This is Slack's Privacy Policy, effective July 5, 2023
The document is Slack's Privacy Policy with a stated effective date of July 5, 2023. Only this dated version is analyzed; earlier or later versions are not supplied.
Supporting quotations
Privacy Policy
Effective: July 5, 2023
Qualifications & exceptions
The effective date is the one printed on the saved version; no archive or successor version is supplied.
Use & Processing · Context
The policy covers how Slack collects, uses and discloses Personal Data and your choices
The policy describes how Slack collects, uses and discloses information associated with an identified or identifiable individual, which it defines as "Personal Data", and what choices you have about that activity. Questions can be sent to Slack.
Supporting quotations
This Privacy Policy describes how Slack collects, uses, and discloses information associated with an identified or identifiable individual (referred to in this Privacy Policy as “Personal Data”) and what choices you have around this activity.
Qualifications & exceptions
"Personal Data" means information associated with an identified or identifiable individual, as the policy defines it.
Legal Rights & Agreement Rules · Context
"Slack" means Slack Technologies, LLC or Slack Technologies Limited
When the policy says "Slack" it means one of two companies, Slack Technologies, LLC or Slack Technologies Limited. Which one applies to you is explained in the "Identifying the Data Controller and Processor" section later in the policy.
Supporting quotations
When we refer to “Slack”, we mean Slack Technologies, LLC or Slack Technologies Limited, as explained in more detail in the “Identifying the Data Controller and Processor” section below.
Qualifications & exceptions
Which entity is responsible depends on where the Workspace's Customer is established, as set out in the controller and processor section.
Legal Rights & Agreement Rules · Context
The policy applies to Slack's Services, Websites and other interactions with Slack
The policy applies to Slack's online workplace productivity tools and platform, including the Slack mobile and desktop applications (the "Services"), to Slack.com and other Slack websites (the "Websites"), and to other interactions you may have with Slack such as customer service inquiries and user conferences. Slack states that this is the only privacy policy that applies to Slack.
Supporting quotations
Applicability of This Privacy Policy
This Privacy Policy applies to Slack’s online workplace productivity tools and platform, including the associated Slack mobile and desktop applications (collectively, the “Services”), Slack.com and other Slack websites (collectively, the “Websites”) and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with Slack.
For the avoidance of doubt, this is the only privacy policy that applies to Slack.
Qualifications & exceptions
If you do not agree with the policy, Slack says not to access or use the Services, Websites or any other aspect of Slack's business.
Third-Party Services and other third parties are excluded from the policy (see the separate card).
Legal Rights & Agreement Rules · Restriction or exception
Do not use Slack if you do not agree with the policy
Slack ties use to acceptance: if you do not agree with the Privacy Policy, you are told not to access or use the Services, the Websites or any other aspect of Slack's business.
Supporting quotations
If you do not agree with this Privacy Policy, then do not access or use the Services, Websites or any other aspect of Slack’s business.
Sharing & Disclosure · Restriction or exception
Third-Party Services and other third parties are outside this policy
The policy does not cover third-party applications or software that integrate with the Services through the Slack platform ("Third-Party Services"), nor any other third-party products, services or businesses. Those third parties provide their services under their own terms of service and privacy policy, which are not supplied here.
Supporting quotations
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Slack platform (“Third-Party Services”), or any other third-party products, services or businesses who will provide their services under their own terms of service and privacy policy.
Qualifications & exceptions
Slack can still receive information from Third-Party Services and share Information with them; those practices are described in the collection and sharing sections, while the third parties' own handling is governed by their own policies.
Not stated here
The third parties' terms of service and privacy policies are not supplied.
A separate Customer Agreement governs the Services and Customer Data; the Customer controls its Workspace
A separate contract, the "Customer Agreement", governs delivery, access and use of the Services, including the processing of data such as messages, files or other content submitted through Services accounts, which the policy calls "Customer Data". The organization that entered into the Customer Agreement, for example your employer, is the "Customer"; it controls its instance of the Services (its "Workspace") and any associated Customer Data.
Supporting quotations
In addition, a separate agreement governs delivery, access and use of the Services (the “Customer Agreement”), including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “Customer Data”).
The organization (e.g., your employer or another entity or person) that entered into the Customer Agreement (“Customer”) controls its instance of the Services (its “Workspace”) and any associated Customer Data.
Qualifications & exceptions
The Customer Agreement is a separate document and is not supplied here.
Customer Data and the Customer's control of it are the basis for the processor and controller roles described later in the policy.
Not stated here
The Customer Agreement's terms on Customer Data are not supplied.
Questions about Workspace settings and privacy practices go to the Customer, not Slack
For questions about a specific Workspace's settings and privacy practices, the policy directs you to the Customer whose Workspace you use. If you have an account, slack.com/account/team lists the Workspace owners and administrators. If you were invited to a Workspace but have not created an account, you should ask the Customer that sent the invitation.
Supporting quotations
If you have any questions about specific Workspace settings and privacy practices, please contact the Customer whose Workspace you use. If you have an account, you can check http://slack.com/account/team for the contact information of your Workspace owner(s) and administrator(s). If you have received an invitation to join a Workspace but have not yet created an account, you should request assistance from the Customer that sent the invitation.
Qualifications & exceptions
The account page applies only if you already have an account; invitees without an account are referred to the inviting Customer.
Data Access & Collection · Context
California notice: collection categories and purposes are the ones described in later sections
For California readers, Slack gives a notice at collection: the information it collects is what the "Information We Collect and Receive" section describes, collected for the business and commercial purposes described under "Information Use". The policy has no section titled "Information Use"; the California section itself points to the "How We Process your Information and our Legal Bases for Doing So" section for those purposes. Exercising California rights is covered in the "California Privacy Rights" section.
Supporting quotations
California Notice of Collection of Personal Information: We collect the information described below under “Information We Collect and Receive” for the business and commercial purposes described below under “Information Use.” To learn more about exercising your California Privacy Rights please review the “California Privacy Rights” section below.
Information We Collect And Receive
Your California Privacy Rights
We collect this information for the business and commercial purposes described in the ‘How We Process your Information and our Legal Bases for Doing So’ section above.
Qualifications & exceptions
This notice applies to California consumers; the detailed rights are in the "Your California Privacy Rights" section.
Not stated here
The notice cites an "Information Use" section that does not exist under that title in this document; the processing section is the likely referent but the policy does not say so here.
Data Access & Collection · Company practice
Slack collects Customer Data and "Other Information" through the Services, Websites and other interactions
Slack collects and receives information by operating the Services and Websites and through other interactions with Slack. That information falls into two groups: Customer Data, and everything else, which the policy calls "Other Information". The policy then lists the categories of Other Information Slack collects, generates or receives: Workspace and account information, Usage information (Services metadata, log data, device information, location information), Cookie information, Third-Party Services information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack.
Supporting quotations
Information We Collect And Receive
Slack will collect and receive information through operating the Services and Websites, and through other interactions with Slack. Such information will include Customer Data and other information and data (“Other Information”) in a variety of ways:
Other Information. Slack also collects, generates and/or receives the following categories of Other Information:
Third-Party data: Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business
Additional information provided to Slack: We also receive Other Information when submitted to our Websites or in other ways
Qualifications & exceptions
The split between Customer Data and Other Information matters throughout the policy: Slack acts on the Customer's instructions for Customer Data and uses Other Information for its own stated purposes.
The last three categories (Third-Party data, Audio and video metadata, Additional information) continue the same list in the following packet.
Data Access & Collection · Company practice
Customer Data is what Customers and Authorized Users submit through Services accounts
Customers, and the individuals a Customer grants access to a Workspace ("Authorized Users"), routinely submit Customer Data to Slack when using the Services: messages, files or other content submitted through Services accounts. The applicability section defines Customer Data the same way and places its processing under the separate Customer Agreement.
Supporting quotations
Customer Data. Customers or individuals granted access to a Workspace by a Customer (“Authorized Users”) routinely submit Customer Data (such as messages, files or other content submitted through Services accounts) to Slack when using the Services.
including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “Customer Data”)
Qualifications & exceptions
An Authorized User is an individual granted access to a Workspace by a Customer.
Customer Data is processed under the Customer Agreement and on the Customer's instructions; it is not Slack's to use for its own purposes under this policy.
Not stated here
The Customer Agreement is not supplied.
Data Access & Collection · Company practice
Account setup details come from you or your Customer; paid Customers also supply billing details
To create or update a Workspace account, you or the Customer (for example your employer) give Slack an email address, phone number, password, domain and/or other account setup details. Customers that buy a paid version of the Services also provide Slack, or its payment processors, with billing details such as credit card information, banking information and/or a billing address. A linked page on Workspace creation is referenced but not supplied.
