Privacy Policy
Effective 17 July 2026. Time Off is operated by Actually Useful Extensions ("we", "us").
Time Off is a leave-tracking app for Slack. This policy explains exactly what we store, why, and how to get it back or delete it. We collect the minimum needed to run the product — nothing else.
What we store
| Data | Why |
|---|---|
| Slack workspace ID and name | To keep each company's data separate. |
| Slack user ID and display name | To show who requested leave and route it to the right approver. |
| Leave requests: type, dates, working-day count, optional note, status | The core function of the product. |
| Leave balances: allowance, days taken, carryover | To calculate remaining balance. |
| Workspace settings: timezone, working days, announcement channel, holiday country, approver | To apply your company's leave rules correctly. |
| A Slack access token for your workspace | Required to post messages and show the app. Stored encrypted at rest. |
What we deliberately do not collect
- No reason for sick leave. Sick leave records the type only. We never ask for, or store, medical information.
- No dates of birth, home addresses, salary, or government identifiers.
- No message history. We do not read your channels or DMs. The app only receives the specific commands and button clicks aimed at it.
- No tracking or advertising. No analytics cookies, no third-party trackers, no ad networks. We never sell or share your data.
- No AI training. Your data is never used to train any model.
The optional note field on a request is free text. It is shown to your approver, so please don't put anything sensitive in it.
Who can see it
Within your workspace, leave data is visible to the people you'd expect: the requester, their approver, and workspace admins. Who's-off information (name, leave type, dates) is visible to your team, which is the point of the product. Data is never visible to other companies using Time Off.
Sub-processors
We keep this list short deliberately:
- Railway — hosting and database infrastructure (United States).
- Slack Technologies — the platform the app runs on.
The full, dated list — including what each can access and what we deliberately don't use — is at /subprocessors.
How long we keep it
We keep your data while the app is installed. If you uninstall, contact us and we will delete your workspace's data within 30 days. Encrypted database backups are retained for up to 30 days and then automatically deleted, after which no copy remains.
Where it's stored
Your data is stored in a PostgreSQL database hosted by Railway in the United States (US West region), on encrypted storage. If you're in the UK or EU, this means your data is transferred outside your region — email us for details of the safeguards that apply, or for a data processing agreement.
Your rights
You can ask us to export or delete any individual's data, or your whole workspace's data, at any time. Email actuallyusefulextensions@gmail.com and we will action it within 30 days. If you're in the UK/EU, this covers your GDPR rights of access, rectification, erasure, portability, and objection. We act as the data processor for the leave data your workspace puts into the app; your employer is the controller.
Security
Data is encrypted in transit (HTTPS) and at rest. Access tokens are stored encrypted and never logged. Access to production systems is limited to the operator of this app.
Children
Time Off is a workplace tool and is not directed at anyone under 16.
Changes
If we make a material change, we'll update the effective date above and notify workspace admins in Slack before it takes effect.
Contact
Actually Useful Extensions — actuallyusefulextensions@gmail.com