Privacy and data requests

#Consent

Compass records consent per channel (WhatsApp, calls, call recording and email) with where and when it was given. Website forms can capture it at the moment of enquiry. Messages and automations check it before sending, and a person marked do not contact gets nothing automated.

#When a person asks for their data

An administrator opens the person and chooses Export data. Compass collects everything it holds about them, across every linked record and file, as a download. The export itself is recorded in the audit log.

#When a person asks to be forgotten

Erase person takes two steps: give a reason, then type ERASE within 24 hours to confirm. Compass then:

• removes their personal details from the record, the timeline and the audit history;
• deletes their stored files, such as recordings and documents;
• keeps payments, receipts and consent records, which are legal records, without the personal details.

#Retention

• Call audio is deleted six months after the call.
• Deleted records and files are removed for good after a period your workspace sets: 180 days by default, anywhere from 30 days to 10 years.