Security, permissions and employee data

Use this guide when reviewing installation or deciding who should send employee reminders. For organization-specific security questions, contact support@employeereminders.com.

Slack installation and access

Installation uses Slack authorization. Your workspace may require administrator approval. Review the exact permissions shown on Slack’s consent screen before installing.

The product uses Slack access to deliver DMs, read the workspace directory for recipient matching, and show its Home tab. Custom sender names and sending as yourself depend on the authorization available to the app and your connected Slack account.

The Slack-native composer uses the same workspace installation as portal sending; it does not require a new set of scopes for this feature.

What the product stores

Employee Reminders uses workspace and user identifiers, directory names and email addresses, saved audiences, message content, sender settings and schedule settings. Delivery records include recipient IDs, delivery status, timestamps and available error details. Acknowledgment records include the button response timestamp.

Slack access tokens are used to operate the integration. Subscription management uses the existing Stripe checkout flow.

Sender and workspace controls

Messages and audiences are checked against the signed-in user and workspace. Business and Enterprise plans provide sender permissions, applied to portal, Slack and scheduled sends.

Portal changes use form tokens to prevent cross-site request forgery. Message rendering escapes account data and uses safe Markdown rendering. Slack interactivity requests require a valid signature; Employee Reminders rejects stale interaction timestamps.

Draft recovery and exports

The portal can recover unsaved edits from the last seven days using your browser’s storage. Expired recovery entries are removed when you return to that draft. Browser recovery is device-local and may be cleared by browser storage settings. Use Save draft for workspace persistence.

CSV exports contain employee information. Store and share them according to your organization’s access and retention policies. The app protects exported cells against common spreadsheet formula prefixes.

Delivery and acknowledgments

A delivery status means Slack accepted the message. An acknowledgment records a button click, not a read receipt, identity verification or proof that a task was completed. Queued or delivered messages cannot be recalled through the portal.

Privacy requests and security reviews

See the Privacy Policy and Terms. Contact support for account-data requests, deletion requests, security concerns or information needed for an internal review. Include your workspace name and a contact who can verify the request.