Privacy

Draft, pending legal review. Last updated 2026-10-14.

What Iris is

Iris is an AI operations assistant for your team. She works inside your Slack workspace and, when you connect it, your Google Drive. Each customer gets their own isolated Iris.

What we collect and keep

• Account: your organization name, the email you signed up with, and billing identifiers from our payment processor. We never see your card number.
• Connections you authorize: a Slack bot token for your workspace and a Google refresh token. These are kept in an encrypted secrets manager and delivered to your Iris only in memory.
• Iris's memory: notes she keeps so she can help you, and her working files, stored on the server that runs your Iris. We keep daily encrypted backups of that memory (the most recent 14).
• Your knowledge base: the folders and documents Iris creates live in your Google Drive. They belong to you and stay there if you delete your account.
• Usage: counts and amounts (messages, AI usage) so we can apply your monthly allowance and keep the service healthy.
• Support: what you tell us when you report a problem, with secrets masked.

What Iris can see

Slack: messages sent to Iris, and channels she has been added to (adding her to a channel is your consent for her to read and file it). She cannot read direct messages between other people. Google Drive: files in the knowledge base folder and any folder you ask her to watch, plus documents she creates. She cannot delete files or change sharing.

AI processing

To answer you, the text of your conversation and the documents Iris reads are sent to an AI model. We use the Claude Haiku model, reached through OpenRouter, and restrict it to US-region endpoints run by Anthropic, Amazon Web Services (Bedrock) or Google Cloud (Vertex AI). We set the request flag that prohibits those providers from storing your prompts or training on them.

Google user data

Iris's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the Iris features you ask for, is not used for advertising, and is not read by people except where you ask us for support or the law requires it.

Who processes data for us

DigitalOcean (hosting, US), OpenRouter and the AI providers above, Slack, Google, Stripe (payments), Bitwarden (secrets), Resend (sign-in and alert email) and GitHub (support tickets).

Your controls

• Disconnect Iris any time from Slack (remove the app) or from your Google account.
• Delete your account and data yourself from your setup page. We cancel your subscription, revoke Google access, remove Iris from Slack, and delete her memory, settings and tokens. One encrypted backup of her memory is kept for 30 days in case you change your mind, then destroyed. Your Drive files are not touched.
• Ask us anything about your data: [contact address to be added before launch].