Supporting quotations
Workspace and account information: To create or update a Workspace account, you or our Customer (e.g. your employer) supply Slack with an email address, phone number, password, domain, and/or other account set up details
In addition, Customers that purchase a paid version of the Services provide Slack (or its payment processors) with billing details such as credit card information, banking information, and/or a billing address.
Qualifications & exceptions
Billing details are provided only by Customers that purchase a paid version of the Services.
Billing details may go to Slack's payment processors rather than Slack itself.
Not stated here
The linked page about Workspace creation is not supplied.
The payment processors are not named.
Data Access & Collection · Company practice
Slack logs how Authorized Users use the Services (Services metadata)
Usage information includes Services metadata: when an Authorized User interacts with the Services, metadata is generated about how they use them. Slack gives as examples logging the Workspaces, channels, people, features, content and links you view or interact with, the types of files shared and which Third-Party Services are used, if any.
Supporting quotations
Usage information:
Services metadata. When an Authorized User interacts with the Services, metadata is generated that provides additional context about the way that an Authorized User uses the Services. For example, Slack logs the Workspaces, channels, people, features, content, and links you view or interact with, the types of files shared and what Third-Party Services are used (if any)
Qualifications & exceptions
The listed items are examples, not a closed list.
Data Access & Collection · Company practice
Servers automatically record log data such as IP address, referrer, browser details and time of use
Slack's servers automatically collect information when you access or use the Websites or Services and record it in log files. This log data may include your IP address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences.
Supporting quotations
Log data. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences.
Qualifications & exceptions
Collection is automatic on access or use; the listed fields are what the log data "may include".
Data Access & Collection · Company practice
Slack collects device information, including unique device identifiers and crash data
Slack collects information about the devices that access the Services: type of device, operating system, device settings, application IDs, unique device identifiers and crash data. Whether Slack collects some or all of this often depends on the type of device and its settings.
Supporting quotations
Device information. Slack collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this Other Information often depends on the type of device used and its settings.
Qualifications & exceptions
What is collected depends on the device type and its settings.
Data Access & Collection · Company practice
Slack approximates your location from your employer's address or your IP address
Slack receives information from you, from Customers and from other third parties that helps it approximate your location. For example, it may use a business address submitted by your employer (the Customer) or an IP address received from your browser or device to determine an approximate location, to assist with localization or for security purposes.
Supporting quotations
Location information. We receive information from you, our Customers and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer (who is our Customer) or an IP address received from your browser or device to determine approximate location to assist with localization or for security purposes.
Qualifications & exceptions
The stated location is approximate and the stated purposes are localization and security.
Sources include the Customer (your employer) and other third parties, not only your device.
Data Access & Collection · Company practice
Slack uses cookies and similar technologies; opt-out controls are in a separate Cookie Policy
Slack uses a variety of cookies and similar technologies in the Websites and Services to help collect Other Information. Details of how these technologies are used, and your opt-out controls and other options, are in Slack's Cookie Policy, which is linked but not part of this document.
Supporting quotations
Cookie information: Slack uses a variety of cookies and similar technologies in our Websites and Services to help us collect Other Information. For more details about how we use these technologies, and your opt-out controls and other options, please visit our
Qualifications & exceptions
Opt-out controls live in the Cookie Policy, not in this policy.
Not stated here
The Cookie Policy is not supplied, so the specific cookies, purposes and opt-out controls are unknown here.
Data Access & Collection · Company practice
When a Customer enables a Third-Party Service, Slack may receive personal data from it
A Customer can permit or restrict Third-Party Services for its Workspace, and can let its Authorized Users enable and disable these integrations. Slack may also offer its own apps that connect the Services to a Third-Party Service. Once a Third-Party Service is enabled, its provider may share information with Slack; for example, a connected cloud storage app may pass Authorized Users' user names and email addresses plus other information the app makes available. Slack is then authorized to connect to and access Other Information made available to it, in accordance with its agreement with the provider and the permissions granted by the Customer, including by its Authorized Users. Examples include whether you created a new account or interacted with a third-party app in a way attributable to Slack usage. Authorized Users are told to check the Third-Party Services' own privacy settings and notices; linked pages on app management are not supplied.
Supporting quotations
Third-Party Services information: A Customer can choose to permit or restrict Third-Party Services for its Workspace and Slack can receive personal data from such Third-Party Services.
Once enabled, the provider of a Third-Party Service may share certain information with Slack. For example, if a cloud storage application you are using is enabled to permit files to be imported to a Workspace, we may receive the user name and email address of Authorized Users, along with additional information that the application makes available to Slack to facilitate the integration.
When a Third-Party Service is enabled, Slack is authorized to connect and access Other Information made available to Slack in accordance with our agreement with the provider of the Third-Party Service and any permission(s) granted by our Customer (including, by its Authorized User(s)).
Qualifications & exceptions
Receipt depends on the Customer (or an Authorized User the Customer permits) enabling the Third-Party Service.
Access is bounded by Slack's agreement with the provider and the permissions granted by the Customer and its Authorized Users.
Slack does not receive or store passwords for these Third-Party Services (separate card).
Not stated here
Slack's agreements with Third-Party Service providers and the linked help pages are not supplied.
Security & Safeguards · Company commitment
Slack does not receive or store your passwords for connected Third-Party Services
When Third-Party Services are connected to the Services, Slack states that it does not receive or store passwords for any of those Third-Party Services.
Supporting quotations
We do not, however, receive or store passwords for any of these Third-Party Services when connecting them to the Services.
Qualifications & exceptions
This concerns passwords for Third-Party Services; other information from those services may still be received (see the previous card).
Contacts you import, forward or upload are collected, subject to your device's or API's consent process
Any contact information an Authorized User chooses to import (for example an address book imported to find coworkers and Slack Connect contacts, or a calendar from a device or API), forward or upload to the Services (for example when sending emails to the Services) is collected when using the Services. This happens in accordance with the consent process provided by your device or the third-party API.
Supporting quotations
Contact information: In accordance with the consent process provided by your device or other third-party API, any contact information that an Authorized User chooses to import (such as importing an address book to find coworkers and Slack Connect contacts or calendar from a device or API), forward or upload to the Services (for example, when sending emails to the Services) is collected when using the Services.
Qualifications & exceptions
Collection follows the Authorized User's choice to import, forward or upload, and the consent process of the device or API.
Data Access & Collection · Company practice
Slack may receive business and marketing data about you from affiliates, partners and others
Slack may receive data from its parent corporations, affiliates and subsidiaries, from partners, or from others, about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to its business. Slack uses this "Third-Party data" to make its own information better or more useful. This category is distinct from "Third-Party Services information", which comes from apps integrated with a Workspace.
Supporting quotations
Information We Collect And Receive
Third-Party data: Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful.
Qualifications & exceptions
Sources are parent corporations, affiliates, subsidiaries, partners or others; the policy does not name them.
The stated purpose is to make Slack's own information better or more useful.
Not stated here
Which partners or other sources supply this data is not stated.
Linking & Identification · Company practice
Third-Party data may be combined with the Other Information Slack already holds
Data Slack receives from third parties may be combined with the Other Information Slack collects. It might be aggregate-level, such as which IP addresses correspond to zip codes or countries, or more specific, such as how well an online marketing or email campaign performed.
Supporting quotations
This data may be combined with Other Information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries. Or it might be more specific: for example, how well an online marketing or email campaign performed.
Qualifications & exceptions
Combination is stated as a possibility ("may be combined"), with aggregate and specific examples; the policy does not limit it to those examples.
Data Access & Collection · Company practice
Slack may store metadata about your Huddles and Clips, including when and with whom
Slack may receive, capture and store metadata derived from your use of features such as Slack Huddles or Clips, together with related data such as the date and time of a Huddle and the Authorized User you connected with.
Supporting quotations
Audio and video metadata: Slack may receive, capture, and store metadata derived from your use of features such as Slack Huddles or Clips, and additional related data such as data regarding the date and time of your Slack Huddle and the Authorized User that you connected with.
Qualifications & exceptions
The policy describes metadata and related data about these features; it does not say here whether the audio or video content itself is retained, so that is not asserted.
Not stated here
Whether Huddle or Clip content, as opposed to metadata, is stored is not stated in this passage.
Data Access & Collection · Company practice
Information you give Slack in surveys, contests, job applications, support or social media is collected
Slack also receives Other Information when you submit it to its Websites or in other ways: responses or opinions in a focus group, contest, activity or event; feedback about its products or services; information you provide when applying for a job with Slack; enrolling in a certification or other educational program hosted by Slack or a vendor; requesting support; interacting with Slack's social media accounts; or otherwise communicating with Slack.
Supporting quotations
Additional information provided to Slack: We also receive Other Information when submitted to our Websites or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, feedback you provide about our products or services, information you provide if you apply for a job with Slack, enroll in a certification program or other educational program hosted by Slack or a vendor, request support, interact with our social media accounts or otherwise communicate with Slack.
