ThriveyyThriveyy

Privacy Policy

Last updated: 13 June 2026

Thriveyy ("Thriveyy", "we", "us", "our") provides a social media management and content scheduling platform available at https://thriveyy.com. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have. It is written to comply with the UK GDPR, the EU GDPR and similar data protection laws, and with the data handling requirements of the social platforms we integrate with, including Meta (Facebook and Instagram), TikTok, LinkedIn, X and Google.

Thriveyy is the data controller for personal data processed about its account holders. For content and audience data accessed from a Connected Platform on behalf of a customer, Thriveyy generally acts as a data processor.

Thriveyy is the trading name of Thriveyy Ltd, a company registered in England and Wales under company number 17282975, with its registered office at Ground Floor, 5 North Court, Armstrong Road, Maidstone, England, ME15 6JZ.

1. Information We Collect

We collect the following categories of information:

  • Name – first and last name supplied at sign-up or in your profile.
  • Email address – used for account authentication, service communications and support.
  • Account information – password (stored hashed), profile preferences, workspace and team membership, role assignments.
  • Billing information – subscription plan, billing address, VAT details and transaction history. Card and payment instrument data is collected and processed directly by our payment provider; we do not store full card numbers.
  • Connected social media account data – account identifiers, profile and page names, OAuth access and refresh tokens, page and account permissions, and metadata required to publish and analyse content on your behalf.
  • Content created, uploaded or scheduled – captions, images, video, audio, hashtags, prompts, drafts, scheduled posts and posting history.
  • Analytics and usage data – pages visited, features used, scheduling activity, errors encountered, and engagement metrics returned by Connected Platforms.
  • Device and browser information – IP address, browser type and version, operating system, device identifiers, language and time zone.

2. Social Media Integrations

When you connect a third-party platform, Thriveyy accesses only the data necessary to provide publishing, scheduling, analytics and account management functionality. We do not request permissions beyond what the Service requires, and we do not sell, rent or use Connected Platform data for independent advertising.

Facebook Pages (Meta)

  • Page identifiers, names and profile pictures of Pages you administer;
  • Page access tokens for the Pages you authorise;
  • Permission to create, schedule, publish and manage posts on those Pages;
  • Public engagement metrics (impressions, reach, likes, comments) for posts published through Thriveyy.

Instagram Business Accounts (Meta)

  • Linked Instagram Business or Creator account identifier, username and profile picture;
  • Permission to publish images, videos, carousels, Reels and Stories on your behalf;
  • Engagement and insights data for content published through Thriveyy;
  • Account metadata required to maintain the connection (token validity, account status).

LinkedIn Profiles and Pages

  • Basic profile information (name, profile picture, member identifier);
  • Email address associated with your LinkedIn account, where granted;
  • Organisations and Company Pages you are authorised to administer;
  • Permission to publish, schedule and manage posts on your personal profile and authorised Pages;
  • Engagement metrics for content published through Thriveyy.

TikTok Accounts

  • Basic profile information (open ID, username, display name, avatar);
  • Permission to upload and publish videos and content where authorised;
  • Publishing status and basic post-level metrics for content published through Thriveyy.

X (Twitter) Accounts

  • Account identifier, handle and profile information;
  • Permission to publish, schedule and manage posts on your behalf;
  • Public engagement metrics for content published through Thriveyy.

OAuth tokens are stored securely on our servers, encrypted at rest, and are only used to perform actions you have authorised. You can revoke Thriveyy's access at any time from within Thriveyy or from the settings of the relevant Connected Platform.

3. How We Use Data

We use personal data to:

  • Provide the Service – operate, maintain and deliver Thriveyy's features to you;
  • Authenticate users – verify identity, manage sessions and secure your account;
  • Publish scheduled content – execute scheduled posts to Connected Platforms on your behalf;
  • Generate AI content – process your prompts and inputs to produce text, captions and images;
  • Improve platform functionality – understand how the Service is used, debug issues and develop new features;
  • Customer support – respond to enquiries and resolve incidents;
  • Security and fraud prevention – detect, investigate and prevent abuse, fraud and security incidents;
  • Legal compliance – comply with applicable laws, regulations and lawful requests.

