Slack App Disclosure

This page explains what data the Dema Slack app accesses and how we handle it. It supplements our Privacy Policy and Data Processing Addendum. A workspace that installs the Dema app remains subject to its own agreement with Slack.

What Slack data we access

When your workspace installs the Dema Slack app, we may access and process the following Slack data.

Messages. Direct messages sent to the Dema bot, messages that mention @Dema in channels, and replies within existing Dema conversation threads are processed in order to generate responses.

If you individually connect your Slack account to Dema, the Dema AI assistant may also, acting on your behalf and with your authorisation:

• search and read message history in channels, group conversations and direct messages you have access to;
• read canvases and files; and
• take actions in Slack on your behalf, such as sending messages, adding reactions, and creating or editing canvases,

in order to answer your questions and carry out your requests.

User profile information. Your Slack user ID and, when you link your Slack account to Dema, the email address associated with your Slack profile. When you link your Slack account, we also associate it with your Dema account profile (your name, email address, and role and permission information from your Dema account) so that we can route and authorise your requests.

Workspace information. Workspace (team) ID and name, channel IDs, conversation thread identifiers and message permalinks.

How we use Slack data

We use Slack data only to provide the Dema AI assistant inside Slack: to receive your questions, generate responses and route conversations correctly. We do not use Slack data for advertising, and we do not use it to train generalised models that benefit other customers.

Storage and security

• Our Slack app service uses routing identifiers, such as workspace, channel and thread IDs and message permalinks, to provide the app.
• To generate responses, message content is sent to the Dema platform, where it is kept as part of your conversation history so that the assistant can maintain context across a conversation.
• AI processing is performed by the service providers listed in our Data Processing Addendum, under confidentiality obligations.
• If you link your individual Slack account, Dema uses the resulting authorisation to perform actions you request.
• Technical event logs, which do not contain message content, are kept only for as long as reasonably needed to operate, secure and troubleshoot the Slack integration.
• We use technical and organisational measures designed to protect Slack data at a level appropriate to the risk and limit access to people and systems that need it to provide the relevant features.

Sharing

We do not sell, rent or share Slack data with third parties for their own marketing purposes. We share it only with the service providers that support the Dema platform, under confidentiality obligations and only as necessary to deliver our services.

Retention and deletion

We keep Slack data only as long as needed to provide the relevant features, meet legal obligations and handle applicable claims, subject to the customer's instructions and our Data Processing Addendum. Conversation history is part of the Customer Personal Data we hold for the customer you work for.

• Uninstalling the Dema app, revoking access or disconnecting an individual account stops future access through that connection but does not itself delete data previously imported into Dema.
• Customers can instruct us to delete Customer Personal Data under the Data Processing Addendum. Individuals can contact the relevant customer or email dpo@dema.ai, and we will handle the request as required by applicable law. See section 7 of our Privacy Policy for more.