hall-monitor

Privacy

What we collect, why we collect it, and how long we keep it.

Last updated: May 2026

What we collect

  • Normalized event data webhooks — PR titles, commit SHAs, CI results, deploy statuses, and author usernames. We normalize and discard the raw webhook payload immediately on receipt; only the structured fields we actually use are retained.
  • Your Slack workspace bot token, so we can post messages on your behalf.
  • Slack user IDs and display names, used to @-mention PR authors and reviewers.
  • GitHub-to-Slack username mappings, if you configure them in the dashboard.
  • A hashed session token when you sign in to the dashboard. Sessions expire after 30 days.

What we don't collect

  • Source code. hall-monitor receives webhook metadata only — no file contents, no diffs.
  • Slack message history. We post messages and responses but never read entire channels.
  • Personal data beyond what's in your GitHub and Slack profiles (usernames, display names).
  • Passwords, payment data, or any credentials beyond OAuth tokens needed to operate the service.

How long we keep it

  • PR, deploy, and issue state is retained while your workspace is active.
  • Dashboard sessions expire after 30 days.
  • Normalized event data is retained for up to 90 days for operational replay, then automatically deleted. Raw webhook payloads are never stored — only the structured fields we use are kept.
  • Weekly aggregate summaries (event type and source counts per week) are retained indefinitely as anonymized usage history.
  • Usage counts (number of events per day) are retained for billing history and performance monitoring, but not tied to specific PRs or users.
  • Automated cleanup runs weekly on Sundays at approximately 04:00 UTC. During this window, expired sessions, old job records, and events older than 90 days are purged.

How we use it

  • To post and update Slack threads as PRs move through CI and deployment.
  • To route notifications to the right channels and users based on your configuration.
  • To power the activity dashboard and API.
  • We do not sell your data or use it to train AI models in any way.

Deleting your data

  • Uninstalling the GitHub App or Slack bot removes your installation from our system.
  • Full deletion of all stored data available within 30 days of request.
  • To request deletion, email support@hall-monitor.dev with your GitHub org or Slack workspace name. We'll confirm receipt, delete all associated data within 30 days, and send confirmation when complete.

Data storage

  • All data is stored in the United States on Fly.io infrastructure. No data is stored on-premise or in customer-controlled environments.
  • Sub-processors: Fly.io (hosting and compute), Postgres on Fly.io (database), Slack (messaging platform), GitHub (webhook source).

Questions?

Reach out at