Privacy policy
Last updated: September 5, 2026
This service — the Simantic GitHub Actions → Slack notifier at slackbot.simantic.dev — posts CI notifications and optional AI code reviews into Slack workspaces that install it. This page describes exactly what data it handles. Questions or requests: support@simantic.dev.
What we store
Per installed workspace, in a database on our server:
- Your Slack workspace ID and name, the bot's OAuth token, the notification channels you chose with
/simantic route, your notification and review preferences, and the install date. - Your GitHub App installation ID and the GitHub account or organization name it belongs to.
- Repo subscription and mute lists (repository names and the Slack user IDs that set them).
- Operational records: webhook delivery and workflow-run IDs for deduplication (kept 7 days), the last-reviewed commit SHA per pull request (kept 90 days), and monthly AI-usage counters.
- Context for messages the bot posts — which run, PR, or review a message was about — kept 30 days so thread replies work.
What we process but do not store
GitHub webhook payloads, pull-request diffs, and repository file contents read during AI review pass through the service in memory and are not retained. Slack message text is read only in threads on the bot's own messages and when the bot is @-mentioned, to generate a reply, and is not retained.
Third-party services
- Slack — the bot posts messages and receives commands/events via Slack's API.
- GitHub — the bot uses short-lived GitHub App installation tokens to read PR diffs, repository files during review, and post review comments.
- Anthropic — when AI review or chat is enabled, diffs, limited repository file contents, and thread messages are sent to Anthropic's Claude API to generate the review or reply, under Anthropic's commercial API terms.
What we never do
No selling or sharing of data, no advertising, and no analytics, tracking, or cookies on these pages.
Security
All traffic is HTTPS. Inbound Slack requests are signature-verified and GitHub webhooks are HMAC-verified. Workspace tokens live in a database readable only by the service.
Deleting your data
Uninstalling the app from your Slack workspace (or revoking its tokens) automatically deletes your workspace record, its tokens, and everything tied to them. For anything else, email support@simantic.dev.