Our Continued Commitment to Privacy
We’re committed to helping Slack customers and users understand and exercise their rights under the California Consumer Privacy Act (CCPA). On this page, we clarify Slack’s role and obligations under the CCPA and provide additional information to help our customers meet their compliance needs.
How Slack complies with the California Consumer Privacy Act.
Slack complies with the California Consumer Privacy Act (CCPA) and supports our customers’ compliance with the CCPA. As a provider of enterprise collaboration tools, Slack is primarily a service provider under the CCPA. You can read more about Slack's commitment to compliance with the CCPA in our Privacy Policy
To help our customers meet their CCPA compliance obligations we offer several data management tools, including:
- Import and export tools. Businesses and organizations may access, import, and export their Customer Data using Slack’s tools.
- Profile deletion tool. This tool helps customers respond to user requests to delete personal information, such as names and email addresses, from a Slack account.
- Workspace settings page. The About this Workspace page allows you to see your workspace’s plan and settings, or contact an admin who controls the workspace.
- California Consumer Protection Act (CCPA): Metric Disclosure: In accordance with the CCPA requirements, we have published metrics to provide transparency into the rights requests we receive and how we handled those requests.
What kinds of personal information does Slack collect?
In our Privacy Policy we describe the data Slack collects. It’s important to understand how we define that data under two distinct categories: Customer Data and Other Information.
“Customer Data” means messages, files or other content submitted to the Service. This data is collected on behalf of your Workspace Primary Owner, and per our Privacy Policy, Slack is a processor (service provider) of Customer Data and the Customer is the controller.
“Other Information” refers to data Slack collects, generates and/or receives from usage of the Slack Service, including related or other supplementary data. Slack uses Other Information in furtherance of our legitimate interests in operating our Services. Slack is the controller of Other Information.
For the specific categories of personal information related to the Customer Data in your workspace that the Customer may collect, maintain, sell or disclose, please direct your inquiry to your Workspace Primary Owner. If you’re not sure who the Primary Owner is, visit the About this Workspace page to find out
For the specific categories of Other Information collected and controlled by Slack please refer to our Privacy Policy or reach out to privacy@slack.com
How does Slack fulfill its obligations as a Processor or Service Provider under the CCPA?
Slack offers our customers a United States specific Data Processing Addendum that supplements the Customer Terms of Service or any MSA. This addendum incorporates the obligations and requirements set forth by the CCPA. Please visit the Data Processing Addenda page for further information and instructions on how to execute and submit the agreement. If you have questions specific to the DPA please contact our team at dpa@slack-corp.com. However, please note that the terms of our DPA are non-negotiable.
As a Service Provider, Slack also assists its Customers in their compliance with the CCPA. Slack will assist with any deletion requests Customers may receive by deleting member profile information upon verified request of a Primary Owner. Slack will also pass along member requests for information related to Customer Data, as well as any requests it receives for member Profile Deletion, to the Customer. For more information about how Slack assists with rights requests, see the section below or reach out to feedback@slack-corp.com.