BiirbalBiirbal

Privacy Policy

This Privacy Policy describes how biirbal.com collects, uses, and protects your information when you use our Slack application for AI-powered audio summaries.
Last Updated: August 15, 2025

Overview

biirbal.com is a Slack application that automatically generates 59-second audio summaries of links shared in your Slack channels. We are committed to protecting your privacy and being transparent about our data practices.
By installing and using biirbal.com, you consent to the collection and use of information as described in this privacy policy.

Data We Collect

Slack Workspace Data

  • Team ID, team name, access tokens
  • User IDs, display names, email addresses, profile images
  • Channel IDs, channel names
  • Message timestamps of shared links
Retention: While app is installed; deleted within 30 days of uninstallation

Link Processing Data

  • URLs shared in Slack channels
  • Extracted content titles and text summaries
  • Generated audio file metadata and URLs
  • Processing status and error logs
Retention: Metadata 2 years; Audio files 1 year; Failed records 90 days

Usage Analytics

  • Link processing timestamps and durations
  • Audio playback events and completion rates
  • Dashboard visit patterns
  • Feature usage statistics
Retention: 2 years from collection date

Subscription Data

  • Stripe customer IDs and subscription IDs
  • Payment status and billing cycles
  • Usage limits and current consumption
Retention: 7 years (financial records)

How We Use Your Data

Core Functionality

  • Link Processing: Extract content from shared URLs for summarization
  • AI Summarization: Generate concise text summaries using OpenAI
  • Audio Generation: Convert summaries to speech using text-to-speech technology
  • Slack Integration: Post audio summaries back to your Slack channels

Service Operation

  • Authentication: Verify your identity and workspace permissions
  • Usage Monitoring: Track usage against subscription limits
  • Customer Support: Provide technical assistance when needed

Data Storage and Security

Storage Locations

  • Database: PostgreSQL on Heroku (encrypted at rest and in transit)
  • Audio Files: Amazon S3 (server-side encryption, private buckets)
  • Analytics: Google Analytics 4 (anonymized data)
  • Payment Data: Stripe (PCI DSS compliant, we don't store card details)

Geographic Location

Your data is primarily stored in US data centers (AWS US East, Heroku US). Some third-party services may store data globally according to their policies.

Data Retention Schedule

  • Immediate Deletion: Access tokens, session data (upon app uninstallation)
  • 30 Days: Team/user profile data (after uninstallation), error logs
  • 90 Days: Failed processing records, temporary job data
  • 1 Year: Audio files in AWS S3, detailed usage logs
  • 2 Years: Link metadata and summaries, aggregated analytics
  • 7 Years: Financial records, tax documentation (legal requirement)

Third-Party Services

OpenAI

  • Data Shared: Content summaries for AI processing
  • Purpose: Text summarization and text-to-speech conversion
  • Retention: 30 days per OpenAI's policy, then automatically deleted

Amazon Web Services (AWS)

  • Data Shared: Generated audio files
  • Purpose: Secure file storage and delivery
  • Retention: 1 year, then automatic deletion

Stripe

  • Data Shared: Payment and subscription information
  • Purpose: Payment processing and subscription management

Google Analytics

  • Data Shared: Anonymized usage statistics
  • Purpose: Product analytics and improvement
  • Retention: 26 months (GA4 default)

Your Rights and Choices

Access and Portability

You can request access to your personal data and receive it in a machine-readable format.

Data Deletion

You can request deletion of your personal data. Uninstalling the app from your Slack workspace will trigger automatic deletion of most data within 30 days.

How to Exercise Your Rights

Contact us at founders@biirbal.com with your request. We'll respond within 30 days.

Security Measures

  • Encryption: All data encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Role-based access with principle of least privilege
  • Authentication: Multi-factor authentication for administrative access
  • Monitoring: Continuous security monitoring and alerting
  • Backups: Automated daily backups with encryption

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: founders@biirbal.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
For our Terms of Service, please visit biirbal.com/terms