If Slack causes significant harm — such as a data breach affecting your organization — your ability to recover damages is strictly limited to what you paid Slack in the past year, regardless of actual losses.
If you use Slack through your employer, your organization — not you — controls your workspace data, including messages and files, and can access or delete them. Slack retains rights to use aggregated and de-identified data derived from your usage to improve its services. You can review Slack's Privacy Policy at https://slack.com/privacy-policy to understand what personal data Slack collects and how it is used.