Slack AI — privacy & data policy

Provider: Salesforce. PromptPrivacy score: 76/100. Last verified August 26, 2026.

What happens to your data?

Your messages, files, and workspace content are treated as Customer Data controlled by your organization's administrators and processed by Slack to deliver the platform. Slack also collects operational metadata (such as device types, log data, and feature usage) to improve services, ensure security, and train predictive productivity features. Data is shared with approved subprocessors, corporate affiliates, and as required by law.

Does it train on your data?

Slack processes Customer Data (messages, files) solely based on customer instructions and Customer Agreements. For Other Information (such as usage metadata, account details, and interaction logs), Slack relies on legitimate interests to develop search and productivity tools, customize experiences, and generate suggestions using predictive models.

Can you opt out?

Users can opt out of promotional communications and marketing emails, utilize Global Privacy Control signals in their browsers, and object to processing based on legitimate interests. However, mandatory administrative and service communications cannot be opted out of, and Customer Data removal remains subject to the workspace administrator's authority.

Data retention

Customer Data retention is managed directly by the Customer (the employer or workspace owner), who can configure customized retention and deletion rules at the workspace, channel, or message/file level. Other Information (such as account metadata and log data) is retained by Slack for as long as necessary to operate the service, fulfill legitimate business purposes, conduct audits, and satisfy legal obligations.

Encryption & security

Slack states that it implements security measures taking into account data sensitivity and current technology standards to protect against loss, misuse, and unauthorized access. Slack holds internationally recognized security certifications, although specific encryption standards (e.g., TLS, AES-256) are referenced via external security documentation rather than spelled out in this policy.

Is it safe for work?

Yes. Slack operates under an enterprise business-to-business model where the customer acts as the data controller and Slack acts as the data processor. It provides comprehensive workspace administration tools, configurable data retention settings, Standard Contractual Clauses (SCCs), and recognized security certifications.

Source policy: https://slack.com/trust/privacy/privacy-policy