hologramAdd to Slack

Privacy

What hologram reads from your Slack workspace, what it keeps, and who else sees it.

Draft. This is a plain-language starting point and has not been reviewed by a lawyer yet.

Effective October 19, 2026. hologram (sendhologram.com) is run by PBCT LLC (“we”). It's a Slack app: a workspace installs it, and people in that workspace use it by typing /hologram. Questions about this page go to hello@sendhologram.com.

What it reads from Slack

  • The text of each /hologram command, who typed it, and in which channel.
  • The names and profile photos of the people mentioned in it, and which workspace each of them belongs to (so it can tell someone from a Slack Connect channel that their workspace doesn't have hologram yet).
  • When someone presses Remix with me, their own name and profile photo.
  • For team photos and weekly posts (Pro), the channel's member list and the names, time zones and profile photos of up to 10 of its members.
  • Whether a channel is shared with another company (Slack Connect), a DM, or private.
  • The buttons people press on hologram's own messages.

It doesn't read any other messages in your channels, and it can't: it isn't given permission to.

What it keeps

  • The workspace's name and ID, who installed it, and the token Slack gives the app, stored encrypted. When the app is removed from the workspace, the token is deleted.
  • Each request: its text, the channel, who made it, and the names and Slack IDs of the people in it.
  • The picture that was sent to the channel, and any GIF made from it. Both pictures of a request are first shown in a reply only the person who typed it can see; the one not sent is deleted, and Cancel deletes both. We don't keep a gallery, and we don't keep profile photos: they're fetched from Slack each time.
  • How many pictures the workspace has been given and used, for its plan; the workspace's invite code, and which workspace invited it, if one did.
  • Settings someone gives it: a custom bot name and avatar link, and weekly schedules (channel, day, time and scene).
  • The Slack IDs of people who typed /hologram optout, so it can keep them out of pictures.
  • If the workspace pays, a Stripe customer and subscription ID, and whether auto-refill is on. Card details stay with Stripe, which keeps the card for renewals and auto-refill; we never see them.
  • Usage events: installs, commands, button presses and upgrades, with the workspace they came from, so we can see what gets used. These stay in our own database; there are no third-party analytics or advertising trackers on the site or in the app.

How it's used

Only to make the pictures and GIFs people ask for, post them where they ask, run the workspace's plan and billing, and improve hologram. We don't sell any of it, we don't use it for advertising, and we don't train AI models on it ourselves. What the AI providers do with it is below.

Who else processes it

  • OpenRouter (United States), which passes requests to the AI model providers, currently Google, OpenAI, Black Forest Labs, Microsoft and ByteDance for pictures and HeyGen and xAI for GIFs. To make a picture they get the profile photos of the people in it and its scene; for a Studio version or a GIF, also the chosen picture. They handle it under their own terms. We ask OpenRouter to use only providers whose terms say they don't train their models on it, but a provider may keep it for a while for safety and abuse monitoring or legal reasons. We don't control how long a provider keeps it, and we'll update this page if we add or change providers.
  • Vercel (United States) hosts the site and the app and stores the pictures; Neon (United States) hosts the database.
  • Stripe (United States) handles payments.
  • Slack, where pictures are posted. Once posted, a message lives in your workspace under its own retention settings.

A workspace that needs a data processing agreement, or notice when this list changes, can ask at hello@sendhologram.com.

Share links

A picture gets a public web page only if the person who made it presses Share outside Slack. Anyone with the link can then see that one picture and its line, without signing in; the page doesn't show the workspace or the channel, and search engines are asked not to index it. Pressing Make it private turns the page off straight away. Copies that were already loaded can stay in browsers and link previews for a while: up to an hour for the preview card and up to a day for the picture itself.

Cookies

The site sets at most two cookies, both needed for installing: when you press Add to Slack, one that ties the install to your browser for 10 minutes; and when you arrive through another workspace's invite link, one that remembers which link it was for 30 days, so that workspace gets its invite credit. Nothing else, and nothing for tracking.

How long it's kept

Unsent pictures are deleted as soon as one is sent or the request is cancelled. Everything else is kept while the workspace uses hologram, so posted pictures keep showing in Slack and plans keep working. When a workspace asks us to delete it, we delete its record, requests, pictures, GIFs, schedules and usage events within 30 days. We keep payment records as long as tax law requires.

Your choices and rights

  • Anyone in a workspace with hologram can type /hologram optout. Nobody else can then put them in a picture, and team photos and weekly posts leave them out, in that workspace and any other. /hologram optin undoes it.
  • A workspace admin can remove hologram from the workspace's app settings in Slack at any time. It then stops reading anything, and its token is deleted.
  • To get a copy of what we hold about your workspace or yourself, to correct it, or to have it deleted, write to hello@sendhologram.com from your work address. We answer within 30 days.
  • If a picture shows you and you want it gone, write to the same address with a link or a screenshot, and we'll delete our copy. Deleting the message in Slack removes it there.
  • Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have more rights, including to object to processing or to complain to a data protection authority. We process workspace data to provide the service the workspace asked for. For workspaces in the EU, the workspace is the controller of its members' data and we process it on its behalf.

Security

Everything travels over HTTPS. Slack tokens are encrypted at rest, picture links are long and random, and billing links are signed and expire. Every picture's file is marked as made by AI.

Children

hologram is for workplaces and isn't meant for anyone under 18.

Changes

If we change this page in a way that matters, we'll update the date above and tell workspaces that use hologram before the change takes effect.