Privacy Policy for Microsoft Teams
Revised September 1, 2024
Sliday Limited ("us", "we", or "our") operates the Karma Microsoft Teams bot ("Karma bot", the "Service") and the https://karmabot.chat website.
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
This Privacy Policy describes our practices regarding the collection, use, and disclosure of the information we collect from and about you when you use Service web-based and mobile applications owned by Microsoft Corporation.
We collect and store:
Microsoft Teams administrator email for support purposes.
Karma requests information, including organization name, team name, and users' names.
We do not store your IP addresses, nor do we store any project- or communication-specific data except Karma request descriptions.
Log Files: Our servers automatically record information in server logs, such as web requests, browser type and settings, referring/exit pages, URLs, number of clicks, interaction with links on the Service, domain names, landing pages, pages viewed, and timestamps. Log files help us monitor, analyze, improve, and maintain the Service.
Location Information: We do not collect or process location information.
We retain personal data for six months after subscription cancellation or immediately delete it upon user request. Individual user information is anonymized as soon as that user leaves the company.
We process your personal data based on the following legal basis:
Performance of a Contract: Processing is necessary to provide the Service, as outlined in the terms of use. This allows us to manage and operate the Karma bot for Microsoft Teams users effectively.
We are committed to complying with the General Data Protection Regulation (GDPR). This section outlines your rights and our obligations under GDPR.
You have the right to request access to the personal data we hold about you, known as a Subject Access Request (SAR). To submit a SAR, please contact us at hi@karmabot.chat We will respond to all SAR requests within one month, as required by GDPR, unless the request is complex or numerous, in which case we may extend the response time by a further two months.
We maintain a comprehensive data mapping process, enabling us to locate all instances of personal data across our systems. This allows us to identify, retrieve, and manage your personal data effectively when responding to Subject Access Requests or other GDPR-related inquiries.
Personal data requested for erasure under a Subject Access Request will be removed from active systems immediately. Our backup systems operate on a 30-day rolling cycle, where backups are deleted or overwritten after this period. This process ensures that personal data is effectively erased from our systems within 30 days of the initial deletion request, in line with GDPR requirements.
Under applicable data protection laws, you have the following rights:
Right to be Informed: This Privacy Policy serves as notification of what data we collect, why we collect it, and how it is used.
Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: If any of your data is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure: You may request that we delete your personal data. We honor requests for data deletion.
Right to Restrict Processing: Under certain conditions, you may request that we restrict the processing of your data.
Right to Data Portability: You can request a copy of your data in a commonly used format.
Right to Object: You have the right to object to our processing of your personal data for specific purposes.
To exercise any of these rights, please contact us at hi@karmabot.chat
We do not use any form of automated decision-making or profiling that has legal or significant effects on users.
Our Service uses Application Insights, a web analytics service provided by Microsoft, Inc. Application Insights uses "cookies" to help analyze user interactions with the Service. The information generated by cookies will be transmitted to and stored by Microsoft on servers in the USA. Microsoft may transfer this information to third parties as required by law or where third parties process information on Microsoft’s behalf.
The security of your information is important to us. We use commercially reasonable and industry-standard safeguards to protect your data, such as regular data backups and secure server facilities.
Our Service is not directed to persons under 16. We do not knowingly collect personal information from anyone under the age of 16. If we become aware of such collection, we take steps to remove that information.
We do not transfer any personal data internationally. Data required to link your accounts in Microsoft Teams and Karma bot is collected and stored on Digital Ocean infrastructure. We take steps to protect data during transfer.
We are not responsible for the practices of websites linked to from our Service. Once you leave our Service, our Privacy Policy no longer applies, and your activities on third-party websites are subject to their own policies.
We do not respond to "Do Not Track" signals.
We may update this Privacy Policy from time to time by posting the updated version on this page. Changes are effective immediately upon posting.
If you have any questions about this Privacy Policy, please contact us at hi@karmabot.chat
Sliday Limited ("us", "we", or "our") operates the Karma Microsoft Teams bot ("Karma bot", the "Service") and the https://karmabot.chat website.
