Privacy Policy
Last updated: December 31, 2024
1. Introduction
Attunly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our team collaboration and skill-matching platform.
Please read this privacy policy carefully. By using Attunly, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, profile picture
- Profile Information: Department, job title, bio, timezone, skills and expertise
- Organization Information: Company/team name, invite codes
- Availability Data: Your weekly availability schedule
- Communication Data: Messages, nudges, and meeting invitations sent through the platform
2.2 Information Collected Automatically
- Usage Data: Features used, pages visited, actions taken
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
2.3 Information from Third Parties
- Google OAuth: If you sign in with Google, we receive your name, email, and profile picture
- Slack Integration: If connected, we receive your Slack user ID and workspace information to send notifications
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve Attunly
- Create and manage your account
- Match you with teammates based on skills and availability
- Send nudge notifications and meeting invitations
- Display your availability to team members in your organization
- Send service-related communications (account verification, security alerts)
- Respond to your requests and support inquiries
- Analyze usage patterns to improve our service
- Detect and prevent fraud or abuse
4. Information Sharing
We share your information in the following circumstances:
4.1 Within Your Organization
Your profile information, skills, and availability are visible to other members of your organization on Attunly. This is essential for the team collaboration features to work.
4.2 Service Providers
We use third-party services that process data on our behalf:
- Supabase: Database and authentication services
- Vercel: Hosting and deployment
- Slack: Notification delivery (if you connect your Slack account)
4.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of data at rest
- Secure authentication via Supabase Auth
- Regular security audits and updates
- Access controls limiting who can view your data
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restrict Processing: Limit how we use your data
To exercise these rights, please contact us using the information below.
8. Cookies and Tracking
We use essential cookies to maintain your session and remember your preferences. These are necessary for the service to function properly. We do not use advertising or tracking cookies.
You can configure your browser to refuse cookies, but this may affect your ability to use Attunly.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.
10. Children's Privacy
Attunly is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Attunly after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@attunly.app
- Website: attunly.app
For California Residents (CCPA)
Under the California Consumer Privacy Act (CCPA), California residents have additional rights including:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising privacy rights
We do not sell your personal information.
For EU/EEA Residents (GDPR)
Under the General Data Protection Regulation (GDPR), you have rights including access, rectification, erasure, and data portability. Our legal basis for processing your data includes:
- Contract: Processing necessary to provide our services to you
- Legitimate Interests: Improving our service and preventing fraud
- Consent: Where you have given explicit consent
You may lodge a complaint with your local supervisory authority if you believe your rights have been violated.