Qualifications & exceptions
Educational programs may be hosted by a vendor rather than Slack.
Data Access & Collection · Context
Nobody is obliged to provide Information, but some is collected automatically and some is needed for the Services
Generally no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (together, "Information"). However, certain Information is collected automatically, and if some Information, such as Workspace setup details, is not provided, Slack may be unable to provide the Services.
Supporting quotations
Generally, no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (collectively, “Information”). However, certain Information is collected automatically and, if some Information, such as Workspace setup details, is not provided, we may be unable to provide the Services.
Qualifications & exceptions
"Information" from here on means Customer Data and Other Information together.
Automatic collection (for example log and device data) happens regardless of this statement.
Use & Processing · Context
Responding to you rests on Slack's, Customers' and Authorized Users' interest in communication
The legitimate interest Slack gives for using your Other Information to respond to your requests, comments and questions is that facilitating communication, for example answering questions from Customers, is in Slack's interest and in the interests of Customers and Authorized Users. This completes the communication purpose begun in the previous packet.
Supporting quotations
How We Process Your Information and our Legal Bases for Doing So
To communicate with you by responding to your requests, comments and questions.
It is in our, our Customers’ and Authorized Users’ interests to facilitate communication (for example to answer questions from Customers).
Qualifications & exceptions
Restates the interest for the communication purpose carded as slack-pp-036.
Account & Service Control · Restriction or exception
Service and administrative messages are part of the Services and cannot be opted out of
Slack may send you service, technical and other administrative emails, messages and other communications, and may contact you about changes in the Services, its Services offerings and important Services-related notices such as security and fraud notices. The policy treats these communications as part of the Services and says you may not opt out of them. Slack gives as the interest that Customers and Authorized Users want service-related issues addressed. This uses the same category group as the communication purpose: Workspace and account information, Third-Party Services Information, Third-Party data and Additional information provided to Slack.
Supporting quotations
To send service emails and other communications.
send you service, technical and other administrative emails, messages, and other types of communications; or
contact you to inform you about changes in our Services, our Services offerings, and important Services-related notices, such as security and fraud notices. These communications are considered part of the Services and you may not opt out of them. It is in our Customers and Authorized Users’ interests to address service related issues.
Qualifications & exceptions
No opt-out applies to service, technical, administrative and security or fraud notices; marketing messages are treated differently (separate card).
Cross-references
narrows (model-proposed): You can control whether you receive Slack's marketing emails — exception_to: Service, technical, administrative and security notices are treated as part of the Services and cannot be opted out of, unlike marketing messages.
Charges & Financial Obligations · Company practice
Slack uses account and usage information for billing, invoicing and account administration
Slack uses Workspace and account information and Usage information for billing, account management and other administrative matters. It may need to contact you for invoicing, account management and similar reasons, and uses account data to administer accounts and keep track of billing and payments. Slack states its interest in the effective provision and administration of the Websites and Services.
Supporting quotations
We use Workspace and account information and Usage information for the following legitimate interests:
For billing, account management and other administrative matters. Slack may need to contact you for invoicing, account management, and similar reasons and we use account data to administer accounts and keep track of billing and payments.
It is in our interest to facilitate the effective provision and administration of the Websites and Services.
Qualifications & exceptions
Only Workspace and account information and Usage information are named for this purpose.
Use & Processing · User right or choice
You can control whether you receive Slack's marketing emails
Slack sometimes sends emails about new product features, promotional communications or other news about Slack, using Workspace and account information, Usage Information, Cookie information, Third-Party Services Information, Third-Party data and Additional information provided to Slack. Because these are marketing messages, you can control whether you receive them. Questions about a message can be raised through the contact mechanisms at the end of the policy. Slack states its interest in promoting the Websites and Services and sending direct marketing.
Supporting quotations
We use Workspace and account information, Usage Information, Cookie information, Third-Party Services Information, Third-Party data, and Additional information provided to Slack for the following legitimate interests:
To send marketing emails and other communications. We sometimes send emails about new product features, promotional communications or other news about Slack. These are marketing messages so you can control whether you receive them. If you have additional questions about a message you have received from Slack please get in touch through the contact mechanisms described below.
It is in our interest to promote the Websites and Services and send our direct marketing.
Qualifications & exceptions
The control applies to marketing messages only; service and administrative communications cannot be opted out of.
The Your Rights section separately gives a right to object at any time to use of your Personal Data for direct marketing.
Not stated here
How the control is exercised (for example an unsubscribe link) is not stated in this passage.
Sharing & Disclosure · Context
Customers set their own sharing practices; Slack does not control how Customers or third parties share
The sharing section describes how Slack may share and disclose Information (Customer Data and Other Information, as defined in the collection section). Customers determine their own policies and practices for sharing and disclosing Information to third parties, and Slack states that it does not control how a Customer or any third party chooses to share or disclose Information.
Supporting quotations
How We Share and Disclose Information
This section describes how Slack may share and disclose Information, as described in the section entitled 'Information We Collect and Receive' above. Customers determine their own policies and practices for the sharing and disclosure of Information to third parties. Slack does not control how a Customer or any third party chooses to share or disclose Information.
Qualifications & exceptions
Slack's own sharing is listed in the cards that follow; your Customer's sharing of Workspace Information is outside Slack's control under this policy.
Sharing & Disclosure · Company practice
Slack shares Information on the Customer's instructions, with consent, under the Customer Agreement and law
Slack may share and disclose Information in accordance with a Customer's instructions and with appropriate consent, including under any applicable terms of the Customer Agreement, through the Customer's use of Services functionality, and in compliance with applicable law and legal process. Some sharing done at a Customer's request may incur additional fees. This mirrors the processing section, where Slack is the processor of Customer Data and the Customer the controller.
Supporting quotations
The Customer’s Instructions. Slack may share and disclose Information in accordance with a Customer’s instructions and with appropriate consent, including any applicable terms in the Customer Agreement and the Customer’s use of Services functionality and in compliance with applicable law and legal process. Some sharing at a Customer’s request may incur additional fees.
Slack is a processor of Customer Data and the Customer is the controller.
Qualifications & exceptions
Sharing on instruction is also subject to appropriate consent and to applicable law and legal process.
Additional fees may apply to some sharing done at a Customer's request; the fee terms are not supplied.
Not stated here
The Customer Agreement and any fee schedule are not supplied.
Account & Service Control · Company practice
Customers use administrator controls to decide which features, visibility and profile display apply to you
To follow Customers' instructions, Slack provides administrator controls for managing Workspaces. Slack follows the Customer's instructions to enable or disable Authorized Users' use of features such as Clips or Slack Huddles, channel posting permissions, the sharing and visibility of direct messages including files, and whether and how Authorized Users can connect with other organizations' Workspaces through Slack Connect. Slack also follows Customer and Authorized User instructions on how an Authorized User's profile is displayed within a Workspace or when shared through Slack Connect or other features. Customers may also let their Authorized Users adjust the audience and visibility of certain Customer Data; the Help Center describes the available choices and is not supplied.
Supporting quotations
To enable Slack to follow our Customers’ instructions, Slack provides several administrator controls to allow Customers to manage their Workspaces. For example, we follow our Customers’ instructions to enable or disable Authorized Users use of various features of the Services, such as Clips or Slack Huddles, channel posting permissions, the sharing and visibility of direct messages including files, or whether and how Authorized Users can connect with other organizations’ Workspaces through Slack Connect.
We also follow Customer and Authorized User instructions on how an Authorized User’s profile may be displayed within a Customer’s Workspace or when shared through Slack Connect or other features.
Customers may also provide their Authorized Users with the ability to adjust the audience and visibility of certain Customer Data. To learn more, visit our Help Center to understand what choices and settings are available.
Qualifications & exceptions
Whether you can adjust the audience and visibility of Customer Data depends on what your Customer permits.
Not stated here
The Help Center pages describing settings are not supplied.
Sharing & Disclosure · Company practice
What you submit may be visible to other Authorized Users in your Workspace or connected Workspaces
When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces or Slack Connect instances. For example, an Authorized User's email address may be displayed with their Workspace profile, and other profile and organizational information may be displayed to Authorized Users. The Help Center is referenced for details and is not supplied.
Supporting quotations
Displaying the Services. When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces or Slack Connect instances. For example, an Authorized User’s email address may be displayed with their Workspace profile, or other profile and organizational information may be displayed to Authorized Users.
Qualifications & exceptions
Visibility extends to connected Workspaces and Slack Connect instances, not only your own Workspace.
Sharing & Disclosure · Company practice
Through Slack Connect your profile may be shared or searchable by users outside your Workspace
The Services let Authorized Users in independent Workspaces collaborate, for example through Slack Connect or email interoperability. Information such as an Authorized User's profile and organizational information may be shared, subject to the policies and practices of the Workspaces you use. Depending on your Workspace's settings, your profile may be shared, searchable or discoverable by Authorized Users or other users outside the Workspaces you belong to, or shared by email when you invite someone to collaborate via Slack Connect. Slack says it includes administrator or user controls for external collaboration depending on the use case, and Authorized Users may also expand the visibility of certain content and Customer Data, such as files.
