California notice: collection categories and purposes are the ones described in later sections
For California readers, Slack gives a notice at collection: the information it collects is what the "Information We Collect and Receive" section describes, collected for the business and commercial purposes described under "Information Use". The policy has no section titled "Information Use"; the California section itself points to the "How We Process your Information and our Legal Bases for Doing So" section for those purposes. Exercising California rights is covered in the "California Privacy Rights" section.
Supporting quotations
California Notice of Collection of Personal Information: We collect the information described below under “Information We Collect and Receive” for the business and commercial purposes described below under “Information Use.” To learn more about exercising your California Privacy Rights please review the “California Privacy Rights” section below.
Information We Collect And Receive
Your California Privacy Rights
We collect this information for the business and commercial purposes described in the ‘How We Process your Information and our Legal Bases for Doing So’ section above.
Qualifications & exceptions
This notice applies to California consumers; the detailed rights are in the "Your California Privacy Rights" section.
Not stated here
The notice cites an "Information Use" section that does not exist under that title in this document; the processing section is the likely referent but the policy does not say so here.
Data Access & Collection · Company practice
Slack collects Customer Data and "Other Information" through the Services, Websites and other interactions
Slack collects and receives information by operating the Services and Websites and through other interactions with Slack. That information falls into two groups: Customer Data, and everything else, which the policy calls "Other Information". The policy then lists the categories of Other Information Slack collects, generates or receives: Workspace and account information, Usage information (Services metadata, log data, device information, location information), Cookie information, Third-Party Services information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack.
Supporting quotations
Information We Collect And Receive
Slack will collect and receive information through operating the Services and Websites, and through other interactions with Slack. Such information will include Customer Data and other information and data (“Other Information”) in a variety of ways:
Other Information. Slack also collects, generates and/or receives the following categories of Other Information:
Third-Party data: Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business
Additional information provided to Slack: We also receive Other Information when submitted to our Websites or in other ways
Qualifications & exceptions
The split between Customer Data and Other Information matters throughout the policy: Slack acts on the Customer's instructions for Customer Data and uses Other Information for its own stated purposes.
The last three categories (Third-Party data, Audio and video metadata, Additional information) continue the same list in the following packet.
Data Access & Collection · Company practice
Customer Data is what Customers and Authorized Users submit through Services accounts
Customers, and the individuals a Customer grants access to a Workspace ("Authorized Users"), routinely submit Customer Data to Slack when using the Services: messages, files or other content submitted through Services accounts. The applicability section defines Customer Data the same way and places its processing under the separate Customer Agreement.
Supporting quotations
Customer Data. Customers or individuals granted access to a Workspace by a Customer (“Authorized Users”) routinely submit Customer Data (such as messages, files or other content submitted through Services accounts) to Slack when using the Services.
including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “Customer Data”)
Qualifications & exceptions
An Authorized User is an individual granted access to a Workspace by a Customer.
Customer Data is processed under the Customer Agreement and on the Customer's instructions; it is not Slack's to use for its own purposes under this policy.
Not stated here
The Customer Agreement is not supplied.
Data Access & Collection · Company practice
Account setup details come from you or your Customer; paid Customers also supply billing details
To create or update a Workspace account, you or the Customer (for example your employer) give Slack an email address, phone number, password, domain and/or other account setup details. Customers that buy a paid version of the Services also provide Slack, or its payment processors, with billing details such as credit card information, banking information and/or a billing address. A linked page on Workspace creation is referenced but not supplied.
Supporting quotations
Workspace and account information: To create or update a Workspace account, you or our Customer (e.g. your employer) supply Slack with an email address, phone number, password, domain, and/or other account set up details
In addition, Customers that purchase a paid version of the Services provide Slack (or its payment processors) with billing details such as credit card information, banking information, and/or a billing address.
Qualifications & exceptions
Billing details are provided only by Customers that purchase a paid version of the Services.
Billing details may go to Slack's payment processors rather than Slack itself.
Not stated here
The linked page about Workspace creation is not supplied.
The payment processors are not named.
Data Access & Collection · Company practice
Slack logs how Authorized Users use the Services (Services metadata)
Usage information includes Services metadata: when an Authorized User interacts with the Services, metadata is generated about how they use them. Slack gives as examples logging the Workspaces, channels, people, features, content and links you view or interact with, the types of files shared and which Third-Party Services are used, if any.
Supporting quotations
Usage information:
Services metadata. When an Authorized User interacts with the Services, metadata is generated that provides additional context about the way that an Authorized User uses the Services. For example, Slack logs the Workspaces, channels, people, features, content, and links you view or interact with, the types of files shared and what Third-Party Services are used (if any)
Qualifications & exceptions
The listed items are examples, not a closed list.
