Security & Compliance

Privacy Policy

Effective date: October 17, 2026 • Last updated: October 17, 2026

1. Overview and Core Philosophy

Pollito ("we", "our", or "us"), provided by TBelt Online, builds team consensus tools inside Slack. Our architecture starts from a strict principle: we only collect data necessary to tally votes, calculate quorums, and remind participants who asked for nudges.

We do not sell user data, train generative AI models on workspace messages, or store raw ballot identities in anonymous polls.

2. Cryptographic Double-Urn Anonymity

When you mark a poll as Anonymous, Pollito uses a dual-table cryptographic isolation model to guarantee secret ballots:

  • Participation Table: We store your Slack User ID linked to the Poll ID solely to prevent double-voting and identify non-voters for gentle nudges. This table contains zero choice data.
  • Ballot Urn Table: Your vote choice is recorded alongside a one-way pseudorandom token: HMAC_SHA256(SlackUserID + PollSecret, WorkspaceSalt).

Even database administrators and workspace managers inspecting production records cannot connect a specific voter to their chosen ballot option.

3. Data We Collect

When you install and use Pollito, we process the following categories of information:

  • Slack Workspace Identity: Team ID, workspace name, installation timestamp, and encrypted bot access tokens.
  • Poll Metadata: Question text, option titles, target quorum percentages, creator Slack ID, channel ID, and message timestamps.
  • Public Ballots: For non-anonymous polls, your Slack User ID and selected option ID to display voter avatar stacks to teammates.
  • Operational Metrics: Timestamps of vote submissions and reminder delivery receipts to maintain rate-limiting queues within Slack API quotas.

4. Data Storage and Retention

All data is stored in isolated SQLite instances operating in Write-Ahead Logging (WAL) mode on private dedicated servers located in secure North American data centers.

When an organization uninstalls Pollito from Slack, we receive the app_uninstalled webhook. Within 30 days of receiving this event, all associated workspace records, poll questions, and participation logs are permanently purged from active systems.

5. Your Rights (GDPR & CCPA)

Regardless of your geographic location, you retain full rights over your workspace data:

  • Right to Access: Workspace admins can request a complete JSON export of all non-anonymous historical polls and workspace settings.
  • Right to Deletion: You may request immediate manual deletion of specific polls or your complete workspace history.
  • Right to Rectification: You can edit active poll titles and options prior to reaching quorum directly inside Slack.

6. Security Measures

We protect data in transit using TLS 1.3 encryption and verify every incoming Slack request using cryptographic signing secrets (HMAC-SHA256 signatures on X-Slack-Signature). We do not store plaintext bot tokens; credentials are encrypted at rest using AES-256-GCM.

7. Contact Us

If you have questions about our privacy practices, double-urn implementation, or wish to exercise data rights, reach our data protection team directly at:

Email: [email protected]
Entity: TBelt Online — Pollito Operations