Data Security Q&A

1) How exactly is my data used?

We process Slack conversation history and user freestyle input about progress updates. This information is collected exclusively from channels that have been explicitly authorized for processing by users. We do not process any information from channels that users have not authorized. These messages are processed using an AI model solely for the purpose of summarization, and no additional data processing is performed. Access to your data is strictly limited to our AWS account and Bedrock LLM, and no manual data processing is conducted by any of our employees.

2) Is ‘bout.ai GDPR compliant?

Yes, our data processing is aligned with the best practices proposed by the GDPR. All data processing services are located within the EU, and no user data is processed outside the EU (if the user is also located within the EU region). We adhere to all modern regulatory guidelines, including handling requests for data deletion. We do not collect any information about our users beyond what is listed in our service agreement.

3) Is it secure to use the tool in a commercial environment?

We prioritize the security of our users' data, which is why we have separate environments for each team's data processing. We do not process your data alongside other companies' data in the same pipeline. This ensures that none of your company data can leak to another user.

4) We use our own customers’ data, how can we be sure it doesn’t get used in training?

When you share your customers' data within Slack or other corporate tools, you are already sharing this information with third-party vendors. For our part, if you have sensitive information in Slack (or other apps to which you grant us access), please do not grant us permission to those channels and resources where the sensitive information is located.

If you accidentally grant us access to channels where your clients' data is located, please contact us immediately. We will delete all of the data and data processing results to ensure that we do not retain any sensitive data you accidentally granted us access to.

5) It says during registration that ‘bout.ai app os not approved by Slack, why is that?

Our application offers features that include the ability to read Slack messages in order to provide advanced functionality. However, Slack's official app directory has strict guidelines, particularly around privacy and data access. Since our app accesses message data, it does not align with Slack's current policies for official recognition.

We understand the importance of data security and privacy, and we are committed to ensuring that all information is handled responsibly. While we may not be officially recognized by Slack, we prioritize transparency and compliance with data protection standards to safeguard user privacy.

6) How does Slack integration work data security-wise?

Slack integration incorporates multiple security pillars:

Access Control: We do not process any data from channels you haven't granted us access to. It is entirely your decision which channels we analyze and which we do not.
Data Deletion on Request: If you grant us access to information that shouldn't be processed, contact us, and we will delete all the processed data to ensure your data security.
Privacy and Access Restrictions: We adhere strictly to privacy policies and restrictions. None of the users outside your team/company will have access to your processed data.
Aggregated Data Only: Once we process your data, our user interface provides access only to aggregated information, significantly reducing the risk of exposing internal company information.