Privacy policy
What Beni keeps, where it lives, who helps us run it, and how you delete it. In plain words.
- Who we are
- The short version
- What we collect
- Slack
- Microsoft Teams
- How the AI uses your data
- Where data is stored
- Subprocessors
- How long we keep it
- Deleting your data
- Security
- Your rights
- This website
- Changes and contact
Who we are
Benigo makes Beni, an AI coworker. Beni works inside Slack, inside Microsoft Teams and in our own workspace at app.benigo.com. Benigo is run by knil ltd, Israel ("we", "us").
Contact for anything in this policy: [email protected].
Beni is used by companies. For the messages and files your company puts into Beni, your company decides what happens to them, and we act on its behalf. For our own records, such as who installed Beni and how many credits were used, we decide.
The short version
- Beni reads only conversations it is part of: messages that mention it, threads it takes part in, and direct messages with it.
- In Slack, Beni does not record channels in the background. That setting is off by default.
- Beni remembers things when you ask it to. You can ask it to forget.
- We don't sell your data. We don't show ads. We don't train AI models on your content, and neither does our AI model provider.
- You can ask us to delete your data at any time: [email protected].
What we collect
| What | What it includes | Why |
|---|---|---|
| Messages Beni takes part in | Messages that @mention Beni, messages in threads Beni takes part in, and your direct messages with Beni. Beni keeps the history of these conversations so it can follow them. | To answer you and keep the context. |
| Recent channel context | When you ask Beni something in a channel, it reads the recent messages around your question at that moment, so it understands what you mean. Those messages are kept as part of that conversation's history. | To give an answer that fits the conversation. |
| Channel catch-up summaries | Only when someone presses "Yes, catch up": Beni reads the last 7 days of that channel once and keeps a short summary (decisions, open questions, owners, file names). It does not keep a copy of the messages, and it does not open the files. | So Beni knows what the channel is about. |
| Memories | Facts you ask Beni to remember ("remember that…"). In a direct message they are private to you. In a channel they are team knowledge. | So Beni can use them later. |
| Reminders | The text, time, time zone and repeat schedule of reminders you set, and where to post them. | To post the reminder on time. |
| Files | Files you share with Beni and ask it to work on, and the files Beni makes for you, such as decks, documents and sheets. | To do the work and give you the result. |
| Usage and credits | For each request: who asked, which AI model, how much text was processed (tokens), the cost, the credits used and timings. Not the message text. | To count credits, show admins what was spent, and keep Beni fast. |
| Install records | The Slack workspace's ID and name, the Slack ID of the person who installed Beni, Beni's bot ID, the permissions Slack granted, the time, and the access token Slack gives us. | To run Beni in your workspace. |
| Audit log (app.benigo.com) | Each action Beni takes in an app you connected, each approval or refusal, and each admin change: who, what, when and the result. The action's details are stored only as a fingerprint (hash), not as text. | So admins can check what Beni did. |
| Connected app tokens (app.benigo.com) | The tokens that let Beni use apps you connect, such as your mail or calendar. | To act in those apps when you ask, with the access you chose. |
| Emails to us | Your name, email address and what you wrote. | To answer you and set you up. |
We don't collect your email address or IP address when someone installs Beni in Slack. Our servers keep short access logs, which include IP addresses, for security. They rotate and are overwritten.
Please don't share health data or other sensitive personal data with Beni unless you need to.
Slack
- What Beni can see. Channels it has been invited to, and direct messages with it. It cannot see channels it is not a member of.
- What Beni keeps. The conversations it takes part in, as listed above. Background channel capture, which would record all channel messages into Beni's memory, is off by default in Slack.
- Questions about a channel from a DM. If you ask Beni in a DM about a channel ("what was decided in #standup yesterday?"), Beni first checks that you are a member of that channel. It then reads the channel live and sends you a short answer.
- No training. We never use Slack data to train AI models, ours or anyone else's.
- Slack's rules. We follow the Slack API Terms of Service and the Slack App Developer Policy. We use Slack data only to run Beni for your workspace, and keep only what Beni needs to do that.
- Data we receive but don't use. When Beni looks up who sent a message, Slack also sends profile details such as time zone, title and profile picture. We use only the name and Slack ID. Slack also tells Beni about messages in channels it is in; Beni ignores the ones that are not for it and doesn't keep them.
- Uninstalling. When Beni is removed from your Slack workspace, we delete its Slack token and delete the data we got from Slack within 10 calendar days, which is inside the 14 business days Slack requires.
Microsoft Teams
- Beni sees the chats and channels where it is installed, and the 1:1 chats people have with it. A team owner grants these permissions when adding Beni.
- Office files Beni makes in a 1:1 chat are saved to a "Beni" folder in your own OneDrive. Files it makes in a channel are saved to that channel's Files. From then on they live in your Microsoft 365 account, under your company's settings.
- Catch-up summaries, memories, reminders and usage records work the same way as in Slack.
- We never use Teams data to train AI models.
How the AI uses your data
AI disclosure. Beni is an AI. Its output may be inaccurate, so check anything important. Its answers are written by Claude, from Anthropic, through Anthropic's API. Slack data is never used to train models, ours or anyone else's. We keep data only as long as described below.
- The model. Beni's answers are written by Claude, a model made by Anthropic, used through Anthropic's commercial API. For each request we send Anthropic the text Beni needs: your message, the conversation so far, relevant memories and file contents.
- No training by Anthropic. Anthropic's Commercial Terms say Anthropic may not train models on customer content from its services (terms effective 17 June 2025, checked 21 October 2026). Anthropic deletes API inputs and outputs within 30 days, unless it must keep them longer to enforce its usage policy or by law (Anthropic privacy center, updated 1 July 2026).