Supporting quotations
Collaborating with Others. The Services provide different ways for Authorized Users working in independent Workspaces to collaborate, such as Slack Connect or email interoperability. Information, such as an Authorized User’s profile and organizational information, may be shared, subject to the policies and practices of the Workspace(s) you use.
For example, depending on the settings of your Workspace, to enable connections with other Authorized Users, your profile may be shared or searchable or discoverable by Authorized Users or other users outside of Workspace(s) you belong to, or shared via email when you invite an Authorized User or other user to collaborate via Slack Connect. In many instances, Slack includes either administrator controls or user controls, depending on the use case, with respect to external collaboration. Authorized Users may also decide to expand the visibility of certain content and Customer Data, such as files.
Qualifications & exceptions
External sharing depends on the settings and practices of the Workspaces you use; whether you or your administrator holds the control depends on the use case.
Sharing & Disclosure · Company practice
Your employer and other Customer representatives may access, modify or restrict your Information
Owners, administrators, Authorized Users and other Customer representatives and personnel may be able to access, modify or restrict access to Information. The policy's example is your employer using Services features to access or modify your profile details or to export logs of Workspace activity. Workspace settings are at slack.com/account/settings.
Supporting quotations
Customer access. Owners, administrators, Authorized Users, and other Customer representatives and personnel may be able to access, modify, or restrict access to Information. This may include, for example, your employer using features of the Services to access or modify your profile details, or to export logs of Workspace activity. For information about your Workspace settings, please visit https://slack.com/account/settings.
Qualifications & exceptions
Access is by the Customer's people, including your employer, through Services features, not by Slack on its own account.
Sharing & Disclosure · Company practice
Slack may share your Information with service providers and business partners
Slack may engage third-party companies or individuals as service providers or business partners to process Information and support its business, for example to provide virtual computing and storage, to help verify Owners and Customers, or to develop strategic partnerships that support common customers. Depending on the service provided, Slack may share your Information with them. The subprocessors Slack uses for the Services are listed in the Salesforce Infrastructure & Sub-processors Documentation, which is not supplied.
Supporting quotations
Third-Party service providers and partners. We may engage third-party companies or individuals as service providers or business partners to process Information and support our business. These third parties may, for example, provide virtual computing and storage services, assist Slack with verifying Owners and Customers, or we may share business information to develop strategic partnerships with Third-Party service providers to support our common customers. In this respect, depending on the Third-Party service provided, Slack may share your Information. Additional information about the subprocessors we use to support delivery of our Services is set forth in the Salesforce Infrastructure & Sub-processors Documentation.
Qualifications & exceptions
Sharing with partners includes sharing business information to develop strategic partnerships, not only processing on Slack's behalf.
Not stated here
The subprocessor list (Salesforce Infrastructure & Sub-processors Documentation) is not supplied.
Sharing & Disclosure · Company practice
Enabled Third-Party Services may receive your Information and handle it under their own policies
A Customer may enable, or permit Authorized Users to enable, Third-Party Services. When they are enabled, Slack may share Information with those Third-Party Services. Slack requires each provider to disclose all permissions for information accessible through the Services but does not guarantee that they do so. Third-Party Services are not owned or controlled by Slack, this Privacy Policy does not apply to them, and third parties granted access to Information may have their own policies for its collection, use and sharing; Slack directs you to their permissions, privacy settings and notices.
Supporting quotations
Third-Party Services. A Customer may enable, or permit Authorized Users to enable, Third-Party Services. We require each Third-Party Service provider to disclose all permissions for information accessible through the Services, but we do not guarantee that they do so. When Third-Party Services are enabled by a Customer or an Authorized User, Slack may share Information with Third-Party Services. Third-Party Services are not owned or controlled by Slack and third parties that have been granted access to Information may have their own policies and practices for its collection, use, and sharing.
A Customer can choose to permit or restrict Third-Party Services for its Workspace and Slack can receive personal data from such Third-Party Services.
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Slack platform (“Third-Party Services”)
Qualifications & exceptions
Sharing follows enablement by the Customer or a permitted Authorized User.
Slack does not guarantee that providers disclose their permissions.
The collection section describes the reverse flow: Slack receiving data from enabled Third-Party Services.
Not stated here
The Third-Party Services' own policies are not supplied.
Anything you post in a Slack community forum, including personal data, is public
The Information you choose to provide in a community forum, including personal data, will be publicly available.
Supporting quotations
Forums. The Information you choose to provide in a community forum including personal data will be publicly available.
Qualifications & exceptions
This applies to what you choose to provide in a community forum.
Account & Service Control · Restriction or exception
Slack does not allow use by anyone under 16 where the law prohibits it, and deletes such data on notice
Slack does not allow anyone younger than 16 to use its Services and Websites, to the extent applicable law prohibits it. If you learn that anyone under 16 has unlawfully provided Slack with personal data, Slack asks you to contact it and says it will take steps to delete that information.
Supporting quotations
Age Limitations
Slack does not allow use of our Services and Websites by anyone younger than 16 years old, to the extent prohibited by applicable law. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us and we will take steps to delete such information.
Qualifications & exceptions
The restriction applies "to the extent prohibited by applicable law", so it is tied to local law rather than a flat ban.
Deletion follows a report and is described as taking steps to delete.
Legal Rights & Agreement Rules · Procedure
Slack may change the policy; material changes get extra notice, and disagreeing means deactivating your account
Slack may change the Privacy Policy from time to time, because laws, regulations and industry standards evolve or because Slack changes its services or business. Changes are posted on the policy page, and if a change materially alters your privacy rights Slack will give additional notice, such as by email or through the Services. If you disagree with a change, the policy says you should deactivate your Services account; to have Personal Data under the Customer's control removed, you contact the Customer. Two other sections qualify this remedy: Slack may keep your Other Information after deactivation for the period it needs for business interests, audits, legal compliance, disputes and enforcement, and if you cannot use the account settings and tools for access or deletion you are directed to the Customer who controls your workspace.
Supporting quotations
Changes To This Privacy Policy
Slack may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary, or we may make changes to our services or business. We will post the changes to this page and encourage you to review our Privacy Policy to stay informed. If we make changes that materially alter your privacy rights, Slack will provide additional notice, such as via email or through the Services. If you disagree with the changes to this Privacy Policy, you should deactivate your Services account. Contact the Customer if you wish to request the removal of Personal Data under their control.
This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.
If you cannot use the settings and tools, contact the Customer who controls your workspace for additional access and assistance.
Qualifications & exceptions
Additional notice is promised only for changes that materially alter your privacy rights; other changes are simply posted.
Deactivating your account does not by itself end retention of Other Information, which Slack may keep for the stated purposes.
Removal of Personal Data under the Customer's control is requested from the Customer, not Slack.
Not stated here
No notice period before changes take effect is stated.
Use & Processing · Company practice
Slack may transfer your Personal Data to other countries, including the United States
Slack may transfer your Personal Data to countries other than the one you live in, including the United States. To the extent Personal Data is transferred abroad, Slack commits to comply with the requirements of the applicable laws in the respective jurisdiction, in line with its obligations. The safeguards it offers are in the following cards.
Supporting quotations
International Data Transfers
Slack may transfer your Personal Data to countries other than the one in which you live, including transfers to the United States. To the extent that Personal Data is transferred abroad, Slack will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with Slack’s obligations.
Qualifications & exceptions
The compliance commitment is framed by Slack's obligations under the applicable laws of the relevant jurisdiction.
Legal Rights & Agreement Rules · Company commitment
Slack uses EU and UK Standard Contractual Clauses for transfers to the US and other named countries
Where Slack transfers Personal Data from jurisdictions with differing data protection laws, one safeguard it offers is the European Commission's Standard Contractual Clauses, with the equivalent UK clauses where appropriate, for transfers to, among others, Australia, Canada, India, Japan, South Korea and the United States. Slack transfers Personal Data to facilitate the provision of the Services. Its standard data processing addendum incorporating the Standard Contractual Clauses is linked (not supplied), and an executed copy can be obtained by contacting Slack as described in the "Contacting Slack" section.
Supporting quotations
In particular, we offer the following safeguards if Slack transfers Personal Data from jurisdictions with differing data protection laws:
European Commission’s Standard Contractual Clauses. Slack uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, Canada, India, Japan, South Korea, and the United States. Slack will transfer your Personal Data to facilitate the provision of the Services. A copy of our standard data processing addendum, incorporating the Standard Contractual Clauses, is available here, and a copy of the executed version of the Standard Contractual Clauses may be obtained by contacting us as described in the “Contacting Slack” section below.
