Rhythms
Rhythms: Business Orchestration PlatformRhythms is a business orchestration platform that integrates with Slack to align strategy with execution through OKRs, provide operational visibility, and help teams achieve operational excellence.Getting StartedStep 1: After installing the Rhythms app for Slack, visit app.rhythms.ai to complete setup and configure your OKRsStep 2: Connect your Slack workspace and customize your team's OKRsStep 3: Begin tracking progress directly within SlackCore FeaturesOKR Management• Set and track Objectives and Key Results directly within Slack• Automated progress check-ins and updates on key results• Real-time OKR visibility across teams and departments• Weekly/monthly OKR review reminders and progress summaries• Cascade objectives from company to team to individual levelDaily Execution• Personalized, automated prompts for daily updates linked to OKRs• Simple reply-based submission for accomplishments, plans, and blockers• Automatic correlation of daily work to key results progressTeam Alignment & Visibility• Centralized view of OKR progress in organized Slack channels• See how daily activities contribute to quarterly objectives• Automatic identification of at-risk OKRs requiring attention• Cross-functional OKR dependencies and collaboration trackingBenefitsStrategic Alignment: Connects daily work to quarterly OKRs, ensuring every team member understands how their work impacts company objectives.Goal Transparency: Makes OKRs visible and accessible within Slack, fostering accountability and cross-team collaboration.Execution Excellence: Bridges the gap between strategy (OKRs) and daily execution through integrated workflows.Reduced Context Switching: Manage OKRs, track progress, and maintain business cadence without leaving Slack.Rhythms transforms Slack into a comprehensive OKR execution platform, ensuring your objectives don't just get set—they get achieved.DisclaimerRhythms uses advanced AI language models to help analyze OKR progress, generate insights, and provide intelligent suggestions. While our AI aims to be helpful and accurate, please note that AI-generated responses may occasionally contain inaccuracies or require human verification. We recommend reviewing AI-generated insights and using them as a starting point for decision-making rather than as definitive answers.
Rhythms will be able to view:
Rhythms will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
VTVK Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Retention periods are determined based on the purpose of processing, legal or contractual requirements, and business needs, in consultation with the data protection officer, legal counsel, and relevant data owners. For customer support and sales/marketing data, retention periods are set to balance operational needs with GDPR’s storage limitation principle, ensuring data is not kept longer than necessary while supporting business functions like dispute resolution and customer re-engagement.
Company shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with security leadership and/or legal counsel, may determine retention periods for their data. Personally identifiable information (PII) shall be deleted or de-identified when it no longer has a business use.
Customer data in SaaS products is retained for 90-180 days after contract termination
Support-related data (instance metadata, tickets, phone conversations) is generally kept for 2 years after contract termination or last interaction
Security data is retained for 1 year (event logs) or 6 months (vulnerability scans)
Sales data is kept for 3 years after last contact or opportunity closure.
Marketing data is kept for 2 years after last contact or until consent is withdrawn.
Employee data is maintained for the duration of employment plus 7 years.
Website Analytics data is retained for 2 years.
Data archiving and removal policy
When data from our Slack app isn’t needed anymore, Rhythms either archives it securely or deletes it, depending on what’s required. We make sure sensitive info is handled safely—whether it’s stored or trashed—and devices are wiped clean before they’re tossed. Our Data Protection Officer and compliance team review this process every year to keep it secure and aligned with GDPR and our own standards.
Customer Data: Deleted within 180 days of a contract ending unless we must keep it for legal or contract reasons.
Sensitive Data (Customer or Internal): Encrypted if archived; paper copies are shredded or trashed securely.
Devices: Wiped with encryption or destroyed via a certified service (we keep proof for a year).
Personal Info: Deleted after contracts end or if someone asks, unless we have a valid reason to keep it.
Annual Check: Reviewed yearly to ensure safety and compliance.
Data storage policy
Rhythms collects and processes personal data only for specific, legitimate purposes, adhering to data minimization principles. We classify data into three categories:
Confidential Data (highest protection): Customer data including OKRs, PII, financial information, and authentication credentials
Restricted Data (thorough protection): Internal company information
Public Data: Information intended for public consumption
Data Protection Measures:
Encryption of confidential data at rest and in transit
Access controls based on need-to-know principles
Secure handling procedures for all data classifications
Pseudonymization of personal data where appropriate
Retention and Deletion:
Customer data is retained for 90 days minimum and purged within 180 days of contract termination
Support data is retained for 2 years after ticket closure or contract termination
We conduct annual reviews of all retention requirements
Data subjects can request access, rectification, or erasure of their data
Data center location(s)
United States
Data hosting details
Cloud hosted.
Data hosting company
Azure
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Azure OpenAI (GPT-4o), Anthropic (Claude-3.5-Sonnet and Claude-Sonnet-4)
LLM retention settings
Retention Period: Zero (0) days
Data Persistence: No conversation data, prompts, or responses are stored with LLM providers
LLM data tenancy policy
Tenant Isolation: Complete logical separation between different Slack workspaces
Data Segregation: Each workspace's data is processed independently
Cross-Tenant Access: Strictly prohibited - no data sharing between organizations.
LLM data residency policy
All customer data is stored and processed in the United States, including LLM processing.
Certifications & compliance
SOC attestation
Data deletion request procedure
Data subjects can submit a Data Subject Access Request (DSAR) for erasure/'right to be forgotten' via:
The organization's privacy page at rhythms.ai/privacy-policy
By email to support@rhythms.ai
Verification Requirements
Requesters must provide reasonable evidence of their identity (e.g., email verification)
For requests by agents, identification of the data subject must be included
Processing Timeline
The organization will acknowledge manual requests within 3 business days
The organization must complete the request within one month from the initial request date
Extensions are only granted in very limited circumstances
Handling Process
The date of submission, identity verification, and request type are recorded
The organization searches all databases, filing systems, backups, archives, and email folders
Data is collected as specified by the data subject
A record of the request, receipt, and processing dates is maintained
Organizational Roles
The Data Protection Officer oversees compliance and request handling
For employee requests, HR and departmental leadership are involved
The Chief Legal Officer reviews any exemptions
Documentation Requirements
All requests are logged in the organization's internal processes
Records must be maintained and accessible for audit purposes
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
All popular SSOs including Google, Microsoft Entra, Okta, etc.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@rhythms.ai
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
Rhythms utilizes Large Language Models for features such as AI-powered summaries and responses to natural language queries. (1) Azure OpenAI (2) Amazon Bedrock (3) Google Gemini
Uses token rotation
yes