Skip to content
Sign in

Privacy policy

Last updated October 1, 2026

This policy explains what MyOnCall collects when you add it to Slack or use it, what we do with that information, and the choices you have. MyOnCall is a Slack app that keeps Slack user groups pointed at whoever is on call. It is run by FONTANA & SYDOW SERVICOS EM TECNOLOGIA LTDA ("we", "us"), and you can reach us at support@myoncall.app.

The short version

  • We collect what we need to run your rotations: your workspace's members and the rotations you set up.
  • We can't read your Slack messages. MyOnCall doesn't ask Slack for access to message history.
  • We don't sell your data, show ads or use it to train AI models.
  • Card details go straight to Stripe. We never see them.
  • Email us and we'll delete your workspace's data.

What we collect

From Slack, when your workspace installs MyOnCall

  • The workspace's ID and name.
  • An access token for the MyOnCall bot, which lets it update user groups and post messages. It's stored encrypted and deleted when you uninstall.
  • For each member of the workspace: Slack user ID, name, display name, email address, time zone, and whether they're an admin, an owner, a bot or deactivated. We use this to show people in rotations, put them in user groups and send reminders at the right local time.
  • The user groups MyOnCall manages and the channels you pick for notifications.

What you create in MyOnCall

Rotations, their members and schedules, overrides, swaps, notification settings, and a history of changes (who changed what, and when) so your team can see how the schedule evolved.

When you sign in with Slack

Your name, email address, and Slack user and workspace IDs, to keep you signed in and show you the right workspace. We never see your Slack password.

Billing

Stripe handles payments. We store the Stripe customer and subscription IDs, your plan, trial dates and whether a payment method is on file. We create the Stripe customer with your workspace name and the email of the person who installed MyOnCall. Card numbers go directly to Stripe and never reach our servers.

Technical information

Like most web services, our hosting provider keeps server logs (IP address, the page requested and the time) for a short period to run and secure the service. The website uses one cookie to keep you signed in, and your browser remembers your light or dark theme choice. We don't use analytics or advertising trackers.

How we use it

  • To run MyOnCall: sync user groups, post handoff messages and reminders, and show the App Home and dashboard.
  • To bill your subscription and manage your trial.
  • To answer support requests.
  • To keep the service secure and prevent abuse.
  • To meet legal obligations, such as tax records.

Under Brazil's General Data Protection Law (LGPD) and the EU's GDPR, we rely on performing our contract with you, our legitimate interest in running a secure and reliable service, and our legal obligations. For information about the members of your workspace, your organization decides how MyOnCall is used, and we process that information on its behalf.

Who we share it with

We share information only with the providers that run MyOnCall, and only what each one needs:

  • Slack: the platform MyOnCall runs on.
  • Stripe: payments and invoices.
  • Fly.io: hosting for the application, in the United States.
  • PlanetScale: the database, hosted on Amazon Web Services in the United States.

We may also disclose information when the law requires it, or to a buyer if MyOnCall is sold, in which case this policy keeps applying to your data.

Where it's stored

Your data is stored in the United States. When it moves there from your country, we rely on our providers' safeguards for international transfers, such as standard contractual clauses.

How long we keep it

  • While MyOnCall is installed, we keep what it needs to run.
  • When you uninstall, we delete the bot's access token right away. We keep your rotations and settings so reinstalling picks up where you left off, until you ask us to delete them.
  • We delete a workspace's data within 30 days of a deletion request.
  • Billing records are kept for as long as tax law requires.

How we protect it

All traffic uses TLS. Slack access tokens are encrypted in the database. Requests from Slack and Stripe are checked against their signatures before we act on them, and only the people who operate MyOnCall can reach its admin tools. No system is perfectly secure, but we work to keep your information safe and will tell you about a breach that affects it.

Your rights

You can ask to access, correct, export or delete your personal information, to know who we share it with, or to object to how we use it. Email support@myoncall.app and we'll reply within 15 days. If you're a member of a workspace that uses MyOnCall, you can also ask your workspace's admins. If you're not satisfied with our answer, you can complain to Brazil's data protection authority (ANPD) or the authority where you live.

Children

MyOnCall is a tool for businesses and isn't meant for anyone under 18.

Changes to this policy

When we change this policy, we'll update the date at the top. For significant changes, we'll also let workspace owners know in Slack before they take effect.

Contact

Questions or requests: support@myoncall.app.