ViablyViably

Privacy Policy

Viably is operated by Supertype Pte. Ltd. · Last updated May 2026

What we collect

  • Slack workspace data — team ID, channel IDs, user IDs, and message content in channels where Viably is invited.
  • Usage data — which Powers are enabled, AI model selections, and feature interaction counts.
  • Credentials you provide — optional API keys (e.g. OpenRouter) stored encrypted at rest.
  • Google Calendar data — if you connect your Google account through the Calendar Power: your Google email address, OAuth tokens (encrypted at rest), and the calendar events and free/busy information needed to show your team agenda and schedule meetings.

Incidental data

Slack payloads delivered to Viably include data we receive but do not intentionally store or use — such as Slack user IDs in slash command payloads, channel IDs, message timestamps, and system metadata. This data flows through our service to process your request but is not retained beyond what is necessary to complete the operation.

What we don't collect

Private DMs or channels Viably hasn't been invited to. We never read messages beyond what is needed to respond to a direct mention or reaction. Via requires explicit user interaction (e.g. @Via summarize this above, or when user uses a 🐛 reaction to file an issue with Viably, or when its in a thread where it was previously mentioned) before it participates.

How we use it

Solely to operate the Powers you enable: answering AI chat messages, tracking issues, syncing medal, relaying webhooks, and so on. We do not sell or share your data with third parties for advertising.

Third-party processors

Certain Powers send data to third-party services to function. You control which Powers are active.

  • OpenRouter / AI providers — message content for AI chat responses.
  • GitHub — issue titles and descriptions when GitHub sync is enabled.
  • Stripe — webhook payloads you configure for relay.
  • Google Calendar — when you connect your Google account via the Calendar Power, we read (read-only) your calendar events and free/busy times; events you create are written by our service account to a separate shared team calendar.

Google user data

The Calendar Power uses the Google Calendar API. When you connect your Google account we request these scopes:

  • View events and free/busy on your calendars (calendar.readonly) — read-only access to your own calendar, used to (1) find open meeting slots across participants when you ask Via to schedule a meeting, and (2) show your upcoming events alongside your Slack tasks and reminders in a unified agenda.

This access is read-only: Viably never creates or edits events on your personal calendars. Events you create from Slack are written by Viably's own service account to a separate shared team calendar maintained for your workspace, not to your personal calendars.

We use Google Calendar data solely to provide these Calendar Power features. We do not use it for advertising, and we do not use it to train generalized AI or machine-learning models. You can disconnect your Google account at any time from the Calendar Power page, which revokes Viably's access and deletes the stored tokens.

Viably's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention

Workspace data is retained as long as your Slack app installation is active. Uninstalling Viably from Slack triggers deletion of your workspace's data within 30 days. You can also request immediate deletion by emailing us.

Security

All data is stored in a hosted PostgreSQL database with encryption at rest and in transit. API keys are encrypted before storage. Access is restricted to Supertype engineering staff.

Your data rights

You have the right to access, transfer, and delete the data Viably holds about your workspace.

  • Access: Request what data we hold for your workspace via email.
  • Transfer/portability: Request your data in a machine-readable format (JSON).
  • Deletion: Uninstalling Viably from Slack triggers automatic deletion within 30 days. For immediate deletion, email us.
  • Legal rights: If you are in the EU or California, you may have additional privacy rights under GDPR, CCPA, or similar laws. Contact us to understand your options.

Contact

For questions, data access requests, deletion requests, or GDPR/CCPA privacy rights: [email protected]