SolidPing SaaS — Privacy Policy
Effective Date: May 3, 2026
This Privacy Policy describes how the SolidPing hosted service and the SolidPing Slack app (together, the "Service") collect, use, and protect your personal data.
It applies only to the hosted SaaS offering. Your self-hosted use of the open-source SolidPing software is not covered by this policy — when you run SolidPing yourself, you act as the data controller for your own deployment.
1. Controller
The Service is operated by:
WEBINGENIA SARL 218 rue de Javel, 75015 Paris, France SIREN: 519 411 680 — SIRET: 519 411 680 00043 Contact: contact@solidping.io
We are the data controller under Regulation (EU) 2016/679 ("GDPR").
2. Data we collect
When you install the SolidPing Slack app in your workspace
- The Slack workspace ID (
team_id) and workspace name - The Slack user ID of the installer
- The bot user ID assigned to SolidPing in your workspace
- The bot OAuth access token (stored encrypted at the application layer)
- The OAuth scopes you granted
- The channel IDs you configure to receive notifications
When you sign in with Slack
- Your Slack user ID, name, email address, and (if available) profile picture URL
- Your workspace's ID and name
- A short-lived Slack identity token, used only to complete the sign-in
When you use the Service
- Monitoring configuration: the checks you create, their parameters, schedules, and notification rules
- Check results: timestamps, statuses, response times, error messages
- Incidents: detection time, acknowledgements, comments, resolution time
- Slash command invocations and interactions with the Slack bot, processed so we can respond to them
- Direct messages you send to the Slack bot — handled in transit; not retained beyond what's needed to respond
- Link unfurl requests — we receive the URL so we can render a preview; we do not retain the surrounding message
- Authentication and audit logs (IP address, user agent, action, timestamp)
What we do not collect
- We do not read or store messages from your Slack channels
- We do not enumerate your workspace's member directory; we only retain information about Slack users who sign in via Slack, install the app, or interact with the bot
- We do not access files in your Slack workspace
- We do not collect special-category data (Article 9 GDPR)
- We do not sell your personal data and we do not use it for advertising
Analytics
We use PostHog to understand how the SolidPing dashboard is used (page views, button clicks, error events). PostHog is configured to mask sensitive form inputs and to respect Do-Not-Track signals where supported.
3. How we use your data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operate and maintain the Service (run checks, send notifications, render dashboards) | Contract — Art. 6(1)(b) |
| Authenticate you and authorize access | Contract — Art. 6(1)(b) |
| Send service-critical messages (incident reports, security notices, account changes) | Contract — Art. 6(1)(b) |
| Detect and prevent abuse, fraud, and security incidents | Legitimate interests — Art. 6(1)(f) |
| Improve the product through aggregated analytics | Legitimate interests — Art. 6(1)(f) |
| Comply with legal obligations (accounting, tax) | Legal obligation — Art. 6(1)(c) |
4. Sub-processors
We process personal data only with the following sub-processors:
| Sub-processor | Purpose | Region |
|---|---|---|
| OVHcloud | Application hosting, databases, backups | France (EU) |
| PostHog | Product analytics for the dashboard | EU |
| Slack Technologies, LLC | The Slack platform itself | United States |
International transfers. Slack is a U.S. service. When you use SolidPing through Slack, data flows between Slack (US) and our EU-hosted Service. These transfers rely on the EU–US Data Privacy Framework and on Standard Contractual Clauses where applicable. You can review Slack's own privacy practices at slack.com/trust/privacy/privacy-policy.
5. Retention
| Data | Retention |
|---|---|
| Slack workspace tokens and settings | Kept while the app is installed; deleted 3 months after uninstall |
| User account and profile | Kept while the account is active; deleted within 30 days of account closure |
| Check configuration and results | Kept while the account is active |
| Incident history | Kept while the account is active |
| Authentication and audit logs | 12 months |
| Backups | Up to 30 days, then expired |
| Billing and accounting records | 10 years (French commercial law) |
You can uninstall the SolidPing Slack app at any time from your Slack workspace (Apps → SolidPing → Remove). Uninstalling immediately revokes our bot token; remaining workspace data is deleted within 3 months.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten"), subject to the retention obligations above
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the French data protection authority (CNIL) or the supervisory authority in your country of residence
To exercise any of these rights, email contact@solidping.io. We respond within 30 days.
7. Security
- Data at rest is encrypted at the storage layer; Slack tokens are additionally encrypted at the application layer.
- Data in transit uses TLS 1.2 or above.
- Access to production data is restricted to authorized personnel under audit logs.
- We follow the principle of least privilege and review access regularly.
We will notify affected users and the relevant supervisory authority within 72 hours of becoming aware of a personal data breach, as required by GDPR Article 33.
8. Cookies
The marketing site (www.solidping.io) uses only strictly necessary cookies. The dashboard uses session cookies required for authentication. PostHog analytics cookies are loaded only after consent where required by applicable law.
9. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this policy. Material changes will be announced on this page and, where appropriate, by email to account holders. The Effective Date at the top reflects the latest version.
11. Contact
- Company: WEBINGENIA SARL
- Address: 218 rue de Javel, 75015 Paris, France
- Email: contact@solidping.io
- GitHub: github.com/fclairamb/solidping