Data Access & Collection · Company practice
Servers automatically record log data such as IP address, referrer, browser details and time of use
Slack's servers automatically collect information when you access or use the Websites or Services and record it in log files. This log data may include your IP address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences.
Supporting quotations
Log data. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences.
Qualifications & exceptions
Collection is automatic on access or use; the listed fields are what the log data "may include".
Data Access & Collection · Company practice
Slack collects device information, including unique device identifiers and crash data
Slack collects information about the devices that access the Services: type of device, operating system, device settings, application IDs, unique device identifiers and crash data. Whether Slack collects some or all of this often depends on the type of device and its settings.
Supporting quotations
Device information. Slack collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this Other Information often depends on the type of device used and its settings.
Qualifications & exceptions
What is collected depends on the device type and its settings.
Data Access & Collection · Company practice
Slack approximates your location from your employer's address or your IP address
Slack receives information from you, from Customers and from other third parties that helps it approximate your location. For example, it may use a business address submitted by your employer (the Customer) or an IP address received from your browser or device to determine an approximate location, to assist with localization or for security purposes.
Supporting quotations
Location information. We receive information from you, our Customers and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer (who is our Customer) or an IP address received from your browser or device to determine approximate location to assist with localization or for security purposes.
Qualifications & exceptions
The stated location is approximate and the stated purposes are localization and security.
Sources include the Customer (your employer) and other third parties, not only your device.
Data Access & Collection · Company practice
Slack uses cookies and similar technologies; opt-out controls are in a separate Cookie Policy
Slack uses a variety of cookies and similar technologies in the Websites and Services to help collect Other Information. Details of how these technologies are used, and your opt-out controls and other options, are in Slack's Cookie Policy, which is linked but not part of this document.
Supporting quotations
Cookie information: Slack uses a variety of cookies and similar technologies in our Websites and Services to help us collect Other Information. For more details about how we use these technologies, and your opt-out controls and other options, please visit our
Qualifications & exceptions
Opt-out controls live in the Cookie Policy, not in this policy.
Not stated here
The Cookie Policy is not supplied, so the specific cookies, purposes and opt-out controls are unknown here.
Data Access & Collection · Company practice
When a Customer enables a Third-Party Service, Slack may receive personal data from it
A Customer can permit or restrict Third-Party Services for its Workspace, and can let its Authorized Users enable and disable these integrations. Slack may also offer its own apps that connect the Services to a Third-Party Service. Once a Third-Party Service is enabled, its provider may share information with Slack; for example, a connected cloud storage app may pass Authorized Users' user names and email addresses plus other information the app makes available. Slack is then authorized to connect to and access Other Information made available to it, in accordance with its agreement with the provider and the permissions granted by the Customer, including by its Authorized Users. Examples include whether you created a new account or interacted with a third-party app in a way attributable to Slack usage. Authorized Users are told to check the Third-Party Services' own privacy settings and notices; linked pages on app management are not supplied.
Supporting quotations
Third-Party Services information: A Customer can choose to permit or restrict Third-Party Services for its Workspace and Slack can receive personal data from such Third-Party Services.
Once enabled, the provider of a Third-Party Service may share certain information with Slack. For example, if a cloud storage application you are using is enabled to permit files to be imported to a Workspace, we may receive the user name and email address of Authorized Users, along with additional information that the application makes available to Slack to facilitate the integration.
When a Third-Party Service is enabled, Slack is authorized to connect and access Other Information made available to Slack in accordance with our agreement with the provider of the Third-Party Service and any permission(s) granted by our Customer (including, by its Authorized User(s)).
Qualifications & exceptions
Receipt depends on the Customer (or an Authorized User the Customer permits) enabling the Third-Party Service.
Access is bounded by Slack's agreement with the provider and the permissions granted by the Customer and its Authorized Users.
Slack does not receive or store passwords for these Third-Party Services (separate card).
Not stated here
Slack's agreements with Third-Party Service providers and the linked help pages are not supplied.
Data Access & Collection · Company practice
Contacts you import, forward or upload are collected, subject to your device's or API's consent process
Any contact information an Authorized User chooses to import (for example an address book imported to find coworkers and Slack Connect contacts, or a calendar from a device or API), forward or upload to the Services (for example when sending emails to the Services) is collected when using the Services. This happens in accordance with the consent process provided by your device or the third-party API.