Qualifications & exceptions
The country list is open ("among others").
UK clauses are used "where appropriate".
Not stated here
The data processing addendum and the executed Standard Contractual Clauses are not supplied.
Legal Rights & Agreement Rules · Company commitment
Slack states its privacy practices comply with the APEC CBPR system and the Privacy Recognition for Processors
Slack states that its privacy practices, as described in the policy, comply with the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules (CBPR) system and the Privacy Recognition for Processors (PRP). The policy describes the CBPR system as a framework for protecting personal data transferred among participating APEC economies, and the PRP as demonstrating an organization's ability to implement a controller's privacy obligations when processing personal information.
Supporting quotations
Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System And Privacy Recognition For Processors. Slack’s privacy practices, described in this Privacy Policy, comply with the Asia-Pacific Economic Cooperation (“APEC”) Cross Border Privacy Rules (“CBPR”) system and the Privacy Recognition for Processors (“PRP”). The APEC CBPR system provides a framework for organizations to ensure protection of personal data transferred among participating APEC economies and the PRP demonstrates an organization’s ability to provide effective implementation of a personal data controller’s privacy obligations related to the processing of personal information.
Qualifications & exceptions
The certifications are named in the policy; the certificate directory is linked and not supplied.
Not stated here
The current status of the certifications is not shown in this document.
Legal Rights & Agreement Rules · User right or choice
Unresolved APEC-related privacy concerns can go to Slack's third-party dispute resolution provider
If you have an unresolved privacy or data use concern related to Slack's APEC CBPR or PRP certifications that Slack has not addressed satisfactorily, you may contact Slack's third-party dispute resolution provider. The provider is reached through linked pages that are not supplied.
Supporting quotations
If you have an unresolved privacy or data use concern related to our
that we have not addressed satisfactorily, you may
our third-party dispute resolution provider.
Qualifications & exceptions
Applies to concerns related to the APEC CBPR or PRP certifications that Slack has not resolved satisfactorily.
Not stated here
The dispute resolution provider's identity and process are behind links not supplied.
Legal Rights & Agreement Rules · Procedure
Slack's Data Protection Officer can be reached at dpo@slack.com
To communicate with Slack's Data Protection Officer, email dpo@slack.com.
Supporting quotations
Data Protection Officer
To communicate with our Data Protection Officer, please email dpo@slack.com.
Legal Rights & Agreement Rules · Context
The Customer is the controller of Customer Data; Slack is its processor and the controller of Other Information
Data protection law in some jurisdictions distinguishes the controller from the processor. In general, the Customer is the controller of Customer Data; Slack is the processor of Customer Data and the controller of Other Information. Which Slack entity acts in these roles depends on where the Workspace's Customer is established, as the two following cards set out.
Supporting quotations
Identifying The Data Controller And Processor
Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general, Customer is the controller of Customer Data. In general, Slack is the processor of Customer Data and the controller of Other Information. Different Slack entities provide the Services in different parts of the world.
Qualifications & exceptions
Stated "in general"; the processing section states the same split for Customer Data.
The entity depends on the Customer's location, not the individual user's.
Outside the US and Canada, Slack Technologies Limited (Ireland) is your controller of Other Information
For Authorized Users who use Workspaces established for Customers outside the United States and Canada, Slack Technologies Limited, an Irish company based in Dublin, is the controller of Other Information and a processor of Customer Data.
Supporting quotations
Slack Technologies Limited, an Irish company based in Dublin, Ireland, is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers outside of the U.S. and Canada.
Qualifications & exceptions
Determined by where the Customer is established, not where the Authorized User is.
Legal Rights & Agreement Rules · Context
In the US and Canada, Slack Technologies, LLC (California) is your controller of Other Information
For Authorized Users who use Workspaces established for Customers in the United States and Canada, Slack Technologies, LLC, a US company based in San Francisco, California, is the controller of Other Information and a processor of Customer Data.
Supporting quotations
Slack Technologies, LLC, a U.S. company based in San Francisco, California is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers in the US and Canada.
Qualifications & exceptions
Determined by where the Customer is established, not where the Authorized User is.
Legal Rights & Agreement Rules · User right or choice
You may have rights to access, update, correct or delete your personal data, first through your account tools
Individuals in the European Economic Area, the United Kingdom, Brazil and across the globe have certain statutory rights over their personal data. Subject to any exemptions provided by law, you may have the right to request access to your personal information and to seek to update, delete or correct it. Slack points you first to the settings and tools in your Services account; if you cannot use them, you contact the Customer who controls your workspace for additional access and assistance, with Customer contact details at slack.com/account/settings. The Data Protection Authority section adds that, subject to applicable law, you also have the right to restrict Slack's use of Other Information that is your Personal Data and to lodge a complaint with your local data protection authority.
Supporting quotations
Your Rights
Individuals in the European Economic Area, the United Kingdom, Brazil, and across the globe have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to your personal information, as well as to seek to update, delete, or correct this information. You can do this using the settings and tools provided in your Services account. If you cannot use the settings and tools, contact the Customer who controls your workspace for additional access and assistance.
Subject to applicable law, you also have the right to (i) restrict Slack’s use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority.
Qualifications & exceptions
Rights are "subject to any exemptions provided by law" and you "may have" them depending on where you are.
For Customer Data the route runs through the Customer, who is its controller.
Not stated here
The policy does not list which rights apply in which jurisdiction.
Legal Rights & Agreement Rules · User right or choice
Under GDPR-type laws Slack relies mainly on legitimate interests, and you can object by contacting it
To the extent Slack's processing of your Personal Data is subject to the General Data Protection Regulation or other laws requiring a legal basis, such as the UK Data Protection Act and Brazil's Lei Geral de Proteção de Dados, Slack primarily relies on its legitimate interests, described in the processing section. Where it relies on legitimate interests you can object by contacting Slack as described in the "Contacting Slack" section. In response Slack will stop processing your information for the relevant purposes unless it has compelling grounds in the circumstances or the processing is necessary in the context of legal claims.
Supporting quotations
To the extent that Slack’s processing of your Personal Data is subject to the General Data Protection Regulation or other applicable laws requiring a legal basis for processing Personal Data, such as the UK Data Protection Act and the Brazilian General Data Protection Act (Lei Geral de Proteção de Dados), Slack primarily relies on its legitimate interests, described above, to process your Personal Data. Where we rely on legitimate interests to process your Personal Data, you can object to that processing by contacting us as described in the “Contacting Slack” section below. In response to your objection, we will stop processing your information for the relevant purposes unless we have compelling grounds in the circumstances or the processing is necessary in the context of legal claims.
Qualifications & exceptions
Slack may continue processing after an objection where it has compelling grounds or the processing is necessary for legal claims.
The named laws are identified by their wording in the policy; their text is not supplied.
You can object at any time to Slack using your Personal Data for direct marketing
Slack may process Other Information that constitutes your Personal Data for direct marketing purposes, and you have a right to object to that use at any time. This complements the marketing control in the processing section.
Supporting quotations
Slack may also process Other Information that constitutes your Personal Data for direct marketing purposes and you have a right to object to Slack’s use of your Personal Data for this purpose at any time.
Qualifications & exceptions
The objection right applies to direct marketing; service and administrative communications remain non-optional.
Cross-references
qualifies (model-proposed): You can control whether you receive Slack's marketing emails — qualifies: The marketing-message control is backed in the rights section by a right to object at any time to use of Personal Data for direct marketing.
Legal Rights & Agreement Rules · Context
The California section gives California consumers details and rights under the CCPA as amended by the CPRA
This section provides additional detail about the personal information Slack collects about California consumers and the rights afforded to them under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). More on Slack's role and obligations under the CCPA is in a separate CCPA FAQ, which is not supplied. The statutes are named as the policy words them; their text is not supplied.
Supporting quotations
Your California Privacy Rights
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA,” as amended by the California Privacy Rights Act or “CPRA”.
For more information on Slack’s role and obligations under the CCPA, please visit Slack’s California Consumer Privacy Act (CCPA) FAQ.
Qualifications & exceptions
Applies to California consumers in addition to the general rights section.
Not stated here
Slack's CCPA FAQ is not supplied.
Data Access & Collection · Company practice
Slack lists nine CCPA categories it collects, including from your employer, data brokers and analytics providers
Because California law requires Slack to detail the categories of personal information it collects and discloses for certain business purposes (for example to service providers that secure its services or market its products, and to the other entities described earlier), Slack states that, in addition to the collection section, it collects the following categories from you, your employer, data analytics providers, data brokers and Third-Party Services for its business purposes: identifiers and contact information; commercial information; internet or electronic network activity information; financial information; geolocation information; professional or employment-related information; audio and visual data; in limited circumstances where allowed by law, information that may be protected under California or United States law; and inferences drawn from any of these categories.
