California Consumer Privacy Act (CCPA) FAQ

Our Continued Commitment to Privacy 

We’re committed to helping Slack customers and users understand and exercise their rights under the California Consumer Privacy Act (CCPA). On this page, we clarify Slack’s role and obligations under the CCPA and provide additional information to help our customers meet their compliance needs.

• How Slack Complies with the CCPA.
• What kinds of personal information does Slack collect?
• How does Slack fulfill its obligations as a Processor or Service Provider under the CCPA?
• How do I exercise my consumer rights under the CCPA?
• How does the verification process work?
• Who do I contact if I have more questions?

How Slack complies with the California Consumer Privacy Act.

Slack complies with the California Consumer Privacy Act (CCPA) and supports our customers’ compliance with the CCPA. As a provider of enterprise collaboration tools, Slack is primarily a service provider under the CCPA. You can read more about Slack's commitment to compliance with the CCPA in our Privacy Policy.

To help our customers meet their CCPA compliance obligations we offer several data management tools, including:

• Import and export tools. Businesses and organizations may access, import, and export their Customer Data using Slack’s tools.
• Profile deletion tool. This tool helps customers respond to user requests to delete personal information, such as names and email addresses, from a Slack account.
• Workspace settings page. The About this Workspace page allows you to see your workspace’s plan and settings, or contact an admin who controls the workspace.

What kinds of personal information does Slack collect?

In our Privacy Policy we describe the data Slack collects. It’s important to understand how we define that data under two distinct categories: Customer Data and Other Information.

“Customer Data” means messages, files or other content submitted to the Service. This data is collected on behalf of your Workspace Primary Owner, and per our Privacy Policy, Slack is a processor (service provider) of Customer Data and the Customer is the controller. 

“Other Information” refers to data Slack collects, generates and/or receives from usage of the Slack Service, including related or other supplementary data. Slack uses Other Information in furtherance of our legitimate interests in operating our Services. Slack is the controller of Other Information.

For the specific categories of personal information related to the Customer Data in your workspace that the Customer may collect, maintain, sell or disclose, please direct your inquiry to your Workspace Primary Owner.  If you’re not sure who the Primary Owner is, visit the About This Workspace page to find out. 

For the specific categories of Other Information collected and controlled by Slack please refer to our Privacy Policy  or reach out to [e-mail].

How does Slack fulfill its obligations as a Processor or Service Provider under the CCPA? 

Slack offers our customers a United States specific Data Processing Addendum that supplements the Customer Terms of Service or any master subscription agreement. This addendum incorporates the obligations and requirements set forth by the CCPA.  Please visit the Data Processing Addenda page for further information and instructions on how to execute and submit the agreement. If you have questions specific to the DPA please contact our team at [e-mail]. However, please note that the terms of our DPA are non-negotiable.

As a Service Provider, Slack also assists its Customers in their compliance with the CCPA. Slack will assist with any deletion requests Customers may receive by deleting member profile information upon verified request of a Primary Owner.  Slack will also pass along member requests for information related to Customer Data, as well as any requests it receives for member Profile Deletion, to the Customer. For more information about how Slack assists with rights requests, see the section below or reach out to [e-mail].

How do I exercise my consumer rights under the CCPA?

• Right to Know:  Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect. To make such a request, please contact us at [e-mail]. Please note that Slack is the controller of Other Information as defined above. For requests for Customer Data, please direct your inquiry to your Workspace Primary Owner.  If you’re not sure who the Primary Owner is, visit the About This Workspace page to find out. 
• Right to Deletion: Subject to certain limitations, the CCPA provides California consumers the right to delete their personal information. The Primary Owner of a workspace or organization can contact Slack and request to delete a member’s profile information. To make a profile deletion request please visit this form or reach out to us at [e-mail]. When members leave a workspace or organization, they may have the right to request their profile information be deleted by the Primary Owner. The Primary Owner is responsible for determining whether profile information can be deleted. For more information about deleting a profile, please visit our Help Center or contact us at [e-mail]. 
• Request to opt out of sale of personal information: Slack does not sell personal information as such term is defined in the CCPA and will not sell personal information without providing a future right to opt-out of such a sale.  You can choose to opt out of offers, promotions or other emails by managing your email preferences.

Consumer requests will be handled within the timeframes set forth in the CCPA.

How does the verification process work?

Slack takes all reasonable precautions to verify your identity in connection with fulfilling its responsibilities under the CCPA. The verification steps may vary.  We evaluate each request based on the individual submitting the request and the category of data related to the request (Customer Data or Other Information).

If you are a Primary Owner making a request for Customer Data or deletion of information, we will verify your identity before processing the request. 

If you are a member of a Slack workspace and you are requesting access to or deletion of Customer Data, we will pass your request along to your Workspace Primary Owner to verify. 

If you are a member or Primary Owner requesting Other Information, we will verify your identity based on the nature of your request.

If you have requested only the categories of Other Information that Slack has collected as a service provider, then Slack need only verify identity to a reasonable degree of certainty. In order to provide specific information, Slack will need to verify your identity to a reasonably high degree of certainty.  

Active Slack users can even verify within your own password protected Slack workspace. If you are a former user of Slack or just a website visitor, just let us know and we will use other information to verify you.  

To begin the verification process contact us at [e-mail]. From there we will walk you through the verification process. 

Who do I contact if I have more questions?

For additional CCPA related inquiries please contact us at [e-mail].  For general inquiries visit our Contact Us page.