Privacy & Security

Private & Secure – Just as It Should Be. We treat your personal and financial data with the utmost care, just as we’d want ours treated. Here’s how we prioritize your privacy and security:

Access & Control

Secure Access: We only access your data when necessary to provide you with the best service, like when you need support. Aggregated and anonymized data is used for internal analysis only – no surprises.
Bank-Level Security: Your data is encrypted with 256-bit encryption while stored, and we use Transport Layer Security (TLS) to protect it in transit. We do not see or store your bank login credentials; instead, we rely on trusted data aggregators like ThisisBud for open banking connections.

Data Retention

Delete Anytime: Delete your Thrive account whenever you want. We ensure that your financial data is removed from our systems within 60 days, unless required by law.
Subscriptions: Deleting your account and canceling your subscription are separate steps. You can manage your subscription directly from the app settings.

Robust Infrastructure & Security Practices

Built on AWS: Thrive operates on Amazon Web Services (AWS), a provider trusted by financial companies globally, adhering to strict security standards like ISO 27001, SOC, and PCI DSS.
Multi-Factor Authentication (MFA): We enforce MFA on all internal systems and also include MFA support on our company devices to protect your data.
Regular Security Testing: Security isn’t a “set it and forget it” process. Thrive regularly conducts penetration testing to proactively identify and address potential vulnerabilities.

Your Privacy is Our Prority

Your Data Stays Private: We do not sell your data to third parties. What happens in Thrive stays in Thrive.
Transparency Above All Else: Our Privacy Policy outlines every detail of how we manage your data. We keep this page updated, and you can always reach out to us for more information via in-app chat or email.

If you have any questions or concerns, we’re always here to help.