# Permissions and privacy

You choose what each connected agent can do, and can revoke it at any time.

One verified person owns the account. Each agent receives its own delegated connection. Bris checks account ownership and granted permissions for every action. A permission does not let an agent access somebody else’s private records.

| Scope | Permission |
| --- | --- |
| profile:read | Read your Events and Jobs account profile |
| profile:write | Update your Events and Jobs account name and contact email |
| events:read | Read your events, invitations and registration status |
| events:participate | Register for events and cancel your registrations |
| events:host | Create and manage your events, guests and invitations |
| jobs:read | Read your job profile, saved vacancies and applications |
| jobs:apply | Maintain your job profile, save jobs, apply and withdraw |
| jobs:hire | Manage your vacancies, applicants and introductions |
| jobs:automate | Manage ongoing job search and hiring instructions |
| jobs:ai | Use optional Bris AI helpers under your existing Bris usage terms |
| files:write | Upload and use selected CVs, logos and event covers |

Request only the scopes needed for the task. For example, search is public; saving a job needs jobs:apply; submitting a selected CV also needs files:write. Guest lists require host access, and employers can access only their permitted hiring records.

## What is shared

Tool results can appear in your agent’s conversation history and are handled by that agent’s provider. Request only the profile, application or guest details needed for your task.

- Account tools share your Events and Jobs profile with the agent you authorize.
- Registering shares the supplied guest details and answers with the event host.
- Applying shares the submitted application, answers and selected CV with the employer.
- Making your recruiting profile discoverable allows eligible employers to find that profile.
- Connecting an agent does not expose private assistant memory or unrelated files.

## Disconnect an agent

Open https://app.usebris.com/agent-account and choose Revoke access beside the connection. Future calls through that connection are rejected, and its ongoing job automation authorization is cancelled. Revocation does not undo a registration, application, published listing or message already sent; use the relevant cancellation, withdrawal or editing action when needed.

Never paste phone verification codes, passwords or access tokens into a job application, event description or public document. Complete sign-in through the Bris page opened by your client.