Privacy Policy

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

We may collect personal information through various means, including:

• Direct correspondence with you
• Telephone conversations
• Email communications
• Our website and platform
• Mobile applications
• Publicly available sources

The types of personal information we collect may include your name, email address, contact details, billing information, and any other information you provide when using our services.

Sensitive information includes information about an individual's racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, or biometric information.

We will only collect sensitive information where it is reasonably necessary for our functions or activities, and either you have consented, or we are required or authorised by law to do so. Any sensitive information collected will only be used for the primary purpose for which it was collected, a directly related secondary purpose, or with your consent.

We may collect personal information about you from third parties. If we do so, we will take reasonable steps to notify you that we have collected this information and the circumstances of its collection. Third-party sources may include service providers, business partners, or publicly available sources.

We may disclose your personal information to third parties in the following circumstances:

• With your consent
• Where required or authorised by law or a court/tribunal order
• To our service providers who assist in operating our platform
• To protect the rights, property, or safety of Altacomm, our users, or others

We take reasonable steps to ensure that any third parties to whom we disclose your personal information are bound by privacy obligations in relation to your personal information.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

Client files are retained for a minimum of seven years after the conclusion of our services, unless a longer retention period is required by law or for legitimate business purposes.

You have the right to request access to your personal information that we hold. You also have the right to request that we correct any personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

We do not charge a fee for you to access your personal information, although we may charge a reasonable fee for providing copies of information. We will respond to requests within a reasonable timeframe.

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up-to-date, complete, and relevant. We encourage you to contact us if your personal information changes or if you believe the information we hold is inaccurate.

When you connect your markup.one account to Slack, we collect and process certain data from your Slack workspace. This section details what data is collected, how it is used, how long it is retained, and how you can manage it.

Data We Collect

When you install the markup.one Slack app, we collect and store the following:

• Your Slack workspace ID and name
• Your Slack user ID and display name
• An OAuth access token (encrypted at rest using AES-256-GCM) and granted scopes
• Conversation state related to design creation (current step, prompts, and preferences)
• Brand-to-workspace associations you configure

We may also retrieve your email address from the Slack API on-demand to match your Slack identity with your markup.one account. Email addresses fetched this way are used only for account matching and are not stored separately.

How We Use This Data

We use the data collected through the Slack integration to:

• Authenticate and maintain your connection between markup.one and Slack
• Process design creation requests you initiate via Slack commands and messages
• Deliver generated designs and notifications back to you in Slack
• Associate your preferred brand with your Slack workspace

We do not use Slack data to train large language models (LLMs) or for any purpose unrelated to providing the markup.one service.

Data Retention

When you disconnect your Slack workspace from markup.one, your OAuth access token is revoked with Slack and your connection and conversation records are deactivated. Deactivated records are retained for up to 90 days for troubleshooting and audit purposes before being permanently deleted.

Webhook delivery records (containing only event type and deduplication identifiers, not message content) are retained for operational integrity.

Access, Portability & Deletion

You may request access to, export of, or deletion of your Slack integration data at any time by contacting us at privacy@altacomm.co. You can also disconnect your Slack workspace directly from your markup.one dashboard or by using the /markup disconnect command in Slack, which will immediately revoke access and deactivate all associated data.

We will respond to data requests within 10 business days.

This Privacy Policy is available on our website. We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to periodically review this page for the latest information on our privacy practices.

If you have any questions, concerns, or complaints about how we handle your personal information, please contact us:

We will respond to your enquiry or complaint within 10 business days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).