Security
How Chronicle handles and stores information
How is my data used and stored?
To deliver the various alerts and management capabilities for admins and workspaces, Chronicle records a few things about each workspace:
- Events that have been triggered (these are the ones sent to #chronicles)
- Channel metadata (names, IDs, and whether it’s been ignored)
- User metadata (guest status, username, user ID, etc.)
- File metadata (IDs, filename, public sharing metadata, etc.)
Note that the content of channels, files, or messages is never stored. Instead, the information listed above is saved to determine changes that may occur to these resources. This information is used so that Chronicle can send alerts to administrators with more details when actions related to a resource occur, such as a file is deleted or a file is removed. Without storing this metadata, if a file was deleted, Chronicle could only tell you that a file with a specific ID was deleted, not the specific file’s name that was deleted. This also applies when users change their username or share a private company file outside of Slack. No personally identifying information is stored, aside from a user’s username, which is used to enable “username changed” events.
For connected admins, Chronicle must store some basic information to function:
- Email address
- Connected workspaces
- Billing information
Additionally, no billing information is stored aside from a Stripe billing token, meaning a user's credit card information never touches our servers.
For all data stored, Chronicle does not share any information with any third party except for an email address you explicitly provide when you reach out to support through the chat widget on our website, which is only used to reach you via email if we get disconnected. The only way this information can be accessed is through Chronicle’s admin dashboard by a connected administrator from your Slack workspace.
If you’d like all data related to your user or your workspace deleted, please contact us. We can accommodate data deletion requests. If you have any questions about how this data is stored or used, please contact us. We’d be happy to answer any questions you may have.