Privacy Policy

Thryvest, LLC ("Thryvest," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at thryvest.com and our personal finance application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly:

• Account registration information including your name, email address, and password
• Profile preferences such as your financial goals, buffer amount, and notification settings
• Communications you send us including support requests and feedback

Financial information collected via Plaid:

Thryvest uses Plaid Technologies, Inc. ("Plaid") to connect to your financial institutions. When you connect your bank accounts, we receive through Plaid:

• Account balances and account numbers
• Transaction history (up to 24 months)
• Account and routing numbers for linked accounts
• Institution name and account type

Your use of Plaid is subject to Plaid's Privacy Policy available at plaid.com/legal.

Automatically collected information:

• Log data including IP address, browser type, pages visited, and time spent
• Device information including hardware model and operating system
• Usage data about how you interact with the Service

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Thryvest Service
• Analyze your financial accounts and identify opportunities to optimize your savings and debt payoff
• Calculate and display your Thryvest Score and financial health metrics
• Send you transactional emails including welcome messages and activity summaries
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraudulent or unauthorized activity

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the Service, including Supabase (database and authentication), Netlify (hosting), Stripe (payments), Plaid (bank connections), and Resend (email delivery). These providers are contractually obligated to protect your information.
• Legal requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights or the safety of others.
• Business transfers: If Thryvest is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• All data stored in our database is encrypted at rest using AES-256 encryption via Supabase
• Access to production systems is restricted and protected by authentication controls
• We use Plaid's secure infrastructure for all bank connections — we never receive or store your bank login credentials

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Financial transaction data retrieved from Plaid is retained for as long as necessary to provide the Service features, including trend analysis and historical reporting.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information
• Portability: Request a machine-readable copy of your data
• Opt-out: Opt out of non-essential communications at any time

To exercise any of these rights, please contact us at support@thryvest.com.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

To submit a CCPA request, contact us at support@thryvest.com.

8. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@thryvest.com.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us