Hi @Oleg Vaskevich thanks for the question! The bot uses file access to support Review-in-Slack — more specifically, it will only read files that it uploads in order to render formatted diff chunks that you can then review inline (see attached screenshot for an example). Unfortunately this is the most granular way for Graphite to access those files using Slack’s permissions.
That said, Graphite directly DMs notifications to users so it does not need to be added to any additional channels and does not have access to any files other than its own. We take privacy seriously and hope that works for you and your team!