Third-Party Services and other third parties are outside this policy
The policy does not cover third-party applications or software that integrate with the Services through the Slack platform ("Third-Party Services"), nor any other third-party products, services or businesses. Those third parties provide their services under their own terms of service and privacy policy, which are not supplied here.
Supporting quotations
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Slack platform (“Third-Party Services”), or any other third-party products, services or businesses who will provide their services under their own terms of service and privacy policy.
Qualifications & exceptions
Slack can still receive information from Third-Party Services and share Information with them; those practices are described in the collection and sharing sections, while the third parties' own handling is governed by their own policies.
Not stated here
The third parties' terms of service and privacy policies are not supplied.
Customers set their own sharing practices; Slack does not control how Customers or third parties share
The sharing section describes how Slack may share and disclose Information (Customer Data and Other Information, as defined in the collection section). Customers determine their own policies and practices for sharing and disclosing Information to third parties, and Slack states that it does not control how a Customer or any third party chooses to share or disclose Information.
Supporting quotations
How We Share and Disclose Information
This section describes how Slack may share and disclose Information, as described in the section entitled 'Information We Collect and Receive' above. Customers determine their own policies and practices for the sharing and disclosure of Information to third parties. Slack does not control how a Customer or any third party chooses to share or disclose Information.
Qualifications & exceptions
Slack's own sharing is listed in the cards that follow; your Customer's sharing of Workspace Information is outside Slack's control under this policy.
Sharing & Disclosure · Company practice
Slack shares Information on the Customer's instructions, with consent, under the Customer Agreement and law
Slack may share and disclose Information in accordance with a Customer's instructions and with appropriate consent, including under any applicable terms of the Customer Agreement, through the Customer's use of Services functionality, and in compliance with applicable law and legal process. Some sharing done at a Customer's request may incur additional fees. This mirrors the processing section, where Slack is the processor of Customer Data and the Customer the controller.
Supporting quotations
The Customer’s Instructions. Slack may share and disclose Information in accordance with a Customer’s instructions and with appropriate consent, including any applicable terms in the Customer Agreement and the Customer’s use of Services functionality and in compliance with applicable law and legal process. Some sharing at a Customer’s request may incur additional fees.
Slack is a processor of Customer Data and the Customer is the controller.
Qualifications & exceptions
Sharing on instruction is also subject to appropriate consent and to applicable law and legal process.
Additional fees may apply to some sharing done at a Customer's request; the fee terms are not supplied.
Not stated here
The Customer Agreement and any fee schedule are not supplied.
Sharing & Disclosure · Company practice
What you submit may be visible to other Authorized Users in your Workspace or connected Workspaces
When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces or Slack Connect instances. For example, an Authorized User's email address may be displayed with their Workspace profile, and other profile and organizational information may be displayed to Authorized Users. The Help Center is referenced for details and is not supplied.
Supporting quotations
Displaying the Services. When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces or Slack Connect instances. For example, an Authorized User’s email address may be displayed with their Workspace profile, or other profile and organizational information may be displayed to Authorized Users.
Qualifications & exceptions
Visibility extends to connected Workspaces and Slack Connect instances, not only your own Workspace.
Sharing & Disclosure · Company practice
Through Slack Connect your profile may be shared or searchable by users outside your Workspace
The Services let Authorized Users in independent Workspaces collaborate, for example through Slack Connect or email interoperability. Information such as an Authorized User's profile and organizational information may be shared, subject to the policies and practices of the Workspaces you use. Depending on your Workspace's settings, your profile may be shared, searchable or discoverable by Authorized Users or other users outside the Workspaces you belong to, or shared by email when you invite someone to collaborate via Slack Connect. Slack says it includes administrator or user controls for external collaboration depending on the use case, and Authorized Users may also expand the visibility of certain content and Customer Data, such as files.
Supporting quotations
Collaborating with Others. The Services provide different ways for Authorized Users working in independent Workspaces to collaborate, such as Slack Connect or email interoperability. Information, such as an Authorized User’s profile and organizational information, may be shared, subject to the policies and practices of the Workspace(s) you use.
For example, depending on the settings of your Workspace, to enable connections with other Authorized Users, your profile may be shared or searchable or discoverable by Authorized Users or other users outside of Workspace(s) you belong to, or shared via email when you invite an Authorized User or other user to collaborate via Slack Connect. In many instances, Slack includes either administrator controls or user controls, depending on the use case, with respect to external collaboration. Authorized Users may also decide to expand the visibility of certain content and Customer Data, such as files.
