Contents

Privacy and compliance

Track marketing and profiling consents, handle requests from people exercising their privacy rights, and set how long Brain keeps personal data.

Brain holds personal data about the people you work with, so it gives you three tools to handle that data the way the GDPR expects. Each covers a different moment in the life of a contact.

  • Consents: every contact has a consent history for marketing and profiling, with the legal basis and origin of each change. Newsletter subscriptions from connected tools are recorded on their own.
  • Privacy requests: when someone asks to see, correct, move or erase their data, or to stop receiving marketing, you open a request under Compliance and follow it to the end, with its deadline, guided actions and a full log.
  • Data retention: rules in Brain's settings decide how long job applications are kept and when leads nobody worked on are archived. Brain applies them every night.

The three work together. Unsubscribing a person from a privacy request writes a withdrawal into their consent history; erasing them follows the same rules as retention, and keeps what the law requires you to keep.

Note
Privacy requests need the permission to manage privacy requests, which by default only Owners and Admins have. Without it, Compliance doesn't appear in the sidebar. See Users and roles.

In this section