Slack is an online workplace productivity tool and platform. According to Slack's policy, when an authorized user submits information, it may be displayed to other authorized users in the same or connected workspaces. In order to create or update a Workspace account, the user or their Customer (e.g., the user's employer) supplies Slack with an email address, phone number, password, domain and/or similar account details. Slack's security policy lists several security-related audits and certifications are applicable to the Slack services, and it uses encryption. It is unclear what obligations Slack has to children under 13 or 16 if use is not prohibited by law, or if Slack itself has knowledge a child is using its service.

Slack can be accessed through its website, and is available for download at the iOS App Store, and the Google Play Store. The Privacy Policy and Terms of Use used for this evaluation can be found on Slack’s website, iOS App Store, and the Google Play Store. Additionally, other policies used for this evaluation include: Cookie Policy, GDPR Commitment, FERPA Compliance, Customer Terms, Privacy Shield Notice, Service Level Agreement, and Security Practices. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Safety

According to Slack's policy, when an authorized user submits information, it may be displayed to other authorized users in the same or connected workspaces. The policy notes that the service is used for collaborating with others, and that the services provide different ways for authorized users working in independent workspaces to collaborate, such as Slack Connect or email interoperability. Other information, such as an authorized user’s profile information, may be shared, subject to the policies and practices of the other workspace(s). Slack's authorized use policy indicates that users must not use the services in any manner that may harm minors or that interacts with or targets people under the age of thirteen nor engage in activity that incites or encourages violence or hatred against individuals or groups;

Privacy

Slack's policy calls corporate users "Customers." Customers or individuals granted access to a workspace by a Customer (“Authorized Users”) routinely submit Customer Data to Slack when using the Services. Slack also collects, generates and/or receives other Information, including workspace and Account Information. For example, in order to create or update a Workspace account, the user or their Customer (e.g., the user's employer) supplies Slack with an email address, phone number, password, domain and/or similar account details. Slack's policy says they do not sell the personal information they collect and will not sell it without providing a right to opt out. The policy notes that third parties may, for example, provide virtual computing and storage services, or that Slack may share business information to "develop strategic partnerships" with third party service providers to support their common customers.

Security

The Slack security policy explains that they place strict controls over their employees’ access to the data corporate customers and their users make available via the Slack services, and it also lists several security-related audits and certifications are applicable to the Slack services. Data is encrypted in transit and at rest while in storage, according to this policy. The policy notes that in the event of a security breach, Slack will promptly notify you of any unauthorized access to your Customer Data.

Compliance

Slack's policy notes that to the extent prohibited by applicable law, Slack does not allow use of their services and websites by anyone younger than 16 years old. If a user learns that anyone younger than 16 has unlawfully provided Slack with personal data, Slack's policy asks that the user please contact them and they will take steps to delete such information. It is unclear what obligations Slack has to children under 13 or 16 if use is not prohibited by law, or if Slack itself has knowledge a child is using its service.

• Personal information is not sold or rented to third parties.
• Unclear whether personal information are shared for third-party marketing.
• Personalised advertising is displayed.
• Data are collected by third-parties for their own purposes.
• User's information is used to track and target advertisements on other third-party websites or services.
• Data profiles are created and used for personalised advertisements.