Qualifications & exceptions
External sharing depends on the settings and practices of the Workspaces you use; whether you or your administrator holds the control depends on the use case.
Sharing & Disclosure · Company practice
Your employer and other Customer representatives may access, modify or restrict your Information
Owners, administrators, Authorized Users and other Customer representatives and personnel may be able to access, modify or restrict access to Information. The policy's example is your employer using Services features to access or modify your profile details or to export logs of Workspace activity. Workspace settings are at slack.com/account/settings.
Supporting quotations
Customer access. Owners, administrators, Authorized Users, and other Customer representatives and personnel may be able to access, modify, or restrict access to Information. This may include, for example, your employer using features of the Services to access or modify your profile details, or to export logs of Workspace activity. For information about your Workspace settings, please visit https://slack.com/account/settings.
Qualifications & exceptions
Access is by the Customer's people, including your employer, through Services features, not by Slack on its own account.
Sharing & Disclosure · Company practice
Slack may share your Information with service providers and business partners
Slack may engage third-party companies or individuals as service providers or business partners to process Information and support its business, for example to provide virtual computing and storage, to help verify Owners and Customers, or to develop strategic partnerships that support common customers. Depending on the service provided, Slack may share your Information with them. The subprocessors Slack uses for the Services are listed in the Salesforce Infrastructure & Sub-processors Documentation, which is not supplied.
Supporting quotations
Third-Party service providers and partners. We may engage third-party companies or individuals as service providers or business partners to process Information and support our business. These third parties may, for example, provide virtual computing and storage services, assist Slack with verifying Owners and Customers, or we may share business information to develop strategic partnerships with Third-Party service providers to support our common customers. In this respect, depending on the Third-Party service provided, Slack may share your Information. Additional information about the subprocessors we use to support delivery of our Services is set forth in the Salesforce Infrastructure & Sub-processors Documentation.
Qualifications & exceptions
Sharing with partners includes sharing business information to develop strategic partnerships, not only processing on Slack's behalf.
Not stated here
The subprocessor list (Salesforce Infrastructure & Sub-processors Documentation) is not supplied.
Sharing & Disclosure · Company practice
Enabled Third-Party Services may receive your Information and handle it under their own policies
A Customer may enable, or permit Authorized Users to enable, Third-Party Services. When they are enabled, Slack may share Information with those Third-Party Services. Slack requires each provider to disclose all permissions for information accessible through the Services but does not guarantee that they do so. Third-Party Services are not owned or controlled by Slack, this Privacy Policy does not apply to them, and third parties granted access to Information may have their own policies for its collection, use and sharing; Slack directs you to their permissions, privacy settings and notices.
Supporting quotations
Third-Party Services. A Customer may enable, or permit Authorized Users to enable, Third-Party Services. We require each Third-Party Service provider to disclose all permissions for information accessible through the Services, but we do not guarantee that they do so. When Third-Party Services are enabled by a Customer or an Authorized User, Slack may share Information with Third-Party Services. Third-Party Services are not owned or controlled by Slack and third parties that have been granted access to Information may have their own policies and practices for its collection, use, and sharing.
A Customer can choose to permit or restrict Third-Party Services for its Workspace and Slack can receive personal data from such Third-Party Services.
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Slack platform (“Third-Party Services”)
Qualifications & exceptions
Sharing follows enablement by the Customer or a permitted Authorized User.
Slack does not guarantee that providers disclose their permissions.
The collection section describes the reverse flow: Slack receiving data from enabled Third-Party Services.
Not stated here
The Third-Party Services' own policies are not supplied.
Anything you post in a Slack community forum, including personal data, is public
The Information you choose to provide in a community forum, including personal data, will be publicly available.
Supporting quotations
Forums. The Information you choose to provide in a community forum including personal data will be publicly available.
Qualifications & exceptions
This applies to what you choose to provide in a community forum.
Sharing & Disclosure · Company commitment
Slack says it does not sell personal information and will not do so without offering an opt-out
Slack collects the California categories for the business and commercial purposes in the processing section and shares them as described in the sharing section. It states that it does not sell, as the CCPA or otherwise defines the term, the personal information it collects, and will not sell it without providing a right to opt out.
Supporting quotations
Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out).
Qualifications & exceptions
The commitment concerns "sale"; the same paragraph separately describes sharing identifiers and internet activity with advertisers (next card).
