Overview
Standup Agent ("the bot", "we", "us") is an open-source Slack bot that helps individuals and teams run daily standups, manage their Google Calendar, track Jira issues, and stay on top of their workday — all from Slack DMs.
This policy explains what data the bot collects, why it collects it, how it is stored, and your rights regarding that data.
Data We Collect
From Slack:
- Your Slack workspace ID and bot access token (to send and receive messages)
- Your Slack user ID (to identify you within the workspace)
- The content of direct messages you send to the bot
- Channel messages only when you explicitly request a channel summary
From Google Calendar (only if you choose to connect it):
- Your Google OAuth access and refresh tokens
- Calendar event titles, times, attendees, and descriptions — read on demand or for proactive briefings
From Jira Cloud (only if you choose to connect it):
- Your Atlassian email address (provided by you to filter issues)
- Issue titles, statuses, and priorities — read on demand or for the morning standup
Generated by the bot:
- Your standup responses (what you write in reply to the daily standup prompt)
- Action items extracted from your standup replies
- Long-term memory facts (e.g. your current projects, team members, preferences) extracted from your conversations with the bot
- Your timezone preference
How We Use Your Data
All data collected is used solely to provide the bot's features to you:
- Sending your personalised daily standup with calendar events and Jira tickets
- Answering your DM questions with context from your work history
- Sending pre-meeting briefings and end-of-day follow-ups
- Generating your weekly retrospective
- Booking calendar events on your behalf when you request it
- Tracking and reminding you of action items
Your message content is sent to Anthropic's Claude API to generate AI responses. Anthropic's data handling is governed by their Privacy Policy.
Data Storage
All data is stored in a private SQLite database hosted on Railway. The database is not publicly accessible. Data is stored in the following tables:
installations google_tokens standup_responses action_items user_memories user_timezones briefings_sent standup_sent
Data is retained for as long as you use the bot. See "Your Rights" below for how to request deletion.
Third-Party Services
The bot integrates with the following third-party services. Your use of these integrations is subject to each service's own privacy policy:
Data Security
- OAuth tokens are stored encrypted at rest on Railway's infrastructure
- All communication between the bot and Slack, Google, and Jira uses HTTPS
- No credentials or sensitive tokens are logged or exposed in error messages
- The source code is open source and publicly auditable on GitHub
Your Rights
You have the right to:
- Access — ask the bot "what do you know about me?" to see your stored memory
- Deletion — contact us to have all your data permanently deleted from our database
- Revoke Google access — visit myaccount.google.com/permissions and remove Standup Agent
- Revoke Slack access — uninstall the bot from your Slack workspace settings
To request data deletion or ask any privacy questions, contact us at the email below.
Children's Privacy
Standup Agent is designed for professional workplace use and is not directed at anyone under the age of 16. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of the bot after changes constitutes acceptance of the updated policy.
Contact
If you have any questions or requests regarding this privacy policy, please contact:
Kingsley Mkpandiok
📧 kingsleymkpandiok@gmail.com
🐙 github.com/iamkingsleey/standup-agent