Selan Slack App Privacy Policy

The app is made and run by Selan UAB, a private limited liability company registered in Lithuania under company code 308105472. For anything about your data, including a request to see or delete it, write to info@selan.ai — it reaches a person, not a queue.

For each company that installs the app, Selan stores:

• the bot token Slack issued on install;
• the bot user id;
• the Slack team (workspace) id, kept as plain text so events reach the right company.

Message content is not stored by the app. An agent reads a message when it is asked to, and passes it to that agent's run. A run transcript may therefore contain what the agent read, and is kept like any other run transcript: 90 days.

• The bot token is encrypted at rest, value by value, with AES-256-GCM.
• Everything travels over HTTPS.
• Every request Slack sends us carries a signature. We check it (HMAC, version 0, within a five-minute window) before doing anything with the request. A request that fails the check is dropped.

Only Selan's MCP gateway, when a tool call needs it, over an authenticated service-to-service call. No person, developer or agent sees the token.

Agents read only the channels the bot is invited to, and the direct conversations people have with it. They see people's names and email addresses so they can show names instead of ids and find the person who started a run. They do not read other people's one-to-one direct messages.

• Disconnect in Selan or uninstall in Slack. Either one revokes the token and deletes the stored row and the team id.
• Ask and it goes. Email info@selan.ai and we delete all Slack-derived data within 30 days.
• Run transcripts are deleted after 90 days.

The full list, including the model providers your company connects, is in the main Privacy Policy. We do not sell Slack data and we do not use it to train any model.

Questions or requests: info@selan.ai or the contact form.