Sharing & Disclosure · Company practice
Slack may share identifiers and internet activity with advertisers to target ads on other sites
Slack may share personal information, in the form of identifiers and internet activity information, with third-party advertisers to target advertisements on non-Slack websites, applications and services. It may also allow third parties to collect personal information from its sites or services where those third parties are authorized service providers who have agreed to Slack's contractual limits on retention, use and disclosure, or where you use Slack's sites or services to interact with third parties or direct Slack to disclose your personal information to them. California consumers can opt out of this sharing (see the opt-out cards).
Supporting quotations
We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-Slack websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our sites or services to interact with third parties or direct us to disclose your personal information to third parties.
Qualifications & exceptions
Limited to identifiers and internet activity information.
Third-party collection on Slack's sites is allowed for contractually bound service providers or when you interact with or direct disclosure to third parties.
This advertiser sharing appears only in the California section; the general sharing section does not list advertisers as recipients.
Not stated here
The advertisers are not named; whether this sharing is limited to Websites or also covers the Services is not stated.
Cross-references
contrast (model-proposed): Slack says it does not sell personal information and will not do so without offering an opt-out — contrast: Reviewed tension: Slack states it does not sell personal information, while the same paragraph says it may share identifiers and internet activity with third-party advertisers to target ads on other sites. The policy treats sharing for ads as distinct from sale and offers an opt-out for it.
Opt out of ad-sharing with a Global Privacy Control signal, or by contacting Slack for non-cookie identifiers
To opt out of sharing activity based on your cookie identifiers, turn on a Global Privacy Control in your web browser or browser extension; the California Privacy Protection Agency's website is referenced for information on valid controls. To opt out of sharing based on other identifiers, such as your email address or phone number, contact Slack as described in the "Contacting Slack" section.
Supporting quotations
If you would like to opt-out of sharing activity based on your cookie identifiers, turn on a Global Privacy Control in your web browser or browser extension.
If you would like to opt-out of sharing activity based on other identifiers (like email address or phone number), contact us in accordance with the “Contacting Slack” section, below.
Qualifications & exceptions
A Global Privacy Control covers cookie identifiers only; other identifiers need a direct request to Slack.
Slack shares Other Information with others, including law enforcement, to respond to legal requests and prevent harm
As a legitimate-interest purpose, Slack shares information with others, including law enforcement, and responds to legal requests. Slack states its interest and the general public's in preventing and addressing fraud, unauthorized use of Slack, violations of its terms or other harmful or illegal activity; protecting itself, its users or others, including in investigations or regulatory enquiries; and preventing death or imminent bodily harm.
Supporting quotations
Share information with others including law enforcement and to respond to legal requests.
It is in our interest and the interest of the general public to prevent and address fraud, unauthorized use of Slack, violations of our terms or other harmful or illegal activity; to protect ourselves, our users or others, including as part of investigations or regulatory enquiries; or to prevent death or imminent bodily harm.
Qualifications & exceptions
The detailed disclosure conditions are in the sharing section (law enforcement and regulators; enforcing rights, fraud and safety).
Sharing & Disclosure · Company practice
At Slack events and webinars, your profile may be shared with sponsors when you register or scan your badge
If you attend an event or webinar organized by Slack, Slack may share your profile and organizational information with the event or webinar sponsors when you register, have your badge scanned, or join a breakout room. Where applicable law requires it, you consent to that sharing through the registration form or by allowing your badge to be scanned at a sponsor booth. Your information is then subject to the sponsors' privacy statements, and the terms shown at registration apply; neither is supplied here.
Supporting quotations
How We Share and Disclose Information
Organizers and sponsors of Events/Webinars. If you attend an event or webinar organized by Slack, we may share your profile and organizational information with the event or webinar sponsors when you register, have your badge scanned, or join a breakout room. If required by applicable law, you may consent to such sharing via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors’ privacy statements.
Qualifications & exceptions
Consent is collected through registration or badge scanning only where applicable law requires it.
Sponsors' handling is governed by their own privacy statements.
Not stated here
Event registration terms and sponsor privacy statements are not supplied.
Sharing & Disclosure · Company practice
Slack may share your Information with lawyers, bankers, auditors and insurers
Slack may share your Information with professional advisers acting as service providers, processors, controllers or joint controllers, including lawyers, bankers, auditors and insurers providing consultancy, banking, legal, insurance and accounting services, to the extent Slack is legally obliged to share or has a legitimate interest in sharing Information containing personal data.
Supporting quotations
Professional advisers. We may share your Information with professional advisers acting as service providers, processors, controllers, or joint controllers - including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services, and to the extent we are legally obliged to share or have a legitimate interest in sharing your Information containing personal data.
