Thrive now gives you the tools to support your compliance with GDPR and other data-privacy regulations - capturing consent, fulfilling data-access requests, and handling deletion, all from within the platform. Consent requests are triggered right from a person's profile, and their response is logged automatically. Data-access and deletion requests move through dedicated review queues in a new Data & Privacy admin section, and nothing is ever deleted automatically - every request is reviewed by a person before it's fulfilled.
Consent - Request a person's consent directly from the Data & Privacy section on their profile. An email is sent, their status updates automatically based on their response, and they can withdraw consent at any time - all of it tracked on their profile.
Data access requests (DSAR) - Log a request on the new DSAR Requests page, download what Thrive holds on that person, review and redact it, and send the cleaned export back to them — all from one place, with aging indicators so nothing sits too long.
Deletion - When someone withdraws or declines consent, they land on a Pending Deletions queue for review. You can also manually revoke consent from a person's profile if they reach out directly, putting them into the same queue. From the queue, you can permanently erase their data, with a compliance-ready record kept of the request and the action taken.
For admins - A new "Manage data privacy" permission controls who can access the DSAR and deletion queues, separate from who can request consent (available to all internal users).
