— Privacy score
Acceptable
GRADE C
Grade Spectrum
Updated 4 days ago
69
FDCBA
Data Collection20% wt
50/100
10 / 20 pts contributed
Data Sharing25% wt
50/100
13 / 25 pts contributed
Tracking20% wt
75/100
15 / 20 pts contributed
Transparency20% wt
90/100
18 / 20 pts contributed
User Rights15% wt
90/100
14 / 15 pts contributed
AI Risk
64/100
Analysis Findings
Data Collection
44 Types
Data Sharing
5 Issues
Tracking
7 Trackers
Transparency
Good
User Rights
Comprehensive
AI Practices
64/100
Top Subprocessors
A
Amazon Web Services (AWS)
Cloud hosting and storage
S
Stripe
Payment processing
G
Google LLC
Analytics and advertising services
S
Salesforce.com, Inc.
CRM and support services
Collected Data Types
Messages
communications
Files
other
Email Address
identityRequired
Phone Number
identityRequired
Password
identityRequired
Cookies & Tracking
Necessary
Required for basic functionality
2Low risk
Functional
Preferences and settings
1Low risk
Analytics
Usage tracking & product insights
2Medium risk
Advertising
Ad targeting & conversion
2High risk
Doing Well
- Data inventory with purpose mapping documented
- Subprocessor list published
- Privacy policy published
- Comprehensive policy sections
- Specific data retention periods
- Subprocessor list published
Concerns
- Tracks behavioral data
- Collects browsing history
- Collects location data
- Collects financial data
- Collects 44 data types
- Global Privacy Control (GPC) signal not mentioned
Privacy Summary
Slack collects personal data you provide, such as messages, files, and account details, along with information about your usage, device, and location. This data is shared within your workspace (often controlled by your employer/admin), with third-party service providers, integrated apps you enable, and when legally required. To request data deletion, use your account settings or contact your Workspace administrator; you can also email privacy@slack.com.
AI-generated summary based on policy analysis dated Apr 23, 2026
Quick Facts
Legal NameSlack Technologies, LLC
HeadquartersUS
Data DeletionModerate (6/10)
Vendors4 third parties
Data Types44 types collected
Last AnalyzedApr 23, 2026
Compliance
GDPRYes
CCPAYes
Data Request FormYes
Recent BreachNo
Data BrokerNo
Policy Documents
AI Risk
- Medium user impact from AI usage
- Automated decision-making risk
- Trains AI on personal user data
- Trains AI on user interactions
- No AI training opt-out available