Qualifications & exceptions
Sharing of personal data with advisers is limited to legal obligation or a legitimate interest.
Advisers may act as controllers or joint controllers, not only as processors.
Sharing & Disclosure · Company practice
Slack may share Information with its corporate affiliates, parents and subsidiaries
Slack may share Information with its corporate affiliates, parents and/or subsidiaries. The policy states no purpose limit for this sharing.
Supporting quotations
Corporate Affiliates. Slack may share Information with our corporate affiliates, parents and/or subsidiaries.
Not stated here
The affiliates are not named here; the policy elsewhere refers to Salesforce documentation.
Sharing & Disclosure · Company practice
In a merger, sale, bankruptcy or similar deal, some or all Information may be transferred
If Slack engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of its assets or stock, financing, public offering of securities, acquisition of all or part of its business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the collection section may be shared or transferred, subject to standard confidentiality arrangements.
Supporting quotations
During a Change to Slack’s Business. If Slack engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Slack’s assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the ‘Information We Collect and Receive’ section may be shared or transferred, subject to standard confidentiality arrangements.
Qualifications & exceptions
Transfer may happen during steps taken in contemplation of such a transaction, not only on completion.
The only stated protection is "standard confidentiality arrangements".
Sharing & Disclosure · Permission or license
Aggregated or de-identified Information may be disclosed or used for any purpose
Slack may disclose or use aggregated or de-identified Information for any purpose, for example sharing it with prospects or partners for business or research. This is broader than the processing section's example of using de-identified information to improve the Services.
Supporting quotations
Aggregated or De-identified Data. We may disclose or use aggregated or de-identified Information for any purpose. For example, we may share aggregated or de-identified Information with prospects or partners for business or research.
Qualifications & exceptions
Applies to Information once aggregated or de-identified; the policy does not define the de-identification standard.
Not stated here
The method or standard of aggregation and de-identification is not described.
Slack may disclose Other Information to law enforcement when it reasonably believes the law allows or requires it
If Slack receives a request for information, it may disclose Other Information if it reasonably believes the disclosure is in accordance with or required by applicable law, regulation or legal process. Slack's Data Request Policy, Data Request Overview and Transparency Report describe how it responds to requests from government agencies, law enforcement and others; they are not supplied. Such disclosure may at times include information that Slack Technologies, LLC processes on behalf of Slack Technologies Limited as a subprocessor, including under any data protection agreement between Slack and its Customers.
Supporting quotations
Law Enforcement and Regulators. If we receive a request for information, we may disclose Other Information if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process.
This may at times include information that Slack Technologies, LLC processes on behalf of Slack Technologies Limited in its role as a subprocessor, including as pursuant to the terms of any data protection agreement between Slack and its Customers.
Qualifications & exceptions
This item speaks of Other Information; Customer Data is handled on the Customer's instructions and under any data protection agreement.
The standard is Slack's reasonable belief that disclosure is in accordance with or required by law, regulation or legal process.
Not stated here
The Data Request Policy, Data Request Overview, Transparency Report and the data protection agreement are not supplied.
Slack may share Information to enforce its contracts, prevent fraud and protect safety
Slack may share Information to protect and defend the rights, property or safety of Slack, its users or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud or security issues, including to prevent death or imminent bodily harm.
Supporting quotations
To enforce our rights, prevent fraud, and for safety. To protect and defend the rights, property, or safety of Slack, its users, or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud, or security issues, including to prevent death or imminent bodily harm.
Qualifications & exceptions
Enforcing Slack's own contracts and policies is one of the stated grounds.
Sharing & Disclosure · Company practice
For corporate Workspaces, consent to share can come from the primary owner or a corporate officer, not you
Slack may share Information with third parties when it has consent or as otherwise permitted in the policy. Who gives that consent depends on the Workspace: for Workspaces registered to corporate entities, Slack may share with the consent of the Workspace primary owner, an authorized corporate officer or their designee; for workplaces created without a formal affiliation, Slack may require the user's own consent.
Supporting quotations
With Consent. Slack may share Information with third parties when we have consent to do so or as otherwise permitted in this Privacy Policy. For Workspaces registered to corporate entities, Slack may share Information with consent of the Workspace primary owner or authorized corporate officer, or their designee. For workplaces created without a formal affiliation, Slack may require user consent.
Qualifications & exceptions
In a corporate Workspace, the consent that permits sharing may be the organization's, not the individual user's.
"As otherwise permitted in this Privacy Policy" means consent is not the only basis for sharing.