This policy explains what the Async Daily Standup Bot ("the Bot", "we", "us") collects when your team installs and uses it in Microsoft Teams, why, and what your choices are. The Bot is provided by People Work Life Ltd, the data controller. Contact: support@peopleworklife.com.
The Bot runs a team's daily stand-up asynchronously: at a time the team lead configures, it sends each participant a private (1:1) card asking three questions — what you did yesterday, what you're on today, and any blockers — then posts a single summary to the team channel. There is no live call.
| Data | What it is | Why |
|---|---|---|
| Team configuration | Team and channel identifiers, the roster the lead selects (member IDs and display names), prompt/summary times, weekdays, timezone, enabled flag | To know who to prompt, and when, in your team's timezone |
| Conversation references | The Microsoft Bot Framework addressing data needed to send a proactive 1:1 or channel message (an opaque reference, plus service URL and tenant identifier) | So the Bot can deliver the prompt and post the summary |
| Stand-up entries | The free text you enter in the three fields, and a submission timestamp, keyed by member and date | To compile the daily summary your team sees |
We do not collect message content from your channels, files, email, calendar, or any Microsoft 365 data beyond the above. We do not run analytics or profiling on your entries, and we do not use them to train any model.
These are our sub-processors; we put appropriate data-processing terms in place with each.
Depending on the storage region we select and where our sub-processors operate, your data may be processed outside the United Kingdom. Where it is, we rely on a UK adequacy decision where one applies, or otherwise on appropriate safeguards under Article 46 UK GDPR — standard contractual clauses together with the UK International Data Transfer Addendum.
We protect your data with encryption in transit (TLS) and at rest on our managed infrastructure (Vercel, Upstash), access limited to the running service and to authorised personnel on a need-to-know basis, and the data minimisation and short retention described in this policy. No system is perfectly secure, but in the event of a personal-data breach we will act, and notify where required, in line with UK GDPR without undue delay.
We process this data on the basis of legitimate interests — running the stand-up your team lead has set up — balanced against members' privacy by collecting only what section 2 lists, using entries for nothing else, and expiring them within about three days. Entries are ordinary workplace updates; please don't enter special-category or sensitive personal data in the card.
The Bot is a workplace tool and is not directed at children.
We'll update this page if the Bot's data handling changes, and revise the date above. Material changes will be surfaced in the app where practical.
People Work Life Ltd — support@peopleworklife.com.