Privacy Policy

Effective: September 1, 2022

This Privacy Policy describes how Slack collects, uses, and discloses information associated with an identified or identifiable individual (referred to in this Privacy Policy as “Personal Data”) and what choices you have around this activity. If you have any questions, please don’t hesitate to contact us.

When we refer to “Slack”, we mean Slack Technologies, LLC or Slack Technologies Limited, as explained in more detail in the “Identifying the Data Controller and Processor” section below.

Applicability of This Privacy Policy

This Privacy Policy applies to Slack’s online workplace productivity tools and platform, including the associated Slack mobile and desktop applications (collectively, the “Services”), Slack.com and other Slack websites (collectively, the “Websites”) and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with Slack. If you do not agree with this Privacy Policy, then do not access or use the Services, Websites or any other aspect of Slack’s business. For the avoidance of doubt, this is the only privacy policy that applies to Slack.

This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Slack platform (“Third-Party Services”), or any other third-party products, services or businesses who will provide their services under their own terms of service and privacy policy. In addition, a separate agreement governs delivery, access and use of the Services (the “Customer Agreement”), including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “Customer Data”). The organization (e.g., your employer or another entity or person) that entered into the Customer Agreement (“Customer”) controls its instance of the Services (its “Workspace”) and any associated Customer Data. If you have any questions about specific Workspace settings and privacy practices, please contact the Customer whose Workspace you use. If you have an account, you can check http://slack.com/account/team for the contact information of your Workspace owner(s) and administrator(s). If you have received an invitation to join a Workspace but have not yet created an account, you should request assistance from the Customer that sent the invitation.

California Notice of Collection of Personal Information: We collect the information described below under “Information We Collect and Receive” for the business and commercial purposes described below under “Information Use.” To learn more about exercising your California Privacy Rights please review the “California Privacy Rights” section below.

How We Process Your Information and our Legal Bases for Doing So

Customer Data will be used by Slack in accordance with a Customer’s instructions, including to provide the Services, any applicable terms in the Customer Agreement, a Customer’s use of Services functionality, and as required by applicable law. Slack is a processor of Customer Data and the Customer is the controller. Customer may, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share, and remove Customer Data, and otherwise apply its policies to the Services.

Slack uses Other Information to operate our Services, Websites, and business. More specifically, Slack uses Other Information for the following purposes:

Compliance With A Legal Obligation:

Slack processes Other Information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. For example, a search warrant or production order from law enforcement to provide information in relation to an investigation, such as your profile picture or IP address.

We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for compliance with a legal obligation.

Compliance With A Legal Obligation:

Legitimate Interests:

We rely on our legitimate interests or the legitimate interests of a third-party where they are not outweighed by your interests or fundamental rights and freedoms (legitimate interests).

We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for the following legitimate interests.

How We Share and Disclose Information

This section describes how Slack may share and disclose Information, as described in the section entitled. Information We Collect and Receive above. Customers determine their own policies and practices for the sharing and disclosure of Information to third parties. Slack does not control how a Customer or any third party chooses to share or disclose Information.

The Customer’s Instructions. Slack may share and disclose Information in accordance with a Customer’s instructions and with appropriate consent, including any applicable terms in the Customer Agreement and the Customer’s use of Services functionality and in compliance with applicable law and legal process. Some sharing at a Customer’s request may incur additional fees. To enable Slack to follow our Customers’ instructions, Slack provides several administrator controls to allow Customers to manage their Workspaces. For example, we follow our Customers’ instructions to enable or disable Authorized Users use of various features of the Services, such as Clips or Slack Huddles, channel posting permissions, the sharing and visibility of direct messages including files, or whether and how Authorized Users can connect with other organizations’ Workspaces through Slack Connect. We also follow Customer and Authorized User instructions on how an Authorized User’s profile may be displayed within a Customer’s Workspace or when shared through Slack Connect or other features. Customers may also provide their Authorized Users with the ability to adjust the audience and visibility of certain Customer Data. To learn more, visit our Help Center to understand what choices and settings are available. Displaying the Services. When an Authorized User submits Information, it may be displayed or discoverable to other Authorized Users in the same or connected Workspaces or Slack Connect instances. For example, an Authorized User’s email address may be displayed with their Workspace profile, or other profile and organizational information may be displayed to Authorized Users. Please consult the Help Center for more information on Services functionality. Collaborating with Others. The Services provide different ways for Authorized Users working in independent Workspaces to collaborate, such as Slack Connect or email interoperability. Information, such as an Authorized User’s profile and organizational information, may be shared, subject to the policies and practices of the Workspace(s) you use. For example, depending on the settings of your Workspace, to enable connections with other Authorized Users, your profile may be shared or searchable or discoverable by Authorized Users or other users outside of Workspace(s) you belong to, or shared via email when you invite an Authorized User or other user to collaborate via Slack Connect. In many instances, Slack includes either administrator controls or user controls, depending on the use case, with respect to external collaboration. Authorized Users may also decide to expand the visibility of certain content and Customer Data, such as files.

Data Retention

Slack will retain Customer Data in accordance with a Customer’s instructions (including to perform any applicable terms in the Customer Agreement and through Customer’s use of Services functionality) and as required by applicable law. Customer may customize its retention settings and, depending on the Services plan, apply those customized settings at the Workspace level, channel level or other level. The Customer may also apply different settings to messages, files or other types of Customer Data. The deletion of Customer Data and other use of the Services by the Customer may result in the deletion and/or de-identification of certain associated Other Information. For more detail, please review the Help Center or contact the Customer.

Slack may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy (such as to provide the Services, including any optional features you use, and to provide customer support). This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.

Security

Slack takes security of data very seriously. Slack works hard to protect Information you provide from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the Information we collect, process and store, and the current state of technology. Slack has received internationally recognized security certifications. To learn more about current practices and policies regarding security and confidentiality of the Services, please visit our Security Practices. Given the nature of communications and information processing technology, Slack cannot guarantee that Information during transmission through the Internet or while stored on our systems or otherwise in our care will be absolutely safe from intrusion by others. When you click a link to a third-party site, you will be leaving our site and we don’t control or endorse what is on third-party sites.

Age Limitations

Slack does not allow use of our Services and Websites by anyone younger than 16 years old, to the extent prohibited by applicable law. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us and we will take steps to delete such information.