Privacy Policy

Last updated: April 20, 2026

What PR Notify does

PR Notify is a Slack app that delivers personalized GitHub pull request notifications via direct messages. It connects your GitHub activity to your Slack workspace so you receive timely alerts about review requests, comments, and mentions.

Data we collect

PR Notify stores the minimum data required to deliver notifications:

• Slack User ID and Workspace ID - to identify where to send notifications
• GitHub username - to match GitHub activity to your Slack account
• Notification preferences - your toggle settings (which notification types are enabled)
• Slack Bot Token (per workspace) - to send messages on behalf of the app

We do not store:

• Message content, PR descriptions, or code
• Your Slack messages or browsing history
• GitHub credentials or repository contents
• Personal information beyond what is listed above

How we use your data

Your data is used solely to:

• Match GitHub webhook events to the correct Slack user
• Apply your notification preferences before sending a message
• Send formatted Slack DMs about relevant PR activity

We do not sell, share, or use your data for advertising or analytics beyond basic operational metrics (e.g., Lambda invocation counts for monitoring).

Data storage and security

All data is stored in AWS DynamoDB with encryption at rest enabled by default. Bot tokens are stored per-workspace in DynamoDB. Communication between services uses HTTPS. Webhook signatures are verified using HMAC-SHA256 to prevent unauthorized access.

Third-party services

PR Notify uses the following third-party services:

• AWS (Lambda, DynamoDB, SQS, API Gateway) - infrastructure hosting
• Slack API - sending notifications and handling commands
• GitHub API - validating usernames during account linking

Data retention and deletion

Your data is retained for as long as you have the app installed. To delete your data:

• Individual users: Use the "Unlink Account" button in the PR Notify App Home tab, or run /pr-notify unlink
• Workspace admins: Uninstall the app from your Slack workspace. This automatically removes the workspace record and stored bot token.
• Full deletion request: Contact us at GitHub Issues and we will delete all associated data within 30 days.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact

For questions about this privacy policy or your data, please open an issue at github.com/sunshine-techworks/pr-notifier/issues.