Separated by agency
Form answers, verified contact details, leads, proposals and assistant history belong to the relevant travel agency CRM workspace.
Transparent by design
Exactly what happens to traveller data?
This page brings hosting region, retention, deletion, subprocessors and incident handling together. Travellers remain covered by the agency’s privacy notice and the partner relationship by the BriefSignal DPA.
Configurable retention
Lead retention is configurable per agency from 30 to 3650 days. The default is 730 days.
Automatic permanent deletion
When retention expires, the lead and its related assistant conversations are permanently deleted from the application database.
Deletion and portability
Data-subject deletion or access requests start through the agency’s privacy process. Partners can export CRM data; return or deletion at contract end follows the DPA.
Documented processing framework
The core procurement information is publicly verifiable.
- ✓ Application data: Contabo, Germany / EU
- ✓ DPA and approved subprocessor list
- ✓ Configurable 30–3650 day retention and automated deletion
- ✓ Incident contact: security@brief-signal.com · initial notice aimed within 24 hours
AI data processing
API data is not contributed to model training.
BriefSignal does not enable optional data sharing for model improvement. Separately, the AI provider’s default API controls may retain abuse-monitoring logs for up to 30 days. Zero Data Retention or region-bound AI processing is stated only when the customer and service configuration are eligible.
Last product review: 28 August 2026.