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
This Privacy Policy describes our practices regarding the collection, use, and disclosure of the information we collect from and about you when you use Service web-based and mobile applications owned by Microsoft Corporation.
Our Collection and Use of Information
We collect and store:
Microsoft Teams administrator email for support purposes.
Karma requests information, including organization name, team name, and users' names.
We do not store your IP addresses, nor do we store any project- or communication-specific data except Karma request descriptions.
Information We Collect Automatically
Log Files: Our servers automatically record information in server logs, such as web requests, browser type and settings, referring/exit pages, URLs, number of clicks, interaction with links on the Service, domain names, landing pages, pages viewed, and timestamps. Log files help us monitor, analyze, improve, and maintain the Service.
Location Information: We do not collect or process location information.
Data Retention
We retain personal data for six months after subscription cancellation or immediately delete it upon user request. Individual user information is anonymized as soon as that user leaves the company.
Lawfulness of Processing
We process your personal data based on the following legal basis:
Performance of a Contract: Processing is necessary to provide the Service, as outlined in the terms of use. This allows us to manage and operate the Karma bot for Microsoft Teams users effectively.
GDPR Compliance
We are committed to complying with the General Data Protection Regulation (GDPR). This section outlines your rights and our obligations under GDPR.
Data Subject Access Requests (SARs)
You have the right to request access to the personal data we hold about you, known as a Subject Access Request (SAR). To submit a SAR, please contact us at hi@karmabot.chat We will respond to all SAR requests within one month, as required by GDPR, unless the request is complex or numerous, in which case we may extend the response time by a further two months.
Identification of Data Locations
We maintain a comprehensive data mapping process, enabling us to locate all instances of personal data across our systems. This allows us to identify, retrieve, and manage your personal data effectively when responding to Subject Access Requests or other GDPR-related inquiries.
Backup Retention and Data Erasure in Compliance with GDPR
Personal data requested for erasure under a Subject Access Request will be removed from active systems immediately. Our backup systems operate on a 30-day rolling cycle, where backups are deleted or overwritten after this period. This process ensures that personal data is effectively erased from our systems within 30 days of the initial deletion request, in line with GDPR requirements.
Data Subject Rights
Under applicable data protection laws, you have the following rights:
Right to be Informed: This Privacy Policy serves as notification of what data we collect, why we collect it, and how it is used.
Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: If any of your data is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure: You may request that we delete your personal data. We honor requests for data deletion.
Right to Restrict Processing: Under certain conditions, you may request that we restrict the processing of your data.
Right to Data Portability: You can request a copy of your data in a commonly used format.
Right to Object: You have the right to object to our processing of your personal data for specific purposes.
To exercise any of these rights, please contact us at hi@karmabot.chat
Automated Decision-Making and Profiling
We do not use any form of automated decision-making or profiling that has legal or significant effects on users.
Our Cookie Policy
Our Service uses Application Insights, a web analytics service provided by Microsoft, Inc. Application Insights uses "cookies" to help analyze user interactions with the Service. The information generated by cookies will be transmitted to and stored by Microsoft on servers in the USA. Microsoft may transfer this information to third parties as required by law or where third parties process information on Microsoft’s behalf.
How We Protect Your Information
The security of your information is important to us. We use commercially reasonable and industry-standard safeguards to protect your data, such as regular data backups and secure server facilities.
Children's Privacy
Our Service is not directed to persons under 16. We do not knowingly collect personal information from anyone under the age of 16. If we become aware of such collection, we take steps to remove that information.
International Data Transfer
We do not transfer any personal data internationally. Data required to link your accounts in Microsoft Teams and Karma bot is collected and stored on Digital Ocean infrastructure. We take steps to protect data during transfer.
Links to Other Websites
We are not responsible for the practices of websites linked to from our Service. Once you leave our Service, our Privacy Policy no longer applies, and your activities on third-party websites are subject to their own policies.
Do Not Track Signals
We do not respond to "Do Not Track" signals.
Changes to Our Privacy Policy
We may update this Privacy Policy from time to time by posting the updated version on this page. Changes are effective immediately upon posting.
Contact Us
If you have any questions about this Privacy Policy, please contact us at hi@karmabot.chat
Updated on: 20/11/2024
Thank you!