopes it needs: to read the current form’s structure and responses (to build messages locally), to run on form submission, to make outbound requests to your webhook, and to know your email address. Data obtained through Google APIs is used only to provide these features, is never sold, never used for advertising, and never transferred to third parties except as required to deliver the message you configured. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.
We do not use data obtained through Google Workspace APIs (including Google Forms™ data) to develop, improve or train generalized or non-personalized AI or machine learning models.
How we protect your data
We use the following safeguards to protect sensitive data, including data obtained through Google APIs:
- Encryption in transit: all traffic between the add-on, this website and our servers uses HTTPS (TLS).
- Encryption at rest: webhook URLs are encrypted with AES-256-GCM before they are stored, and our database provider encrypts all stored data at rest.
- Data minimization: form responses are processed only inside your own Google account and are never sent to or stored on our servers.
- Access control: every add-on request is authenticated with a Google OAuth token that we verify with Google and accept only when it was issued to Slacify. Database row-level security ensures each account can access only its own data.
- Restricted internal access: only authorized personnel can access production systems, secrets are kept out of source code, and our logs never record OAuth tokens, webhook URLs or message contents.
- Payments: card details are handled entirely by Paddle.com and never reach our servers.
Retention and deletion
Deleting a notification removes its settings. Deleting your website account removes your profile and licenses. Add-on usage information and support messages are kept while they help us support you and improve Slacify. To remove add-on data for a Google account, email slacify@zohomail.in and we will delete it within 30 days.
Contact
Questions about privacy or your data? Contact us.