Privacy policy

Last updated: October 13, 2026

Who we are

Pointd Pal is made by Tuatha Tech LLC ("we", "us"). For data inside a customer's Slack workspace, the customer decides how Pointd Pal is used and we process the data on their behalf. Our Data Processing Addendum sets out that relationship. For this website and for billing, we decide how the data is used.

What Pointd Pal stores

Pointd Pal runs in Slack today, so this section describes a Slack workspace. We'll update this policy before Pointd Pal is available on any other chat platform. When a workspace installs Pointd Pal, we store:

• Member profiles from Slack: Slack user IDs, display and real names, titles, time zones and avatar links, and whether someone is an admin, owner, guest, bot or deactivated. We keep these in step with Slack so admins can see who hasn't been recognized lately.
• User groups and channels: their Slack IDs and names, and who is in each user group.
• Recognitions: who gave and received points, how many, the reason written with them, the company value tagged, the channel, a link to the Slack message, and when.
• Celebration dates: a birthday month and day (never the year) and a work start date, added by the member or imported by an admin from a file. Nothing is posted unless that member opts in.
• Rewards and redemptions: the catalog your admins create, and who asked for what.
• Feedback members send us: the note, who sent it, and whether they're happy to be contacted. We forward it to our own team's Slack workspace, with the sender's name only if they said we can contact them.
• Workspace settings and an audit log of what admins changed and when.
• Slack access tokens, encrypted before they're stored.

Pointd Pal reads messages in channels it has been added to, so it can notice recognitions like @name ++. Messages that aren't recognitions are not stored. We never request or store members' email addresses from Slack. When an admin signs in to the admin panel with Slack, Slack shares their name and email with us for that sign-in; we use their Slack user ID and don't keep the email.

What we don't do

• We don't sell or rent personal data.
• We don't show ads or share data with advertisers.
• We don't use your workspace's content to train AI models.
• We don't use your data for anything other than running Pointd Pal for your workspace.

Why we use it

We use workspace data to provide the service your organization signed up for: recording recognitions, showing leaderboards, digests and analytics, running rewards and celebrations, and keeping the service secure. Where privacy law asks for a legal basis, that's performing our contract with your organization, our legitimate interest in running and securing the service, and, for celebrations, the member's own choice to opt in.

Billing

Paid plans are billed through Stripe. Stripe collects and stores payment details and the billing contact. We store only the Stripe customer and subscription IDs, the plan, and a monthly count of active users.

How long we keep it

• Workspace data is kept while Pointd Pal is installed.
• When a workspace uninstalls Pointd Pal, its data is deleted 30 days later.
• When an admin deletes the workspace's data from the admin panel, it's deleted within a day.
• Encrypted backups are kept for up to 12 months, then deleted. Data removed from the live service stays in those backups until they expire, and is never restored except to recover from a failure.

Your choices and rights

Every member can, by messaging Pointd Pal in Slack:

• opt out to stop giving and receiving points and be left off leaderboards and digests;
• export me to get a file of everything Pointd Pal stores about them;
• erase me to delete their recognitions and profile.

Admins can export a person's data, erase it, and export or delete the whole workspace's data from the admin panel. Because your organization controls workspace data, we may pass requests we receive directly to your admins. For anything else, including access, correction or deletion under the laws where you live, email privacy@pointdpal.com.

Who else processes it

We use a small number of service providers, such as our database host and payment processor. They're listed with what they do on our subprocessors page.

Where it's processed

We're based in the United States, and Pointd Pal's data is processed and stored in the United States. If you're in another country, your data is transferred there to provide the service.

Security

Data is encrypted in transit, Slack tokens are encrypted at rest, backups are encrypted, and access is limited to the people who run the service. More on our security page.

Cookies

The admin panel uses one cookie to keep admins signed in, and a short-lived one while signing in with Slack. Both are needed for the panel to work. This website doesn't set cookies.

This website

We count visits with Cloudflare Web Analytics, which doesn't use cookies or fingerprinting and reports only totals. The site is hosted on Cloudflare, which processes your IP address and browser details to deliver pages and protect the site from abuse. If you ask to join the beta, we receive what you type into the form, through Formspree, and use it only to contact you about the beta and the launch.

Children

Pointd Pal is a workplace tool and isn't meant for children under 16.

Changes

If we change this policy in a way that matters, we'll update the date above and tell workspace admins before the change takes effect.

Contact

Tuatha Tech LLC, privacy@pointdpal.com.