Supporting quotations
In addition to the information provided above in the ‘Information We Collect And Receive’ section, we collect the following categories of personal information from you, your employer, data analytics providers, data brokers, and Third-Party Services for our business purposes:
Identifiers/contact information;
Commercial information;
Internet or electronic network activity information;
Financial information;
Geolocation information;
Professional or employment-related information;
Audio and visual data;
In limited circumstances where allowed by law, information that may be protected under California or United States law; and
Inferences drawn from any of the above categories.
Qualifications & exceptions
Sources named here include data brokers and data analytics providers, which the general collection section does not name.
Protected-class information is collected only in limited circumstances where allowed by law.
Inferences drawn from the other categories are themselves a collected category.
Not stated here
The data brokers and analytics providers are not named.
Sharing & Disclosure · Company commitment
Slack says it does not sell personal information and will not do so without offering an opt-out
Slack collects the California categories for the business and commercial purposes in the processing section and shares them as described in the sharing section. It states that it does not sell, as the CCPA or otherwise defines the term, the personal information it collects, and will not sell it without providing a right to opt out.
Supporting quotations
Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out).
Qualifications & exceptions
The commitment concerns "sale"; the same paragraph separately describes sharing identifiers and internet activity with advertisers (next card).
Sharing & Disclosure · Company practice
Slack may share identifiers and internet activity with advertisers to target ads on other sites
Slack may share personal information, in the form of identifiers and internet activity information, with third-party advertisers to target advertisements on non-Slack websites, applications and services. It may also allow third parties to collect personal information from its sites or services where those third parties are authorized service providers who have agreed to Slack's contractual limits on retention, use and disclosure, or where you use Slack's sites or services to interact with third parties or direct Slack to disclose your personal information to them. California consumers can opt out of this sharing (see the opt-out cards).
Supporting quotations
We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-Slack websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our sites or services to interact with third parties or direct us to disclose your personal information to third parties.
Qualifications & exceptions
Limited to identifiers and internet activity information.
Third-party collection on Slack's sites is allowed for contractually bound service providers or when you interact with or direct disclosure to third parties.
This advertiser sharing appears only in the California section; the general sharing section does not list advertisers as recipients.
Not stated here
The advertisers are not named; whether this sharing is limited to Websites or also covers the Services is not stated.
Cross-references
contrast (model-proposed): Slack says it does not sell personal information and will not do so without offering an opt-out — contrast: Reviewed tension: Slack states it does not sell personal information, while the same paragraph says it may share identifiers and internet activity with third-party advertisers to target ads on other sites. The policy treats sharing for ads as distinct from sale and offers an opt-out for it.
Legal Rights & Agreement Rules · User right or choice
California consumers can ask to know, delete, opt out of sales and ad-sharing, and not be discriminated against
Subject to certain limitations, the CCPA gives California consumers the right to request to know more about the categories or specific pieces of personal information Slack collects, including how it uses, discloses or may sell them; to delete their personal information; to opt out of any sales; to know about and opt out of sharing personal information for delivering advertisements on non-Slack websites; and not to be discriminated against for exercising these rights.
Supporting quotations
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use, disclose, or may sell this information), to delete their personal information, to opt out of any “sales”, to know and opt out of sharing of personal information for delivering advertisements on non-Slack websites, and to not be discriminated against for exercising these rights.
Qualifications & exceptions
Rights are "subject to certain limitations" that the policy does not list.
Legal Rights & Agreement Rules · Procedure
California requests go to privacy@slack.com or a form; Slack verifies and may require government ID
California consumers make CCPA requests by emailing privacy@slack.com or filling out a linked Salesforce privacy request form. Slack verifies the request using information associated with your account, including your email address, and government identification may be required. Consumers can designate an authorized agent to exercise these rights, and agents must submit proof of authorization.
Supporting quotations
California consumers may make a request pursuant to their rights under the CCPA by contacting us at privacy@slack.com or by filling out
We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf. Authorized agents must submit proof of authorization.
Qualifications & exceptions
Verification may call for government identification.
An authorized agent must prove authorization.
Not stated here
The request form's content is not supplied.
Sharing & Disclosure · User right or choice
Opt out of ad-sharing with a Global Privacy Control signal, or by contacting Slack for non-cookie identifiers
To opt out of sharing activity based on your cookie identifiers, turn on a Global Privacy Control in your web browser or browser extension; the California Privacy Protection Agency's website is referenced for information on valid controls. To opt out of sharing based on other identifiers, such as your email address or phone number, contact Slack as described in the "Contacting Slack" section.
Supporting quotations
If you would like to opt-out of sharing activity based on your cookie identifiers, turn on a Global Privacy Control in your web browser or browser extension.
If you would like to opt-out of sharing activity based on other identifiers (like email address or phone number), contact us in accordance with the “Contacting Slack” section, below.
Qualifications & exceptions
A Global Privacy Control covers cookie identifiers only; other identifiers need a direct request to Slack.
Legal Rights & Agreement Rules · User right or choice
You can complain to your data protection authority; EEA and UK residents can go to the supervisory authority
Subject to applicable law, you have the right to restrict Slack's use of Other Information that constitutes your Personal Data and to lodge a complaint with your local data protection authority. If you believe Slack has not been able to help with your complaint or concern and you are in the European Economic Area or the United Kingdom, you have the right to complain to the competent supervisory authority. EU and EEA residents can find their authority through the European Data Protection Board's member list; UK residents can contact the Information Commissioner's Office. The linked pages are not supplied.
Supporting quotations
Data Protection Authority
Subject to applicable law, you also have the right to (i) restrict Slack’s use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority.
Qualifications & exceptions
The supervisory authority route is stated for the EEA and UK; elsewhere the right is to your local data protection authority subject to applicable law.
Legal Rights & Agreement Rules · Procedure
Contact privacy@slack.com for questions or to exercise statutory rights; Slack responds in a reasonable time
You can contact Slack with questions about the Privacy Policy or Slack's practices, or to exercise any of your statutory rights. Slack says it will respond within a reasonable timeframe. The contact routes are privacy@slack.com or the mailing address for the Slack entity responsible for your Workspace.
Supporting quotations
Contacting Slack
Please also feel free to contact Slack if you have any questions about this Privacy Policy or Slack’s practices, or if you are seeking to exercise any of your statutory rights. Slack will respond within a reasonable timeframe. You may contact us at privacy@slack.com or at our mailing address below:
Qualifications & exceptions
No fixed response deadline is stated, only a "reasonable timeframe".
California CCPA requests use the same email address or the separate request form described in the California section.
Legal Rights & Agreement Rules · Procedure
Write to Slack Technologies, LLC in San Francisco or Slack Technologies Limited in Dublin, by Customer location
The mailing address depends on where your Workspace's Customer is established. For Customers and Authorized Users of Workspaces established for Customers in the US and Canada, write to Slack Technologies, LLC, 50 Fremont Street, San Francisco, CA 94105, United States. For Workspaces established for Customers outside the US and Canada, write to Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland. These are the same two entities identified as controller of Other Information and processor of Customer Data for each region.
Supporting quotations
For Customers and Authorized Users who use Workspaces established for Customers in the US and Canada:
Slack Technologies, LLC 50 Fremont Street San Francisco, CA, 94105 United States
For Customers and Authorized Users who use Workspaces established for Customers outside the US and Canada:
Slack Technologies Limited Salesforce Tower 60 R801, North Dock Dublin Ireland
Slack Technologies, LLC, a U.S. company based in San Francisco, California is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers in the US and Canada.
Slack Technologies Limited, an Irish company based in Dublin, Ireland, is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers outside of the U.S. and Canada.
Qualifications & exceptions
The split follows the Customer's location, not the individual's.
Use & Processing · Company practice
Slack processes Customer Data only on the Customer's instructions; the Customer is the controller
Slack uses Customer Data in accordance with the Customer's instructions, including to provide the Services, under any applicable terms of the Customer Agreement, through the Customer's use of Services functionality, and as required by applicable law. Slack describes itself as a processor of Customer Data and the Customer as the controller. The Customer can, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share and remove Customer Data, and otherwise apply its policies to the Services.
Supporting quotations
How We Process Your Information and our Legal Bases for Doing So
Customer Data will be used by Slack in accordance with a Customer’s instructions, including to provide the Services, any applicable terms in the Customer Agreement, a Customer’s use of Services functionality, and as required by applicable law. Slack is a processor of Customer Data and the Customer is the controller.
Customer may, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share, and remove Customer Data, and otherwise apply its policies to the Services.
Qualifications & exceptions
Use "as required by applicable law" sits alongside the Customer's instructions as a basis for Slack's handling of Customer Data.
The Customer, typically your employer, can access, modify, export, share and remove your Customer Data.
Not stated here
The Customer Agreement's terms are not supplied.
