Does Slack Marketplace require a privacy policy?

Yes. Slack’s guidelines require every Marketplace app to have a clear privacy policy linked from its landing page.

What must it include?

At least what data is collected, how it is used and how long it is kept, plus any data you receive but don’t use.

Slack Marketplace · Platform guide

Privacy policy for Slack apps (Slack Marketplace)

Slack Marketplace apps must publish a clear privacy policy that explains how third-party data is handled, linked from the app’s public landing page. At minimum, Slack expects it to say what data is collected, how it is used and how long it is kept. If your app receives data it never uses, the policy must say so.

§ 1

What Slack Marketplace requires

Marketplace guidelines — Your privacy policy page

“All Slack Marketplace apps must include a clear privacy policy that details how third-party data is handled and this page should be accessible on your app’s landing page.”

Source: api.slack.com verified 2026-10-30

1.1Minimum contents. Slack: “At a minimum it should include: What data is collected. How the data that is collected is used. How long data is kept.” Source: api.slack.com

1.2Data you receive but don’t use. “If your app receives data but never uses it, this must be stated in your privacy policy.” Source: api.slack.com

1.3Landing page link. Your landing page needs “A clear link to your privacy policy” and must be publicly accessible, not a PDF or code repository. Source: api.slack.com

§ 2

What common SDKs collect

SDK / API	Data it collects	Source
Slack OAuth scopes (examples)	channels:history: messages and other content in public channels the app has been added to	Source: docs.slack.dev
users:read.email	Email addresses of people in a workspace	Source: docs.slack.dev

Everything in this table must appear in your policy if the SDK ships in your build.

§ 3

Where to put the URL

3.1Your app’s public landing page: a clear privacy policy link.
3.2Slack app settings → Marketplace submission → Privacy policy URL.

§ 4

Sample clause

§ 4.1 · Slack data

When you install the app, we receive your workspace ID, your user ID and messages in channels where the app is invited, to answer commands. We keep command history for 30 days, then delete it. Slash command payloads also include channel names, which we do not store.

Illustrative wording. Your generated policy is written from your own answers.

§ 5

Questions

Does Slack Marketplace require a privacy policy?: Yes. Slack’s guidelines require every Marketplace app to have a clear privacy policy linked from its landing page.
What must it include?: At least what data is collected, how it is used and how long it is kept, plus any data you receive but don’t use.