If you use Glean through your job, your employer is legally responsible for your data, not Glean. To ask questions about your data or request deletion, you need to go through your employer.
This analysis describes what Glean's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause determines where your privacy rights can actually be exercised. Employees cannot bypass their employer to make data requests directly to Glean, which may create practical barriers.
Interpretive note: The exact verbatim text of this provision could not be confirmed from the truncated HTML; the excerpt represents the policy's substantive position as discernible from the document context and standard Glean DPA disclosures.
Employees using Glean at work cannot directly request access to or deletion of their workplace data from Glean; they must go through their employer, who controls what the data is used for and how long it is kept.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"When Glean provides services to an enterprise customer, we process personal data on behalf of that customer. In this context, the enterprise customer is the data controller and Glean acts as a data processor. If you are an employee or authorized user of one of our enterprise customers and have questions about how your personal data is handled, please contact your employer or the organization that provided you access to Glean.Excerpt from Glean's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implements the GDPR Article 4 and Article 28 controller/processor framework.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause determines where your privacy rights can actually be exercised. Employees cannot bypass their employer to make data requests directly to Glean, which may create practical barriers.
Employees using Glean at work cannot directly request access to or deletion of their workplace data from Glean; they must go through their employer, who controls what the data is used for and how long it is kept.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Glean.