- Quick decisions. Before Beni answers, a small decision model called Jev, run by TypeSafe, decides things like "is this message for Beni?" and "does this need the fast or the strong model?". It sees the message and, in a channel, up to the last 12 messages. It cannot write text. TypeSafe says it does not train on what it receives.
- Memory search. In our new engine, the text of memories is turned into numbers (embeddings) by a small model that runs on our own servers, so this step sends nothing to another company.
- No training by us. We don't train or fine-tune AI models on your content.
- Mistakes. AI can be wrong. Beni can write answers, summaries or files that are inaccurate. Check anything important before you rely on it.
- Actions need approval. In app.benigo.com, Beni asks before it writes to a connected app, and every action goes into the audit log.
Where data is stored
- Today's pilot: one server at Hetzner in Helsinki, Finland. It runs Beni for Slack, Beni for Teams and app.benigo.com.
- Our new engine, rolling out: a database and servers at Render in Virginia, United States.
- AI processing: Anthropic and TypeSafe process requests in the United States.
- Planned, not in use yet: isolated computers for file work (decks, documents, browsing) at E2B in the United States.
When personal data from the EU or UK goes to the United States, we rely on the Standard Contractual Clauses (the EU and UK versions) in our agreements with each provider.
Subprocessors
These companies help us run Beni and may process your data for us.
| Company | What they do for us | Data | Location |
|---|---|---|---|
| Anthropic, PBC | AI model (Claude) that writes Beni's answers, summaries and files | The text needed for each request | United States |
| TypeSafe AI, Inc. (Jev) | Quick decisions: whether to reply, which model to use | The message and recent channel messages | United States |
| Hetzner Online GmbH | Hosting for today's pilot server, and its backups | All the data listed above | Helsinki, Finland |
| Render Services, Inc. | Hosting and database for our new engine | All the data listed above, for teams on the new engine | Virginia, United States |
| LiveKit, Inc. | Audio and video for meetings in app.benigo.com | Meeting audio and video, participant names | LiveKit Cloud (region per call) |
| Cloudflare, Inc. | Hosting this website, and our DNS | Website requests (IP address, pages) | Global network |
| FoundryLabs, Inc. (E2B) (planned) | Isolated computers for file work | Files and pages Beni works on | United States |
OpenRouter is used only in our own testing. It does not receive your data.
Slack and Microsoft are not our subprocessors. They are the platforms your company chose, under its own agreement with them.
How long we keep it
| Data | How long |
|---|---|
| Conversations, memories, summaries, reminders, files | While Beni is installed and in use, until you delete them or ask us to. |
| After uninstall, or when your account ends | Tokens: deleted right away. Everything else: deleted within 10 calendar days of uninstall, including data from Slack (Slack allows up to 14 business days). |
| Backups | Our daily backups keep the last 7 days. Deleted data leaves the backups as they roll over. |
| Usage, credit and audit records | Kept for as long as accounting, tax and security rules need, without message content. |
| Emails to us | 24 months after the last message, then deleted. |
| At Anthropic | Up to 30 days, as described above. |
Deleting your data
- Forget something. Tell Beni "forget this" in the thread. Beni removes what it remembered from that thread. The conversation history itself stays until you ask us to delete it.
- Turn memory off for a channel. An admin can turn Beni's memory off for one channel. Beni then saves nothing from it, and stops using what it had. In app.benigo.com this is on the Admin page. In Slack and Teams, write to us and we switch it for you.
- Remove Beni from a channel. Remove it like any member. It stops seeing that channel.
- Uninstall. Remove Beni from your Slack workspace or from Teams. See How long we keep it.
- Ask us. Email [email protected] to see, export, correct or delete your data. Tell us your workspace and what you want. We answer within one month, usually much sooner. If the data belongs to your company's workspace, we may check with your company's admin first.
Security
- Our pages and APIs use HTTPS (TLS) in transit.
- Slack tokens from "Add to Slack", the tokens for apps you connect, and the platform tokens in our new engine are encrypted at rest with AES-256-GCM. The key is kept apart from the data. On today's pilot server, the credentials of the pilot Slack and Teams apps are kept in files that only the server's administrator account can read; they move to the encrypted store with the new engine.
- In our new engine, the database itself keeps each company's data apart (Postgres row-level security). Beni's services connect with a database role that can only see the company of the request it is handling.
- Your DMs go to your own private Beni. Teammates and the team Beni can't read them.
- More detail, with the status of each control: Security.
No system is perfectly secure. If a breach affects your data, we will tell you, and the authorities, as the law requires.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you can ask to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent. You can also complain to your data protection authority. Write to [email protected]. We won't treat you differently for using these rights.
Our legal bases under the GDPR: providing the service your company signed up for (contract), our legitimate interests in running and securing it, and legal duties such as tax records.
We don't make decisions about you with legal or similar effects based only on automated processing. Beni is for businesses and is not meant for children under 16.
This website
- benigo.com uses no cookies, no analytics and no tracking scripts. Your browser keeps only your light or dark theme choice.
- The "Add to Slack" button image is loaded from Slack's servers, so Slack sees that request.
- Cloudflare hosts the site and sees the requests, as any web host does.
Changes and contact
If we change this policy, we post the new version here and update the date. If a change matters, we tell workspace admins before it takes effect.
Questions or requests: [email protected]. knil ltd, Israel. Email is our contact method.
See also: Terms of service, Support, Security.