Supporting quotations
Contact information: In accordance with the consent process provided by your device or other third-party API, any contact information that an Authorized User chooses to import (such as importing an address book to find coworkers and Slack Connect contacts or calendar from a device or API), forward or upload to the Services (for example, when sending emails to the Services) is collected when using the Services.
Qualifications & exceptions
Collection follows the Authorized User's choice to import, forward or upload, and the consent process of the device or API.
Data Access & Collection · Company practice
Slack may receive business and marketing data about you from affiliates, partners and others
Slack may receive data from its parent corporations, affiliates and subsidiaries, from partners, or from others, about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to its business. Slack uses this "Third-Party data" to make its own information better or more useful. This category is distinct from "Third-Party Services information", which comes from apps integrated with a Workspace.
Supporting quotations
Information We Collect And Receive
Third-Party data: Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful.
Qualifications & exceptions
Sources are parent corporations, affiliates, subsidiaries, partners or others; the policy does not name them.
The stated purpose is to make Slack's own information better or more useful.
Not stated here
Which partners or other sources supply this data is not stated.
Data Access & Collection · Company practice
Slack may store metadata about your Huddles and Clips, including when and with whom
Slack may receive, capture and store metadata derived from your use of features such as Slack Huddles or Clips, together with related data such as the date and time of a Huddle and the Authorized User you connected with.
Supporting quotations
Audio and video metadata: Slack may receive, capture, and store metadata derived from your use of features such as Slack Huddles or Clips, and additional related data such as data regarding the date and time of your Slack Huddle and the Authorized User that you connected with.
Qualifications & exceptions
The policy describes metadata and related data about these features; it does not say here whether the audio or video content itself is retained, so that is not asserted.
Not stated here
Whether Huddle or Clip content, as opposed to metadata, is stored is not stated in this passage.
Data Access & Collection · Company practice
Information you give Slack in surveys, contests, job applications, support or social media is collected
Slack also receives Other Information when you submit it to its Websites or in other ways: responses or opinions in a focus group, contest, activity or event; feedback about its products or services; information you provide when applying for a job with Slack; enrolling in a certification or other educational program hosted by Slack or a vendor; requesting support; interacting with Slack's social media accounts; or otherwise communicating with Slack.
Supporting quotations
Additional information provided to Slack: We also receive Other Information when submitted to our Websites or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, feedback you provide about our products or services, information you provide if you apply for a job with Slack, enroll in a certification program or other educational program hosted by Slack or a vendor, request support, interact with our social media accounts or otherwise communicate with Slack.
Qualifications & exceptions
Educational programs may be hosted by a vendor rather than Slack.
Data Access & Collection · Context
Nobody is obliged to provide Information, but some is collected automatically and some is needed for the Services
Generally no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (together, "Information"). However, certain Information is collected automatically, and if some Information, such as Workspace setup details, is not provided, Slack may be unable to provide the Services.
Supporting quotations
Generally, no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (collectively, “Information”). However, certain Information is collected automatically and, if some Information, such as Workspace setup details, is not provided, we may be unable to provide the Services.
Qualifications & exceptions
"Information" from here on means Customer Data and Other Information together.
Automatic collection (for example log and device data) happens regardless of this statement.
Data Access & Collection · Company practice
Slack lists nine CCPA categories it collects, including from your employer, data brokers and analytics providers
Because California law requires Slack to detail the categories of personal information it collects and discloses for certain business purposes (for example to service providers that secure its services or market its products, and to the other entities described earlier), Slack states that, in addition to the collection section, it collects the following categories from you, your employer, data analytics providers, data brokers and Third-Party Services for its business purposes: identifiers and contact information; commercial information; internet or electronic network activity information; financial information; geolocation information; professional or employment-related information; audio and visual data; in limited circumstances where allowed by law, information that may be protected under California or United States law; and inferences drawn from any of these categories.
Supporting quotations
In addition to the information provided above in the ‘Information We Collect And Receive’ section, we collect the following categories of personal information from you, your employer, data analytics providers, data brokers, and Third-Party Services for our business purposes:
Identifiers/contact information;
Commercial information;
Internet or electronic network activity information;
Financial information;
Geolocation information;
Professional or employment-related information;
Audio and visual data;
In limited circumstances where allowed by law, information that may be protected under California or United States law; and
Inferences drawn from any of the above categories.
Qualifications & exceptions
Sources named here include data brokers and data analytics providers, which the general collection section does not name.
Protected-class information is collected only in limited circumstances where allowed by law.
Inferences drawn from the other categories are themselves a collected category.
Not stated here
The data brokers and analytics providers are not named.