Documentation
Browse documentation

Privacy and security

Updated 2 min read

Bot scopes only

Thorpe asks for bot scopes only. It never asks for user or admin scopes, and it joins only the public channels an admin picks.

What Thorpe stores

  • Messages from the channels you mark as customer channels, replies in the threads under Thorpe's cards in the triage channel, and direct messages sent to Thorpe, when private requests are turned on.
  • Nothing from other channels, from the rest of the triage channel, or from direct messages while private requests are off. For those, Thorpe keeps only Slack's event ID, so it can recognise Slack's retries.
  • An event that fails processing after retries is kept whole, from whichever channel it came, so it can be replayed. It stays until we purge it.
  • Files stay in Slack. Thorpe keeps a link, not a copy.
  • Slack tokens are encrypted and never logged.
  • Each workspace's data is kept separate, on Cloudflare.
  • Uninstall deletes tokens at once and message content within 30 days.

Waitlist

When you join the waitlist on usethorpe.com, Thorpe stores your email address and, if you give them, your name, company, the tool you use today and how many customer channels you have, with the time you signed up. We use them only to email you about setting up Thorpe. Send a note to hello@usethorpe.com and we remove them.

How Thorpe uses AI

  • AI is off until an admin turns it on in Settings > AI, under "Smarter request detection".
  • When it is on, it titles new customer messages, sorts them into requests and chatter, and writes short summaries for escalated issues.
  • With AI off, every top-level customer message opens a request and nothing is sent to a model.
  • Suggested replies are coming, and only the request's owner will see them.
  • Thorpe never sends AI-written text to a customer. A teammate sends every reply.
  • The model provider is Cloudflare Workers AI, in the same Cloudflare account as the rest of Thorpe. We will state its retention and training terms here once we have confirmed them.

What's next