Data retention policy
Workspace data kept as long as app installed. On uninstall, workspace marked inactive but data preserved so reinstall keep history. Server logs (IP, user agent): 30 days. Error reports (Honeybadger): 30 days.
Full text: https://shakaflow.com/privacy-policy §7. Data archiving and removal policy
No automatic deletion on uninstall (marked inactive, data retained for reinstall). Permanent deletion on admin email request — completed within 7 business days, written confirmation sent. GDPR/CCPA rights honored within 30 days. §7–§8.
Data storage policy
PostgreSQL databases hosted on Control Plane. All OAuth tokens, API tokens, AI provider keys encrypted at rest via ActiveRecord Encryption. TLS 1.2+ in transit. MFA-protected admin access. §6.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic, OpenAI, Gemini - Customer pick provider at tenant level. BYOK supported — customer supply own key, model override possible.
LLM retention settings
ShakaFlow side: user requested prompts not persisted. Only final generated output stored (summary text in Slack message / DB report record) for display + history. Input context assembled on-demand per request.
LLM data tenancy policy
Per-tenant isolation. Each tenant configure own provider + optional BYOK key. Prompts scoped to single workspace data (queries filtered by tenant_id / slack_workspace_id). No cross-tenant prompt sharing. When BYOK set, requests billed direct to customer p
LLM data residency policy
ShakaFlow infra: US (Control Plane US region, PostgreSQL). Prompt transit through ShakaFlow US infra then forwarded to chosen provider.