Rhythms
AI that helps run the business, right in SlackRhythms helps run and improve your operating rhythms, from business reviews and goal tracking to follow-through. It tracks changes across meetings and tools, spots risks to your priorities, and coordinates with the right people to keep commitments on track.What you can doGoals & OKRs
• Check in, create or update goals, and respond to comments without leaving Slack. Rhythms drafts the update from what actually changed. You review and apply.
• Try it:
• Spend the review making decisions, not reconstructing what happened. Rhythms prepares the review, brings what changed into the room, and keeps the follow-through moving after.
• Try it:
• Give it something to watch: a launch, a customer, a priority. Rhythms keeps watch and lets you know when something meaningful changes, not just because Monday arrived.
• Try it:
• Everything stays in one place: the daily chase of open items, the agenda, and the decisions with owners, written into a Slack canvas. When the review is done, the channel archives itself.Use the Rhythms MCP with Slackbot• Bring your company's operating context from Rhythms into Slackbot conversations to manage your goals, reviews, documents, decisions, and commitments.
• Ask about progress and what changed, and get answers grounded in your company's actual work.
• Create or update goals and log check-ins as the conversation happens.Trust & Security: SOC 2 Type II. GDPR and CCPA compliant. Enterprise identity, role-based permissions, approval boundaries, and a full audit trail for every action Rhythms takesDisclaimer: Rhythms uses AI to understand priorities and draft recommended actions. Always review before acting on them.
• Check in, create or update goals, and respond to comments without leaving Slack. Rhythms drafts the update from what actually changed. You review and apply.
• Try it:
@Rhythms turn this conversation into an OKRBusiness Reviews• Spend the review making decisions, not reconstructing what happened. Rhythms prepares the review, brings what changed into the room, and keeps the follow-through moving after.
• Try it:
@Rhythms prepare me for Thursday's leadership reviewStay Ahead• Give it something to watch: a launch, a customer, a priority. Rhythms keeps watch and lets you know when something meaningful changes, not just because Monday arrived.
• Try it:
@Rhythms stay on top of ERP MigrationSlack is where the work gets discussed. Rhythms takes care of what happens next. Add it to a channel and see what it offers to take on first.Use Rhythms in Slack Code channels: Learn more• Ask Rhythms to run a review and it opens a code channel for it: it checks last month's commitments against your connected tools, drafts the pre-read, and questions a number before it reaches the meeting.• Everything stays in one place: the daily chase of open items, the agenda, and the decisions with owners, written into a Slack canvas. When the review is done, the channel archives itself.Use the Rhythms MCP with Slackbot• Bring your company's operating context from Rhythms into Slackbot conversations to manage your goals, reviews, documents, decisions, and commitments.
• Ask about progress and what changed, and get answers grounded in your company's actual work.
• Create or update goals and log check-ins as the conversation happens.Trust & Security: SOC 2 Type II. GDPR and CCPA compliant. Enterprise identity, role-based permissions, approval boundaries, and a full audit trail for every action Rhythms takesDisclaimer: Rhythms uses AI to understand priorities and draft recommended actions. Always review before acting on them.
Rhythms will be able to view:
Rhythms will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
VTVK Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Retention periods are determined based on the purpose of processing, legal or contractual requirements, and business needs, in consultation with the data protection officer, legal counsel, and relevant data owners. For customer support and sales/marketing data, retention periods are set to balance operational needs with GDPR’s storage limitation principle, ensuring data is not kept longer than necessary while supporting business functions like dispute resolution and customer re-engagement.
Company shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with security leadership and/or legal counsel, may determine retention periods for their data. Personally identifiable information (PII) shall be deleted or de-identified when it no longer has a business use.
Customer data in SaaS products is retained for 90-180 days after contract termination
Support-related data (instance metadata, tickets, phone conversations) is generally kept for 2 years after contract termination or last interaction
Security data is retained for 1 year (event logs) or 6 months (vulnerability scans)
Sales data is kept for 3 years after last contact or opportunity closure.
Marketing data is kept for 2 years after last contact or until consent is withdrawn.
Employee data is maintained for the duration of employment plus 7 years.
Website Analytics data is retained for 2 years.
Data archiving and removal policy
When data from our Slack app isn’t needed anymore, Rhythms either archives it securely or deletes it, depending on what’s required. We make sure sensitive info is handled safely—whether it’s stored or trashed—and devices are wiped clean before they’re tossed. Our Data Protection Officer and compliance team review this process every year to keep it secure and aligned with GDPR and our own standards.
Customer Data: Deleted within 180 days of a contract ending unless we must keep it for legal or contract reasons.
Sensitive Data (Customer or Internal): Encrypted if archived; paper copies are shredded or trashed securely.
Devices: Wiped with encryption or destroyed via a certified service (we keep proof for a year).
Personal Info: Deleted after contracts end or if someone asks, unless we have a valid reason to keep it.
Annual Check: Reviewed yearly to ensure safety and compliance.
Data storage policy
Rhythms collects and processes personal data only for specific, legitimate purposes, adhering to data minimization principles. We classify data into three categories:
Confidential Data (highest protection): Customer data including OKRs, PII, financial information, and authentication credentials
Restricted Data (thorough protection): Internal company information
Public Data: Information intended for public consumption
Data Protection Measures:
Encryption of confidential data at rest and in transit
Access controls based on need-to-know principles
Secure handling procedures for all data classifications
Pseudonymization of personal data where appropriate
Retention and Deletion:
Customer data is retained for 90 days minimum and purged within 180 days of contract termination
Support data is retained for 2 years after ticket closure or contract termination
We conduct annual reviews of all retention requirements
Data subjects can request access, rectification, or erasure of their data
Data center location(s)
United States
Data hosting details
Cloud hosted.
Data hosting company
Azure
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Azure OpenAI (GPT-4o), Anthropic (Claude-3.5-Sonnet and Claude-Sonnet-4)
LLM retention settings
Retention Period: Zero (0) days
Data Persistence: No conversation data, prompts, or responses are stored with LLM providers
LLM data tenancy policy
Tenant Isolation: Complete logical separation between different Slack workspaces
Data Segregation: Each workspace's data is processed independently
Cross-Tenant Access: Strictly prohibited - no data sharing between organizations.
LLM data residency policy
All customer data is stored and processed in the United States, including LLM processing.
Certifications & compliance
SOC attestation
Data deletion request procedure
Data subjects can submit a Data Subject Access Request (DSAR) for erasure/'right to be forgotten' via:
The organization's privacy page at rhythms.ai/privacy-policy
By email to support@rhythms.ai
Verification Requirements
Requesters must provide reasonable evidence of their identity (e.g., email verification)
For requests by agents, identification of the data subject must be included
Processing Timeline
The organization will acknowledge manual requests within 3 business days
The organization must complete the request within one month from the initial request date
Extensions are only granted in very limited circumstances
Handling Process
The date of submission, identity verification, and request type are recorded
The organization searches all databases, filing systems, backups, archives, and email folders
Data is collected as specified by the data subject
A record of the request, receipt, and processing dates is maintained
Organizational Roles
The Data Protection Officer oversees compliance and request handling
For employee requests, HR and departmental leadership are involved
The Chief Legal Officer reviews any exemptions
Documentation Requirements
All requests are logged in the organization's internal processes
Records must be maintained and accessible for audit purposes
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
All popular SSOs including Google, Microsoft Entra, Okta, etc.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@rhythms.ai
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
Rhythms utilizes Large Language Models for features such as AI-powered summaries and responses to natural language queries. (1) Azure OpenAI (2) Amazon Bedrock (3) Google Gemini
Uses token rotation
yes