Slack Bot Challenge.me
Security

​​

​

Security & Data Protection at bot-challenge.me

At bot-challenge.me, security, privacy, and transparency are our top priorities. Our platform is designed to protect your data while providing an engaging experience for your team. We operate fully within the European Union and follow industry-leading security standards.

What We Collect and Why

In challenge.me We believe in minimal data collection—we only store what is necessary for our slack bot to function effectively within Slack.

Here’s What We Collect:

✔️ Slack Workspace ID – Used to identify your workspace and provide a tailored experience.

✔️ Slack User ID – Allows us to track participation in challenges while keeping personal data private.

Why?

• We need Workspace IDs to connect the bot to your Slack environment.

• User IDs allow us to assign challenge participation and rewards without storing personal information.

We do not collect names, email addresses, or any personally identifiable information.

Where Is Data Stored?

Our infrastructure is fully hosted on Google Cloud Platform (GCP) in the EU, ensuring compliance with GDPR and European data protection laws.

📍 Application Server: Europe-Central2 (Warsaw, Poland) – Ensures fast and secure access.

📍 Database Storage: MongoDB in Belgium (GCP servers) – Provides encrypted and reliable storage.

All data is encrypted in transit and at rest, ensuring maximum security.

What Type of Authentication Do We Use?

We use Slack OAuth 2.0 authentication, meaning:

🔐 No passwords stored – We rely on Slack’s secure authentication system.

🔐 User consent required – The bot only accesses data that Slack permissions allow.

🔐 Revocable access – You can remove the bot from your Slack workspace at any time.

Your Privacy, Your Control

We are fully GDPR-compliant and provide full transparency in data usage. You can request data deletion at any time.

For any security-related inquiries, feel free to contact us - security@bot-challenge.me.

​