Pluk
Pluk is an AI agent for referral hiring that lives in your Slack workspace. When you open a role, Pluk creates a dedicated channel for it and posts matched candidates directly into that channel who are connected to someone on your team.From Slack, your team can review each candidate's profile and fit summary, approve outreach with a thumbs up, and see every action Pluk takes narrated in the channel. If a candidate is connected to a teammate, Pluk will start a group DM to backchannel the candidate. If the team wants to reach out, Pluk will coordinate a warm outreach through Slack. Replies, scheduling nudges, and pipeline updates all flow back into the role's channel. No new tool to learn: your team hires from the place they already work.
Pluk will be able to view:
Pluk will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Jobreel Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Pluk retains personal information only as long as needed for the purposes described in our privacy policy. Account data is retained for the life of the customer relationship plus a reasonable period thereafter. Slack-derived Customer Data is retained for the duration of the customer relationship, or until the customer deletes it or uninstalls the app, after which it is deleted within 90 days. Billing records are retained as required by tax and accounting law. Candidate suppression requests are retained indefinitely so that exclusions remain effective. We may retain aggregated or de-identified data that does not identify anyone.
Data archiving and removal policy
When a workspace uninstalls the Pluk Slack app or revokes its tokens, Slack sends an uninstall event and Pluk tears down the installation: OAuth tokens are marked revoked and stop being used, and the stored Slack workspace member directory is deleted. Slack-derived message content associated with that installation is deleted within 90 days. Customers may also request deletion at any time by contacting support@pluk.ai. We do not maintain long-term archives of Slack message content beyond the retention period described above.
Data storage policy
Customer Data is stored in a managed PostgreSQL database (Google Cloud SQL) and Google Cloud Storage, within Google Cloud Platform in the us-central1 region in the United States. Data is encrypted in transit using TLS and at rest using Google Cloud's default encryption. Each customer's data is logically isolated by organization identifier, and access is scoped per Slack workspace installation. Application access to production data is restricted to authorized engineering staff.
Data center location(s)
United States
Data hosting details
Cloud hosted. Google Cloud Platform, using Cloud Run for the application, Cloud SQL for PostgreSQL, and Cloud Storage. No on-premise or customer-hosted deployment option.
Data hosting company
Google Cloud Platform (Google LLC)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude (Sonnet, Opus, Haiku) via the Anthropic API; Google Gemini (Pro and Flash) via the Gemini API; Google Gemini Embedding via Vertex AI in our own GCP project; OpenAI embeddings for one document retrieval path.
LLM retention settings
Pluk stores no prompts or completions with model providers beyond serving the request. Provider retention follows our commercial agreements with Anthropic and Google, under which API inputs and outputs are not used to train their models.
LLM data tenancy policy
Pluk never trains or fine-tunes models on Customer Data. We call third-party hosted model APIs, sending Slack content only to answer that workspace's request. Data is never pooled across workspaces. Every request is scoped to one organization.
LLM data residency policy
Application data is stored in the United States (Google Cloud us-central1). Model inference runs on Anthropic and Google hosted API endpoints under those providers' regional processing terms. Embeddings run via Vertex AI in our own GCP project.
Certifications & compliance
Data deletion request procedure
Requests are sent to support@pluk.ai and are handled by our team. For a customer requesting deletion of their workspace data, we delete the stored records associated with that organization and Slack installation, including Slack-derived message content and the workspace member directory, within 90 days. For an individual asking us to delete their personal information, we remove their stored profile and add them to a suppression list, which prevents the profile from being re-added when we next receive data from our third-party providers. Individuals may also ask us directly not to be contacted. We confirm completion to the requester.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Google Workspace and Microsoft Entra ID, via OAuth 2.0 / OpenID Connect (implemented through Clerk).
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
security@pluk.ai
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Uses token rotation
no