Use & Processing · Company practice
Slack uses Other Information to operate its Services, Websites and business for listed purposes
Unlike Customer Data, Other Information is used by Slack for its own purposes: to operate the Services, Websites and business. The policy then lists those purposes under two legal bases, compliance with a legal obligation and legitimate interests, naming for each the categories of Other Information used.
Supporting quotations
Slack uses Other Information to operate our Services, Websites, and business. More specifically, Slack uses Other Information for the following purposes:
Qualifications & exceptions
The specific purposes and the categories used for each are in the following cards.
Legal Rights & Agreement Rules · Company practice
Slack processes Other Information to comply with legal obligations, including valid legal requests
Slack processes Other Information when complying with a legal obligation, for example to access, preserve or disclose information if there is a valid legal request from a regulator, law enforcement or others, such as a search warrant or production order asking for your profile picture or IP address in an investigation. For this basis Slack uses every category of Other Information: Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack.
Supporting quotations
Compliance With A Legal Obligation: Slack processes Other Information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. For example, a search warrant or production order from law enforcement to provide information in relation to an investigation, such as your profile picture or IP address.
We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for compliance with a legal obligation.
Qualifications & exceptions
The trigger is a legal obligation, illustrated by a valid legal request such as a search warrant or production order.
How Slack responds to government and law enforcement requests is detailed in separate documents referenced in the sharing section, which are not supplied.
Legal Rights & Agreement Rules · Context
"Legitimate interests" means Slack's or a third party's interests not outweighed by your rights
Slack relies on its own legitimate interests, or those of a third party, where they are not outweighed by your interests or fundamental rights and freedoms. The policy uses "legitimate interests" in this sense for most of the purposes that follow.
Supporting quotations
Legitimate Interests: We rely on our legitimate interests or the legitimate interests of a third-party where they are not outweighed by your interests or fundamental rights and freedoms ("legitimate interests").
Qualifications & exceptions
Each legitimate-interest purpose below is paired with a statement of whose interest it serves.
Use & Processing · Company practice
Slack uses all Other Information categories to provide, maintain and protect the Services and business
Relying on legitimate interests, Slack uses Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack to provide, update, maintain and protect its Services, Websites and business. This includes supporting delivery of the Services under a Customer Agreement, preventing or addressing service errors and security or technical issues, analyzing and monitoring usage, trends and other activities, or acting at an Authorized User's request. Slack states this is in its and your interests.
Supporting quotations
We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for the following legitimate interests:
To provide, update, maintain and protect our Services, Websites and business. This includes the use of Other Information to support delivery of the Services under a Customer Agreement, prevent or address service errors, security or technical issues, analyze and monitor usage, trends and other activities, or at an Authorized User’s request.
It is in our and your interests to provide, update, maintain and protect our Services, Websites, and business.
Qualifications & exceptions
The same group of categories is used for the next five legitimate-interest purposes (tools and features, security, aggregation, sharing with law enforcement, and transfers outside the EEA).
Inference & Profiling · Company practice
Slack uses Other Information to rank search results, make suggestions and build new features
To develop and provide search, learning and productivity tools and additional features, Slack may use Other Information to determine and rank the relevance of content, channels or expertise to an Authorized User; make suggestions for Services or Third-Party Services based on historical use and predictive models; identify organizational trends and insights; customize a Services experience; or create new productivity features and products. Slack states this serves its interest and that of Customers and Authorized Users in improving and developing customer support.
Supporting quotations
To develop and provide search, learning and productivity tools and additional features. Slack tries to make the Services as useful as possible for specific Workspaces and Authorized Users. For example, we may:
improve search functionality by using Other Information to help determine and rank the relevance of content, channels or expertise to an Authorized User;
make Services or Third-Party Service suggestions based on historical use and predictive models;
identify organizational trends and insights;
customize a Services experience; or
create new productivity features and products.
It is in our interest and in the interest of Customers and Authorized Users to continuously improve and develop the customer support we provide.
Qualifications & exceptions
These are examples ("we may"); the stated aim is to make the Services as useful as possible for specific Workspaces and Authorized Users.
Suggestions rest on historical use and predictive models, and trends are identified at the organizational level.
Security & Safeguards · Company practice
Slack may use device fingerprinting and automated processing to detect abuse and spam
To investigate and help prevent security issues and abuse, Slack may use tools such as device fingerprinting, and may process Other Information, including in an automated fashion, to understand how Slack is used or to prevent spam or abuse. Slack states its interest in keeping the Service secure, detecting and addressing abuse such as spam, and investigating suspicious activity.
Supporting quotations
To investigate and help prevent security issues and abuse. We may use a variety of tools such as device fingerprinting to prevent issues and abuse. We may process, including in an automated fashion, Other Information to better understand how Slack is used or to prevent spam or abuse.
It is in our interest to keep the Service secure and to detect, prevent, and address abuse (such as spam) and to investigate and take action in respect of suspicious activity on the Services.
Qualifications & exceptions
Processing may be automated and may be used to understand how Slack is used, not only to block abuse.
Use & Processing · Company practice
Slack may aggregate or de-identify your information and use the result, for example to improve the Services
In some cases Slack aggregates or de-identifies information associated with you and uses the resulting information, for example to improve the Services. Slack states its interest in researching and improving the Services and the interest of Customers and Authorized Users in data minimisation and privacy by design.
Supporting quotations
To aggregate or de-identify information. In some cases, we aggregate or de-identify information we have associated with you and use the resulting information, for example, to improve the Services.
It is in our interest to research and improve the Services;
It is in the interests of Customers and Authorized Users to practice data minimisation and privacy by design in respect of their information.
Qualifications & exceptions
Improving the Services is given as an example use; the sharing section separately says aggregated or de-identified Information may be disclosed or used for any purpose.
Sharing & Disclosure · Company practice
Slack shares Other Information with others, including law enforcement, to respond to legal requests and prevent harm
As a legitimate-interest purpose, Slack shares information with others, including law enforcement, and responds to legal requests. Slack states its interest and the general public's in preventing and addressing fraud, unauthorized use of Slack, violations of its terms or other harmful or illegal activity; protecting itself, its users or others, including in investigations or regulatory enquiries; and preventing death or imminent bodily harm.
Supporting quotations
Share information with others including law enforcement and to respond to legal requests.
It is in our interest and the interest of the general public to prevent and address fraud, unauthorized use of Slack, violations of our terms or other harmful or illegal activity; to protect ourselves, our users or others, including as part of investigations or regulatory enquiries; or to prevent death or imminent bodily harm.
Qualifications & exceptions
The detailed disclosure conditions are in the sharing section (law enforcement and regulators; enforcing rights, fraud and safety).
Use & Processing · Company practice
Slack transfers your information outside the EEA, including to the United States, India and South Korea
Because the Websites and Services operate globally with Customers around the world, Slack says it needs to share the information it collects globally. It carries out transfers outside the European Economic Area, including to Australia, Canada, Japan, India, South Korea and the United States, to provide, update, maintain and protect its Services, Websites and business, and states this is in its and your interests. The safeguards for these transfers are in the "International Data Transfers" section.
Supporting quotations
Transfer, store or process your information outside the European Economic Area. As the Websites and Services operate globally, with Customers around the world, we need to share information we collect globally. We carry out necessary transfers outside the European Economic Area, including to Australia, Canada, Japan, India, South Korea, and the United States, to provide, update, maintain and protect our Services, Websites and business.
In our and your interests to provide, update, maintain and protect our Services, Websites and business.
Qualifications & exceptions
The named countries are examples ("including"); the transfer safeguards (Standard Contractual Clauses, APEC CBPR and PRP) are described in a later section.
Use & Processing · Company practice
Slack may use your Other Information to respond when you contact it
Using Workspace and account information, Third-Party Services Information, Third-Party data and Additional information provided to Slack, Slack communicates with you by responding to your requests, comments and questions; if you contact Slack it may use your Other Information to respond. The interest statement for this purpose appears at the start of the next packet.
Supporting quotations
We use Workspace and account information, Third-Party Services Information, Third-Party data, and Additional information provided to Slack for the following legitimate interests:
To communicate with you by responding to your requests, comments and questions. If you contact us, we may use your Other Information to respond.
Qualifications & exceptions
A narrower set of categories applies here than for the purposes above: Usage, Cookie, Contact and Audio and video metadata are not listed.
Sharing & Disclosure · Company practice
At Slack events and webinars, your profile may be shared with sponsors when you register or scan your badge
If you attend an event or webinar organized by Slack, Slack may share your profile and organizational information with the event or webinar sponsors when you register, have your badge scanned, or join a breakout room. Where applicable law requires it, you consent to that sharing through the registration form or by allowing your badge to be scanned at a sponsor booth. Your information is then subject to the sponsors' privacy statements, and the terms shown at registration apply; neither is supplied here.
