Legal

Privacy Policy

Last updated: May 2026 · Effective for all users of Refer.

Refer is built privacy-first. We process metadata only, never the content of your messages, calls, or documents. This policy explains exactly what we collect and how we handle it.

What we collect

We collect the email address you submit on our waitlist. When your organization connects Slack, we collect metadata only: channel names, message counts per channel per user, response latency, and workspace membership. We never collect, store, or process message content, file contents, or direct message metadata.

How we use it

Waitlist emails are used only to contact you about early access. Org metadata is processed to generate organizational intelligence insights for your designated admins. We do not use your data to train machine learning models, sell to third parties, or benchmark against other customers.

Data retention

Raw signal data is retained for 180 days by default. Weekly rollup summaries are retained for up to 2 years. You can request full deletion of your organization's data at any time by emailing privacy@userefer.app. Deletion is processed within 30 days.

Third-party services

We use Supabase (database, hosted in the US), Vercel (hosting), and Resend (transactional email). For the weekly read: demo and free-tier orgs use Groq and Mistral; paid orgs use Claude (Anthropic). Prompt content includes derived insight summaries (people names, team names, edge counts) and never raw message content. Enterprise customers can bring their own Anthropic, OpenAI, or Ollama key, in which case prompts route through that customer's own account. We share only the data required for each service to function. We do not use ad-tech or analytics platforms that track individuals.

Your rights

You have the right to access, correct, or delete your personal data. For GDPR requests, email privacy@userefer.app. For California residents (CCPA): we do not sell personal information. A full GDPR and CCPA addendum will be published before general availability.

Contact

Privacy questions: privacy@userefer.app. We respond within 5 business days.