GDPR & Compliance
How ThriveDesk handles your customers' data, and where we stand on GDPR.
- Data requests Ask for a copy of your data, or have it corrected or deleted.
- Data Processing Agreement The DPA we sign with customers, and how to get a copy.
- Subprocessors The companies that help us run ThriveDesk, and where they are.
- Security Encryption, access controls and how we protect your data.
- Data breaches How we respond to a breach and when we tell you.
Checklist
Where we stand on GDPR
What we've done for each part of GDPR, and what we haven't yet. Open any item to see the details.
Lawful basis and transparency
3 of 3 doneCustomer conversations and AI
5 of 5 doneData security
5 of 5 doneAccountability and governance
1 of 3 doneData protection contact
For GDPR questions or a signed DPA, contact Parvez Akther, Managing Director.
- parvez@thrivedesk.com
- Phone
- +1 929 633 7144
- Data requests
- help@thrivedesk.com
Is ThriveDesk GDPR compliant?
Yes. We follow the GDPR as a processor for your customers' data and as a controller for your account data. The checklist on this page shows where we stand on each item, including the two that aren't finished.
Is ThriveDesk a controller or a processor?
Both, for different data. For the conversations and contacts in your account, you are the controller and we are your processor. For your own account and billing details, we are the controller.
Where is my data stored?
All ThriveDesk servers are in the United States. Each service that handles data, and where it is based, is listed on our Subprocessors page.
Do you sign a Data Processing Agreement?
Yes. Read the DPA on this site, then email parvez@thrivedesk.com for a signed copy.
How long do you keep conversation data?
Up to five years while your account is active, unless you delete it sooner. After an account closes, we keep its data for 30 days so it can be exported, then delete it. Backups clear within 60 days.
Can I delete all the data about one of my customers?
Yes. Find the person by email, delete their conversations and then their contact record. If anything is left that you cannot delete yourself, email us and we will remove it.
Does Neo train AI models on my conversations?
No. Neo looks up the sources you choose at the moment it answers, and we do not train or fine-tune AI models on your conversations. The AI providers we use are listed as subprocessors.
What happens if there is a data breach?
We contain it, investigate it and tell affected customers without undue delay, with updates as we learn more. The full process is on our Data breaches page.
Who can see my data at ThriveDesk?
Only team members whose role needs it, and only when a support request or an incident requires it. Access is controlled by permission levels.
