Privacy policy

What Avalon processes

Avalon processes account and workspace identity, connector authorization metadata, prompts, task history, automation definitions and results, and the bounded provider content needed to perform a user-requested task. Connector tokens are encrypted and are not included in model prompts.

Slack data

Avalon does not scrape, mirror, or build a separate index of Slack messages, threads, files, or canvases. Slack content may remain inside a user-created Avalon task, summary, artifact, tool receipt, or automation result when that content was used to do the requested work. Personal Slack tools act with the authorizing user’s Slack permissions.

Use, sharing, and AI

Data is used to operate, secure, support, and improve the service according to workspace settings. Avalon does not sell personal information. Data is disclosed only to infrastructure and model providers needed to perform the service, when directed by the user, or when legally required. AI output can be inaccurate and should be reviewed for consequential uses.

Region, retention, and control

Avalon stores workspace data in the selected Global or EU region. By default, task and automation content—including Slack information used in those resources—has no automatic expiration and remains until an authorized user deletes the resource or the workspace is deleted. Single-use Slack account-link challenges expire after 15 minutes. Workspace audit records are retained for the life of the workspace, with limited security, billing, and legal records retained afterward where required.

Disconnecting a workspace Slack installation from Avalon revokes the installation credentials Avalon holds and disables its routing. A Slack administrator must separately remove Avalon from Slack App Management to uninstall the app from the workspace. Disconnecting a personal Slack connection revokes that user credential. These actions stop new Avalon access but do not delete existing Avalon tasks, summaries, artifacts, receipts, or automation results; those are removed through the controls for the Avalon resource that contains them.

Requests and contact

To request access, correction, export, or deletion, or to report a privacy concern, contact privacy@with-avalon.com. We verify the requester and the relevant workspace authority before acting.