Privacy Policy

Last updated: July 27, 2026

SlackInvoice (“we”, “our”, “the service”) is a Slack application that helps teams create and manage Stripe invoices from Slack. This policy describes what data we collect, how we use it, how long we keep it, and how you can request access or deletion.

What data we collect

• Slack workspace data: workspace ID (team_id), bot installation tokens, and user IDs needed to operate the app.
• Workspace contacts: display name and email (when available) of the person who installed the app and the admin who connected Stripe, used for account support and customer management.
• Messages you send to the bot: text of DMs and @mentions processed to fulfill billing requests. Conversation context may be kept briefly in memory during an active session.
• Stripe credentials: Stripe secret API keys you provide in App Home, stored encrypted at rest. We do not store full card numbers — payments are handled by Stripe.
• Stripe webhook metadata: invoice IDs, amounts, and status events needed to send payment notifications in Slack.
• Technical logs: server logs (errors, request metadata) without intentionally logging secrets or full message content.

How we use data

• To receive Slack events and reply to your billing requests.
• To call the Stripe API on your behalf using your connected Stripe key.
• To send invoice payment alerts to workspace admins in Slack.
• To operate, secure, and troubleshoot the service.

Email addresses & consent

SlackInvoice requests the users:read.email scope to store the email address of the person who installs the app and the workspace admin who connects Stripe. We use these addresses only for operational contact related to the service — for example account support, security notices, billing or pricing changes, and critical service announcements.

By installing SlackInvoice, you consent to us storing and using your email for these operational purposes. By connecting Stripe as a workspace admin, you likewise consent to operational email contact regarding that workspace’s use of the service.

We do not use workspace member emails for marketing or promotional mailings, and we do not sell email addresses. We do not email users who have not installed the app or been identified as the Stripe-connecting admin. You may opt out of non-essential email at any time by contacting support@searchplusplus.jp or uninstalling the app.

We do not use Slack message data to train machine learning or large language models. Message text may be sent to a third-party LLM provider solely to interpret your request and generate a reply for that conversation turn.

Third-party services

• Slack — messaging platform and OAuth.
• Stripe — invoicing and payments (your account).
• LLM provider — natural language processing (e.g. Groq or another OpenAI-compatible API).

Data retention

• Stripe API keys: retained until you disconnect Stripe in App Home or uninstall the app.
• OAuth installation tokens: retained until app uninstall.
• Conversation memory: short-lived (in-process); cleared on server restart.
• Server logs: typically retained up to 30 days unless needed for security investigation.

Your rights & data requests

Depending on your location, you may have the right to access, correct, export, or delete personal data we hold. To request access, transfer, or deletion of your data, email us at support@searchplusplus.jp. We will respond within 30 days.

Uninstalling SlackInvoice from your workspace removes our access to new Slack events. You may also disconnect Stripe in the App Home tab and delete stored credentials.

Security

Stripe keys are encrypted at rest. All public endpoints use HTTPS. We follow the principle of least privilege for Slack OAuth scopes.

Contact

Questions about this policy: support@searchplusplus.jp
Terms of Service · Support page · Back to SlackInvoice