Privacy policy
Last updated 1 November 2026
This policy covers the Dutyroll Slack app and the website dutyroll.tuper.app, made by Tuper (tuper.app). Contact: support@tuper.app.
Short version
Dutyroll stores what it needs to post your rotations and nothing else: your workspace ID, the Slack user IDs you add to a rotation, the rotation settings, and any away dates you enter. It does not read your channels or messages. Uninstalling deletes it all.
What we store
- Installation: workspace ID (and Enterprise Grid ID if any), the bot token Slack issues, the app's bot user ID, and the ID of the person who installed it.
- Rotations: name, channel ID, the user IDs in order, who is on duty now, cadence, day, time and time zone, the ID of the person who created it.
- Post log: for each post Dutyroll makes, the channel ID, message timestamp, the user ID on duty and whether it succeeded, so we can debug failed posts.
- Billing (Pro only): workspace ID, Polar subscription and customer IDs, subscription status and period end.
- Away dates (only if you enter them): workspace ID, the user ID of the person away, the first and last day, and who entered it. Deleted a few days after the last day, when you press Remove, or on uninstall.
- Feedback (only if you send it): after a few scheduled posts the Home tab asks once how Dutyroll is working. If you answer there, we keep your text and Slack user ID; if you press No thanks, we note that so the question does not come back.
- Welcome message: right after install Dutyroll sends the installer one message with setup steps. We keep the workspace ID and the date it was sent, also after uninstall, so a reinstall never sends it again.
Dutyroll reads a user's time zone from Slack (users:read) when they open the "New rotation" or "Mark away" form or type
/dutyroll away, and does not store it apart from the rotation's time zone. For /dutyroll away @name it looks up the
names of the people in your rotations to find who you meant, and does not store them. It never reads message content, files or channel history.
Received but not stored: every request Slack sends Dutyroll (a /dutyroll command, a button press,
opening the Home tab) also carries the workspace's name and domain, the user's name and the channel's name. Dutyroll does
not use or store these; they appear only in short-lived server memory while the request is handled.
Where it is kept and who sees it
Data is kept in a database on Tuper's server (Hetzner, in the EU). Server logs keep workspace and rotation IDs for up to 30 days. We do not sell or share data, use it for advertising, or use it to train AI models. Processors: Slack (delivers the app) and Polar (payments; it holds your billing name, email and payment details under its own privacy policy; we never see card numbers).
Inside your workspace, a rotation (its name, channel and people) is shown in Dutyroll's Home tab and in /dutyroll who
only to the person who set it up and the people in it (/dutyroll who also lists the rotations of the channel you type it in),
and only they can post, edit, pause or delete it. Rotations in private channels are therefore not visible to members outside them.
Deletion
When Dutyroll is uninstalled from a workspace, Slack tells us and we delete the installation, the bot token, every rotation, the post log and any feedback text for that workspace at once. Deleting a rotation in the Home tab deletes it immediately. Billing records are kept while a subscription exists and as long as tax law requires afterwards. To delete anything else, email support@tuper.app.
How long we keep it
Installation, rotations, post log and feedback: until the rotation is deleted or Dutyroll is uninstalled. Server logs: up to 30 days. Welcome-message and trial records: workspace ID and dates only, kept so a reinstall does not repeat the message or start a second trial. Billing: as above.
Your rights: access, copy, correction, deletion
Anyone whose data Dutyroll holds (a workspace admin, the installer, or a person listed in a rotation) can ask to see it, get a copy in a machine-readable file (JSON), have it corrected, or have it deleted, by emailing support@tuper.app from their work address with the workspace name. We answer within 2 business days and complete the request within 14 days. If you are in the EU/EEA or UK you also have the rights the GDPR gives you, including to complain to your data protection authority; California residents have the matching CCPA rights.
The website
dutyroll.tuper.app uses no tracking cookies, analytics services or third-party scripts. The server counts how many times each page is opened per day and which link (the src tag on an Add to Slack button) an install started from; these are plain totals with no IP address, cookie or visitor ID. Slack's install flow sets one short-lived cookie to check the sign-in request is yours.
Changes
If this policy changes we update the date above; material changes are announced in the app's Home tab.