Slack · Slack Privacy Policy

GDPR Data Subject Rights

Medium severity
Share 𝕏 Share in Share

Why it matters

EU and UK users have legally enforceable rights over their personal data held by Slack, including the right to have it deleted and the right to receive a copy in a portable format.

Consumer impact

Slack collects a wide range of personal data including your messages, files, profile information, location data, and usage patterns, and shares this with service providers, advertising partners, and Salesforce affiliates. While Slack states it does not sell personal data in the traditional sense, it acknowledges that certain data sharing arrangements may qualify as a 'sale' or 'sharing' under California law, which could affect how your data is used for advertising. You can opt out of the sale or sharing of your personal data by visiting Slack's privacy settings or submitting a request at https://slack.com/trust/privacy/privacy-policy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Within 30 days
    Send an email to privacy@slack.com identifying yourself as an EU or UK user and specifying the right you wish to exercise (e.g., data access, deletion, or portability). Slack is required to respond within 30 days under GDPR.
  • Delete Your Data
    Within 30 days
    Email privacy@slack.com requesting erasure of your personal data under GDPR Article 17. Provide your account details to help Slack identify your data and specify the scope of the deletion request.

Applicable agencies

  • State AG
    In the absence of a US federal privacy regulator, state attorneys general are the primary enforcement point for analogous state privacy rights; EU supervisory authorities are the relevant GDPR enforcement bodies.
    File a complaint →

Provision details

Document information
Document
Slack Privacy Policy
Entity
Slack
Document last updated
March 24, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-001015
Document ID
CA-D-00192
Evidence Provenance
Source URL
Wayback Machine
SHA-256
1a801f907c7c06d87fe28bd8d272d95e49e8860687f538ae969d61b298d09dcf
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Slack | Document: Slack Privacy Policy | Record: CA-P-001015
Captured: 2026-03-20 06:00:16 UTC | SHA-256: 1a801f907c7c06d8…
URL: https://conductatlas.com/platform/slack/slack-privacy-policy/gdpr-data-subject-rights/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document