Privacy Policy

What Intentify AI Does

Intentify AI is a data loss prevention (DLP) tool for Slack. When a user shares a file in a monitored channel, Intentify AI verifies that the file content matches the user's stated intent and is appropriate for the audience. It does this using a combination of regex-based heuristics and AI analysis.

Data We Collect

Intentify AI is designed around a zero content retention principle. Here is exactly what we store and what we don't:

What we store (privacy-safe metadata only)

• One-way hash of the message text (SHA-256) — cannot be reversed to recover the original text
• Slack user ID and channel ID — identifies who sent the message and where
• Structured classification labels — e.g. "financial_document", "mismatch" — never raw content
• Templated risk summaries — short descriptions generated from labels, not from actual file content
• File metadata — file name, type, size, and analysis method used
• Workspace ID — to scope data to your workspace

What we never store

• Message text (scrubbed from memory after processing)
• File contents or file URLs
• AI reasoning or detailed findings
• User emails, real names, or profile information

How We Use Data

• Real-time analysis: message text and file contents are processed in memory to determine if there's a mismatch. They are discarded immediately after.
• Dashboard and audit trail: the privacy-safe metadata listed above powers the admin dashboard for workspace administrators.
• Aggregated statistics: monthly rollups are computed for the analytics dashboard. These contain only counts and labels, never user content.

AI Processing

Intentify AI uses OpenAI GPT-4o-mini for file analysis. When AI analysis is triggered:

• Message text and file content are sent to OpenAI's API for a single inference call
• OpenAI's API data usage policy applies — as of our last review, data sent via the API is not used to train models
• Intentify AI does not use Slack data to train any language models
• AI responses are used in real-time and are not persisted

Data Retention

• Evaluation metadata is automatically deleted after a configurable retention period (default: 90 days)
• Workspace administrators can change the retention period or set it to 0 (keep forever) from the dashboard
• When a workspace uninstalls Intentify AI, the workspace is marked inactive. Contact us to request full data deletion.

Data Sharing

We do not sell, rent, or share your data with third parties. The only external service that processes your data is OpenAI (for AI analysis), subject to their enterprise privacy policy.

Your Rights

You have the right to:

• Access your workspace's stored data via the admin dashboard
• Delete your data by adjusting retention settings or contacting us
• Export your data by contacting us at the address below
• Opt out of analysis entirely via the "Analysis enabled" toggle in workspace settings

Security

• All traffic is encrypted via TLS 1.2+
• Slack webhook requests are verified using HMAC-SHA256 signatures
• Admin sessions use signed cookies with HMAC-SHA256
• OAuth tokens are stored encrypted in the database
• Sensitive fields are automatically redacted from all log output

Contact

For privacy questions, data requests, or concerns: