Roster

Privacy

Roster connects Claude to your Slack workspaces, read-only. This page lists exactly what we store and what we don't.

We don't store Slack content

Messages, files, channel contents and your search queries are fetched from Slack when Claude asks for them, passed straight back to Claude, and not saved by us. They never go into our database or our logs.

What we do store

  • Your account: email address and sign-in details, held by Supabase Auth.
  • Clients you create: name and slug.
  • Each connected workspace: your alias for it, the Slack workspace name and ID, your Slack user ID, the token's scopes, its status, and when we last reached Slack.
  • Each workspace's Slack token, encrypted with AES-256-GCM. It is never shown in the dashboard or sent to Claude.
  • Each workspace's channel sharing choice: all channels, or the channel IDs you picked.
  • AI apps you've allowed, held by Supabase Auth so you can revoke them from the dashboard.
  • If you use a legacy connector URL, it is stored only as a one-way hash. We show the full URL once, when you create it, and can't show it again.
  • A request log for each tool call: which tool, which client, whether it worked, an error code if not, and how long it took. No queries, message text or results.

Who can see your Slack data

Only AI apps you sign in to and allow can read the workspaces connected to your account, and only the channels you share. Revoke an app on the dashboard and it loses access immediately. If you use a legacy connector URL, keep it private: anyone who has it can read the same way. Regenerate it on the dashboard if it leaks.

The Slack token acts as you, so it only sees channels you can already see. Answers in Claude are covered by your agreement with Anthropic.

Deleting your data

  • Disconnecting a workspace deletes its row and its encrypted token immediately.
  • Deleting a client deletes all of its workspaces and tokens.
  • Deleting your account (Settings in the dashboard) deletes everything above, including your sign-in.
  • You can also revoke access from Slack at any time by removing the app from the workspace.

Where it runs

The app is hosted on Vercel. The database and sign-in run on Supabase in the Tokyo region (ap-northeast-1). Slack data is fetched from Slack's API on demand.

Contact

Questions or deletion requests: prathamshirbhate1909@gmail.com.