Security
This page is about Humboldt in Slack: the app a workspace admin installs from humboldt.metaphi.ai/slack. The privacy policy and terms apply to it as to everything Metaphi runs.
What the app reads
Only what a person in Slack can already see, and only where the app is.
- Messages in threads a session speaks in, and messages that mention @Humboldt in channels it has been invited to. A channel's other top-level messages are not read unless someone in that channel turns a channel watch on.
- Direct messages sent to the app.
- The display name and Slack id of a person who replies in one of those threads. The email on a person's Slack profile is read only when they message the app directly, to match an existing Humboldt account; nothing is written about them otherwise.
- The list of channels the app is a member of, to offer them on the connect page.
The app asks for no other scope. The scopes it holds and why are listed in the app manifest checked into the Humboldt repository.
What is stored, and where
- The workspace's bot token, the workspace name and id, the channels the app can see, and which repository each connected channel works on. These live in the Humboldt server's database on Modal, in Metaphi's own environment, encrypted at rest by the provider.
- Session records: what the model read, did and said in a session, including the Slack messages that reached it and the people who sent them, by Slack id and display name. Records live on Metaphi's storage on Modal and are read by Metaphi to improve Humboldt, as the terms describe.
- The one-hour repository token minted for a hosted session is never stored: it is handed to git in the sandbox for one command and expires on its own.
Every request from Slack is verified against the app's signing secret before it is read. Requests to the app's own pages carry a random state that the server minted and checks once.
Retention and removal
- Uninstalling the app from a workspace, or revoking its token, deletes the workspace's token, its people, codes, channels and repository bindings the moment Slack sends the event. Session records stay, as records of the work.
- A connect link expires after a day; a sign-in link after fifteen minutes.
- To have session records that mention your workspace deleted, write to agent@metaphi.ai from an address in your workspace's domain.
Reporting a vulnerability
Write to security@metaphi.ai. Say what you found and how to reproduce it; we answer within two working days.