Our lawful bases under UK and EU GDPR are: performance of a contract (delivering the Service), legitimate interests (security, product improvement, service communications), consent (where required, for example for certain cookies and marketing), and legal obligation (tax, accounting, lawful requests).

4. AI Services

Thriveyy uses third-party artificial intelligence providers to power content and image generation features. When you use these features, your prompts, business information, brand context and uploaded content may be transmitted to and processed by these providers solely to generate the requested output. We use providers that contractually undertake not to use customer inputs to train their general-purpose models, where this option is offered. AI-generated output may be inaccurate; you are responsible for reviewing it before publishing.

5. Data Sharing

We do not sell personal data. We share data only as described below:

  • Essential service providers – cloud hosting, database, authentication, email delivery, customer support, analytics, payment processing and AI providers acting as our sub-processors under contractual data protection terms;
  • Connected Platforms – when you publish or schedule content, that content (and the metadata required to publish it) is transmitted to the relevant Connected Platform at your direction;
  • Legal and safety – where required by law, court order or regulatory request, or to protect the rights, property or safety of Thriveyy, our users or others;
  • Business transfers – in connection with a merger, acquisition or sale of assets, subject to standard confidentiality protections.

6. Security

We apply appropriate technical and organisational measures to protect personal data, including: encryption of data in transit (TLS) and of sensitive credentials at rest, role-based access controls, principle-of-least-privilege for staff access, secure authentication (including support for OAuth and password hashing), continuous monitoring, audit logging, automated backups and regular security reviews. No system is perfectly secure; you are responsible for keeping your account credentials confidential.

7. Your Rights

Subject to applicable law, including the UK GDPR and EU GDPR, you have the right to:

  • Access – request a copy of the personal data we hold about you;
  • Correction – request that inaccurate or incomplete data be corrected;
  • Deletion – request deletion of your personal data ("right to be forgotten");
  • Restriction – request that we restrict processing in certain circumstances;
  • Portability – receive your data in a structured, commonly used, machine-readable format;
  • Objection – object to processing based on our legitimate interests, including for direct marketing;
  • Withdraw consent – where processing is based on consent, withdraw it at any time;
  • Lodge a complaint – with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

To exercise any of these rights, contact us at hello@thriveyy.com.

8. Data Retention

We retain personal data only for as long as necessary to provide the Service and for the legitimate purposes described in this Policy. In general:

  • Account and profile data – for the lifetime of your account;
  • Content, scheduled posts and posting history – for the lifetime of your account, or until you delete it from within the Service;
  • OAuth tokens for Connected Platforms – until you disconnect the platform or revoke access;
  • Billing and transaction records – for the period required by tax and accounting law (typically six years in the UK);
  • Support and security logs – typically up to twenty-four (24) months.

When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where retention is required by law or necessary to resolve disputes, enforce agreements or prevent fraud.

9. Cookies

We use cookies and similar technologies for the following purposes:

  • Authentication cookies – to keep you signed in and secure your session;
  • Performance cookies – to remember preferences and improve loading times;
  • Analytics cookies – to understand how the Service is used so we can improve it.

You can control cookies through your browser settings. Disabling some cookies, in particular authentication cookies, may prevent the Service from functioning correctly.

10. International Transfers

Thriveyy and its service providers may process personal data in countries outside the United Kingdom and European Economic Area, including the United States. Where data is transferred internationally, we implement appropriate safeguards as required by UK and EU GDPR, including the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, the UK Addendum and reliance on adequacy decisions where available. Additional technical and organisational measures are applied as needed.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top reflects the most recent version.

13. Contact Information

For any privacy-related question or request, contact us at hello@thriveyy.com or visit https://thriveyy.com.