Clarifying Clay's Data Use and Authorization Scope in Slack Integration

Question about the scope of authorizations provided to Clay in order to integrate with my company's slack instance. My infosec team as questioning whether Clay enriches its own data for its own business purposes once this scope is authorized. My understanding is that this scope is only used to deliver the service (aka have Clay send slack messages), and that Clay does not harvest any data from our Slack instance. Could someone please confirm?