Legal
Privacy Policy
Last updated: August 20, 2026. This is not legal advice.
HonestRetro is the sprint retrospective product at https://unpack.team. This policy explains what we collect when you use the Service, why we collect it, and how to reach us. The Service is built for software teams running retrospectives, standups, and related sprint rituals. It stores team feedback — cards, votes, check-ins, action items, and (if you use them) standup responses.
Who we are
“We” means the operator of HonestRetro / unpack.team. Questions about privacy: support@unpack.dev.
What we collect
- Account data. Name, email address, and authentication details (including Google OAuth identifiers if you sign in with Google). Optional profile fields you choose to provide.
- Organization and team data. Organization names, team names, memberships, and roles.
- Ceremony content. Retrospective cards, groups, votes, discussion notes, action items, mood check-ins, health-check answers, standup responses, and similar content you or your teammates submit. Cards may be shown as anonymous to other participants; we still associate a card with its author so that person can edit or reveal it.
- Integrations you connect. If an organization admin connects Slack, Jira, Linear, or similar tools, we store the tokens and identifiers needed to send notifications or create issues on your behalf. We do not scrape those tools for content you did not ask us to sync.
- Technical logs. IP address, browser user agent, timestamps, and error reports needed to run and secure the Service.
How we use it
- To provide the Service: boards, phases, voting, action-item tracking, and account administration.
- To run optional AI features (private card coaching, grouping, discussion guides, action-item drafts). Card and conversation text you submit to those features is sent to our AI provider to generate a response. The coach is private to the author; we do not post coaching transcripts to Slack or email them to a manager.
- To send transactional email (invites, receipts, retro summaries you enable).
- To prevent abuse, debug outages, and meet legal obligations.
We do not sell personal data. We do not use ceremony content to train a public model of our own. We do not run advertising pixels on the public marketing site today.
Who we share with
- Your teammates, according to the visibility rules of the retro or standup (anonymous cards hide the author from other participants unless the author reveals).
- Infrastructure processors we use to host the app, send email, process payments (if you subscribe), and run AI features. They process data on our instructions.
- Integrations you enable (for example creating a Jira or Linear issue from an action item, or posting a Slack notification).
- Authorities when we are legally required to disclose information.
Retention and deletion
We keep account and team content for as long as the organization uses the Service, and for a limited period afterward in backups. You can delete cards, retros, or your account from the product where those controls exist. Organization owners can ask us to delete an organization by emailing support@unpack.dev. We may retain records needed for billing, security, or law.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to certain processing. Email support@unpack.dev and we will respond. If you are in an organization account, some requests have to go through your organization admin because the content belongs to the team.
Children
The Service is for workplace teams. It is not directed at children under 16.
International transfers
We host the Service on cloud infrastructure that may process data in the United States or other countries. If that is not acceptable for your organization, do not use the Service.
Changes
We may update this policy. The “Last updated” date will change. Material changes will be posted on this page.