Privacy Policy
Tribu ("we", "our", or "us") operates a team wellness platform that runs via Slack. We take privacy seriously — especially when it comes to employee data. This policy explains what we collect, why, and how we protect it.
1. What We Collect
We collect the minimum data required to provide the service:
- Account data: name, work email, company name, Slack workspace ID.
- Pulse responses: anonymized answers to the daily check-in questions (burnout, psychological safety, goals, productivity, balance).
- Usage data: which features are used, page views, and interaction events (via Google Analytics).
- Communications: emails you send to us and any support conversations.
2. Anonymity of Pulse Data
Individual pulse responses are never shown to managers or employers in identifiable form. We only surface aggregated team-level insights. A manager can see "the team's burnout radar dropped 12 points this week" — not "Alex answered 2/10 on burnout today."
Aggregates are only shown when a cohort has 3 or more respondents, to prevent reverse identification.
3. How We Use Your Data
- To deliver the Tribu service (pulse delivery, radar dashboards, reports).
- To improve our algorithms and product features.
- To send product updates and transactional emails (you can opt out anytime).
- To comply with legal obligations.
We do not sell your data to third parties. We do not use your data for advertising.
4. Data Sharing
We share data only in these limited cases:
- Service providers: infrastructure (Firebase/Google Cloud), analytics (Google Analytics), email delivery — each bound by data processing agreements.
- Your organization: aggregated, anonymized team insights only — never individual responses.
- Legal requirements: if required by law or court order.
5. Data Retention
We retain pulse response data for 24 months to enable trend analysis. You may request deletion of your data at any time by emailing privacy@tribu.management. Account data is deleted within 30 days of account closure.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Object to or restrict processing.
- Export your data in a portable format.
To exercise any of these rights, email privacy@tribu.management. We will respond within 30 days.
7. Slack Integration
Tribu accesses your Slack workspace only to deliver pulse messages and receive responses. We do not read your team's channels, messages, or files. Slack permissions are scoped to the minimum necessary for the service to function.
8. Security
Data is encrypted in transit (TLS) and at rest. We use Google Cloud (Firebase) infrastructure with SOC 2 compliance. Access to raw data is restricted to authorized Tribu personnel only.
9. Children's Privacy
Tribu is intended for workplace use by adults (18+). We do not knowingly collect data from anyone under 18.
10. Changes to This Policy
We may update this policy as the product evolves. When we make material changes, we'll notify workspace administrators via email at least 14 days in advance. The date at the top of this page reflects the most recent revision.
11. Contact
Questions about this policy? Email us at privacy@tribu.management.
Also see: Terms of Service