Overview
ReadStamp posts announcements and policies in Zoom Team Chat, records who acknowledged them and when, and exports those records. This policy explains what data we handle, what we store, and how it is used.
What we access
With your Zoom admin's authorization we read the list of users in your Zoom account (names, email addresses, time zones) and, when an announcement is addressed to a channel, that channel's member list. The bot receives the slash commands people send it, the content of the form they submit, and their button clicks. We do not read channel messages or direct messages between people.
What we store
We store your Zoom account id, encrypted OAuth tokens, your members' names, emails, Zoom ids and time zones, the announcements you post (every version, with a content hash and the document link), the acknowledgments (who, when, which version, the confirmation wording), document-open events (time, IP address, browser) when that option is on, reminders sent, and a log of the messages the bot sent. Dashboard logins store a name, email and, for email signups, a password hash.
How it is used
Only to run the product: delivering announcements and reminders, showing status in the dashboard, and producing the CSV and PDF exports you request. Acknowledgment records exist so that your organisation can evidence policy acknowledgment to auditors; they are shown only to dashboard users of your own account. We do not sell data or use it for advertising.
Recipients' rights
Recipients can see what they have confirmed with /announce pending and on their confirmation cards. Acknowledgments cannot be withdrawn by the recipient, because they are the record your organisation relies on; an account admin can void one, and the void is logged. Requests about personal data should go to your organisation's admin first; we assist them.
Third-party services
We communicate with the Zoom API to send messages and read the data above, with Stripe for billing, with Postmark to send system email such as password resets, and with Google Analytics to measure visits to our website. Your use of those services is governed by their own terms and privacy policies.
Retention and deletion
Data is kept while ReadStamp is installed in your account. When the app is uninstalled, tokens are deleted immediately and open announcements close; acknowledgment records are kept so you can still export them. Email hi@staticmaker.com to have all remaining account data deleted; we do so within 30 days.
Contact
Questions about this policy: hi@staticmaker.com.