Supporting quotations
How We Share and Disclose Information
Organizers and sponsors of Events/Webinars. If you attend an event or webinar organized by Slack, we may share your profile and organizational information with the event or webinar sponsors when you register, have your badge scanned, or join a breakout room. If required by applicable law, you may consent to such sharing via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors’ privacy statements.
Qualifications & exceptions
Consent is collected through registration or badge scanning only where applicable law requires it.
Sponsors' handling is governed by their own privacy statements.
Not stated here
Event registration terms and sponsor privacy statements are not supplied.
Sharing & Disclosure · Company practice
Slack may share your Information with lawyers, bankers, auditors and insurers
Slack may share your Information with professional advisers acting as service providers, processors, controllers or joint controllers, including lawyers, bankers, auditors and insurers providing consultancy, banking, legal, insurance and accounting services, to the extent Slack is legally obliged to share or has a legitimate interest in sharing Information containing personal data.
Supporting quotations
Professional advisers. We may share your Information with professional advisers acting as service providers, processors, controllers, or joint controllers - including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services, and to the extent we are legally obliged to share or have a legitimate interest in sharing your Information containing personal data.
Qualifications & exceptions
Sharing of personal data with advisers is limited to legal obligation or a legitimate interest.
Advisers may act as controllers or joint controllers, not only as processors.
Sharing & Disclosure · Company practice
Slack may share Information with its corporate affiliates, parents and subsidiaries
Slack may share Information with its corporate affiliates, parents and/or subsidiaries. The policy states no purpose limit for this sharing.
Supporting quotations
Corporate Affiliates. Slack may share Information with our corporate affiliates, parents and/or subsidiaries.
Not stated here
The affiliates are not named here; the policy elsewhere refers to Salesforce documentation.
Sharing & Disclosure · Company practice
In a merger, sale, bankruptcy or similar deal, some or all Information may be transferred
If Slack engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of its assets or stock, financing, public offering of securities, acquisition of all or part of its business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the collection section may be shared or transferred, subject to standard confidentiality arrangements.
Supporting quotations
During a Change to Slack’s Business. If Slack engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Slack’s assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the ‘Information We Collect and Receive’ section may be shared or transferred, subject to standard confidentiality arrangements.
Qualifications & exceptions
Transfer may happen during steps taken in contemplation of such a transaction, not only on completion.
The only stated protection is "standard confidentiality arrangements".
Sharing & Disclosure · Permission or license
Aggregated or de-identified Information may be disclosed or used for any purpose
Slack may disclose or use aggregated or de-identified Information for any purpose, for example sharing it with prospects or partners for business or research. This is broader than the processing section's example of using de-identified information to improve the Services.
Supporting quotations
Aggregated or De-identified Data. We may disclose or use aggregated or de-identified Information for any purpose. For example, we may share aggregated or de-identified Information with prospects or partners for business or research.
Qualifications & exceptions
Applies to Information once aggregated or de-identified; the policy does not define the de-identification standard.
Not stated here
The method or standard of aggregation and de-identification is not described.
Slack may disclose Other Information to law enforcement when it reasonably believes the law allows or requires it
If Slack receives a request for information, it may disclose Other Information if it reasonably believes the disclosure is in accordance with or required by applicable law, regulation or legal process. Slack's Data Request Policy, Data Request Overview and Transparency Report describe how it responds to requests from government agencies, law enforcement and others; they are not supplied. Such disclosure may at times include information that Slack Technologies, LLC processes on behalf of Slack Technologies Limited as a subprocessor, including under any data protection agreement between Slack and its Customers.
Supporting quotations
Law Enforcement and Regulators. If we receive a request for information, we may disclose Other Information if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process.
This may at times include information that Slack Technologies, LLC processes on behalf of Slack Technologies Limited in its role as a subprocessor, including as pursuant to the terms of any data protection agreement between Slack and its Customers.
Qualifications & exceptions
This item speaks of Other Information; Customer Data is handled on the Customer's instructions and under any data protection agreement.
The standard is Slack's reasonable belief that disclosure is in accordance with or required by law, regulation or legal process.
Not stated here
The Data Request Policy, Data Request Overview, Transparency Report and the data protection agreement are not supplied.
Slack may share Information to enforce its contracts, prevent fraud and protect safety
Slack may share Information to protect and defend the rights, property or safety of Slack, its users or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud or security issues, including to prevent death or imminent bodily harm.
Supporting quotations
To enforce our rights, prevent fraud, and for safety. To protect and defend the rights, property, or safety of Slack, its users, or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud, or security issues, including to prevent death or imminent bodily harm.
Qualifications & exceptions
Enforcing Slack's own contracts and policies is one of the stated grounds.
Sharing & Disclosure · Company practice
For corporate Workspaces, consent to share can come from the primary owner or a corporate officer, not you
Slack may share Information with third parties when it has consent or as otherwise permitted in the policy. Who gives that consent depends on the Workspace: for Workspaces registered to corporate entities, Slack may share with the consent of the Workspace primary owner, an authorized corporate officer or their designee; for workplaces created without a formal affiliation, Slack may require the user's own consent.
Supporting quotations
With Consent. Slack may share Information with third parties when we have consent to do so or as otherwise permitted in this Privacy Policy. For Workspaces registered to corporate entities, Slack may share Information with consent of the Workspace primary owner or authorized corporate officer, or their designee. For workplaces created without a formal affiliation, Slack may require user consent.
Qualifications & exceptions
In a corporate Workspace, the consent that permits sharing may be the organization's, not the individual user's.
"As otherwise permitted in this Privacy Policy" means consent is not the only basis for sharing.
Customer Data is kept as long as your Customer instructs; deleting it may also remove linked Other Information
Slack retains Customer Data in accordance with the Customer's instructions, including any terms of the Customer Agreement and the Customer's use of Services functionality, and as required by applicable law. The Customer may customize retention settings and, depending on the Services plan, apply them at the Workspace, channel or other level, with different settings for messages, files or other types of Customer Data. Deletion of Customer Data and other Customer use of the Services may result in deletion and/or de-identification of certain associated Other Information. The Help Center and the Customer are the sources for detail.
Supporting quotations
Data Retention
Slack will retain Customer Data in accordance with a Customer’s instructions (including to perform any applicable terms in the Customer Agreement and through Customer’s use of Services functionality) and as required by applicable law. Customer may customize its retention settings and, depending on the Services plan, apply those customized settings at the Workspace level, channel level or other level. The Customer may also apply different settings to messages, files or other types of Customer Data. The deletion of Customer Data and other use of the Services by the Customer may result in the deletion and/or de-identification of certain associated Other Information.
Qualifications & exceptions
Retention controls belong to the Customer and depend on its Services plan.
Retention is also subject to applicable law.
Not stated here
Plan-specific retention options and the Help Center detail are not supplied.
Retention & Deletion · Company practice
Slack may keep your Other Information after you deactivate your account
Slack may retain Other Information about you for as long as necessary for the purposes described in the policy, such as providing the Services, including optional features you use, and customer support. This may include keeping Other Information after you deactivate your account for the time Slack needs to pursue legitimate business interests, conduct audits, comply with and demonstrate compliance with legal obligations, resolve disputes and enforce its agreements.
Supporting quotations
Slack may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy (such as to provide the Services, including any optional features you use, and to provide customer support). This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.
Qualifications & exceptions
No fixed retention period is stated; the measure is what is necessary for the listed purposes.
Slack commits to protect Information with measures matched to its sensitivity and current technology
Slack says it works hard to protect the Information you provide from loss, misuse and unauthorized access or disclosure, taking into account the sensitivity of the Information it collects, processes and stores and the current state of technology, and that it holds internationally recognized security certifications. Current practices are described on a separate Security Practices page, which is not supplied.
Supporting quotations
Security
Slack takes security of data very seriously. Slack works hard to protect Information you provide from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the Information we collect, process and store, and the current state of technology. Slack has received internationally recognized security certifications.
Qualifications & exceptions
Slack does not guarantee absolute safety (separate card).
The named certifications are not listed in this document.
Not stated here
The Security Practices page and the specific certifications are not supplied.
Security & Safeguards · Restriction or exception
Slack cannot guarantee that your Information is absolutely safe, and does not control linked third-party sites
Given the nature of communications and information processing technology, Slack cannot guarantee that Information in transit over the Internet, stored on its systems or otherwise in its care will be absolutely safe from intrusion by others. When you click a link to a third-party site you leave Slack's site, and Slack does not control or endorse what is there.
Supporting quotations
Given the nature of communications and information processing technology, Slack cannot guarantee that Information during transmission through the Internet or while stored on our systems or otherwise in our care will be absolutely safe from intrusion by others. When you click a link to a third-party site, you will be leaving our site and we don’t control or endorse what is on third-party sites.
Qualifications & exceptions
This limits the security commitment in the same paragraph.