Privacy policy

Last Updated December 10, 2018

Thrive Financial Inc. (“Thrive,” “we,” “us” and/or “our”) is dedicated to protecting your personal information and informing you about how we use it. This privacy policy (the “Privacy Policy” or the “Policy”) is intended to provide information to our visitors and users (“you” or “your”) about how we collect, protect, share and use your information when you use the Thrive website, www.thrivecash.com, including any subdomain thereof (the “Website”), the Thrive mobile application (the “App”) and/or products and services offered, operated or made available by Thrive (the Website, App and products and services of Thrive are collectively referred to as the “Services”. Reference to the Services includes any portion of the Services). Any capitalized term that is not defined in this Privacy Policy shall have the meaning given to it in the Terms of Use. This Privacy Policy outlines how and when Thrive collects, protects, shares, and uses information that can identify you individually (“Personal Information”), such as your name, email or telephone number. Personal Information does not include information that is anonymous, aggregated, or can no longer be used to identify you as an individual.

This Privacy Policy covers the privacy practices of Thrive only. This Policy does not apply to the practices of third party websites, services or applications, including third parties with which we partner. These third party services are governed by each such third party’s privacy policy. Thrive is not responsible for the privacy policies and practices of websites other than that of Thrive, and Thrive is not responsible for the failure of unaffiliated third parties to honor their privacy obligations.

We may amend this Privacy Policy at any time by posting a revised version on our Website and the App. We will attempt to give a reasonable notice period upon making any changes; however, unless otherwise stated, the revised version will be effective at the time we post it.

  1. Information We Collect

    1. Information you provide

      In general, you may visit the Website without telling us who you are or sharing any Personal Information with us. When you register for an account with Thrive (a “Thrive Account”), apply for a loan, or use other aspects of the Services, or communicate with us, we may ask you to provide certain Personal Information, such as your name, address, email address, telephone number, or social security number. We may also collect financial information such as your income, account balance, payment history, credit history, or credit scores.

      Any Personal Information that you provide is available to us and may be available to third-party service providers involved in the operation of the Services. Although we contractually require our third-party service providers to protect your Personal Information, please note that we do not own or control such providers and cannot guarantee their compliance.

    2. Information we collect automatically

      1. Usage Information. Thrive may use a variety of technologies that passively or automatically collect information about how the Services are accessed and used, including your browser type, device type and manufacturer, operating system, application version, the pages served to you, the time you browse, preceding page views, and your use of particular features of the Services. This statistical data helps us understand what is interesting and relevant to users of the Services so that we can best tailor our content to you.
      2. Device Identifiers. Thrive also automatically collects an IP address or other unique identifier, mobile carrier, and mobile phone number, for the computer, mobile telephone, tablet or other device (collectively “Mobile Device”) you use to access the Services. A “Device Identifier” is a number that is automatically assigned to your Mobile Device when you access a web site or its servers, and our computers identify your Mobile Device by its Device Identifier. We may use a Device Identifier to, among other things, administer the Services, help diagnose problems with our servers, analyze trends, track users’ web page movements, and gather broad demographic information for aggregate use.
      3. Session Trackers. In operating the Services, we may use cookies, pixel tags, other local shared objects and similar session tracking technologies (“Session Trackers”). Session Trackers help provide additional functionality to the Services, customize users’ experiences with the Services and help us analyze Services’ usage more accurately for research and product development purposes. We (including third parties that we work with) may place session trackers on your Mobile Device for security purposes, to facilitate navigation of the Services, and to personalize your experience while using our Services.

        If you would prefer not to accept Session Trackers when using the Services, follow the instructions provided by your website or mobile browser (usually located within the “Help”, “Tools” or “Edit” facility) to modify your Session Tracker settings. Please note that if you disable Session Trackers, you may not be able to access certain parts of our Services and/or the Services may not work properly. As a result, we recommend that you leave Session Trackers turned on when accessing the Services because they allow you to take advantage of some of the Services’ features.
      4. Web Beacons. In addition to Session Trackers, we may use web beacons (also known as “clear GIFs”), which are transparent graphic images placed on a web page or in an email and indicate that a page or email has been viewed or tell your browser to get content from another server. We use web beacons to measure traffic to or from, or use of, our online forms, tools or content items and related browsing behavior and to improve your experience when using the Services. We may also use customized links or other similar technologies to track hyperlinks that you click and associate that information with your Personal Information in order to provide you with more focused communications
    3. Non-personal information

      Additionally, we may modify and combine Personal Information in a manner that does not personally identify you or any other individual and thus, no longer constitutes Personal Information. We may use this non-Personal Information, such as aggregate user statistics, demographic information, and usage information, for any lawful purpose.

    4. Information from third parties

      We may receive information about you from third parties, such as your financial institutions. In addition, we may receive information about you from outside records of third parties, such as credit bureaus. If you apply for a loan from Thrive, we will collect information, which may include your credit history and credit scores, from credit bureaus and other partners to determine your creditworthiness and to assess risks related to your potential loan. In addition, we may work with a third party, such as Plaid, to access and collect such data on our behalf. By providing your information to the third party, you acknowledge and agree that information accessed, collected, or transmitted by the third party for this purpose will be governed by the privacy policy of the third party. Plaid’s privacy policy is available at https://plaid.com/legal. We may supplement the information we collect about you through the Services with such information from third parties in order to enhance our ability to serve you, to tailor our content to you and/or to offer you opportunities to purchase products or services that we believe may be of interest to you. If we combine such data with information we collect through the Services, such information is subject to this Privacy Policy unless we have disclosed otherwise.

  2. How We Use Information

    1. We may use the information we collect for a variety of reasons related to our operation and your use of the Services. Thrive may use your personal information to facilitate activities and transactions that need to occur during the lending process. Examples of specific ways in which Thrive may use your Personal Information include, but are not limited to the following:
      1. To establish that you are over the age of 18;
      2. To verify your identity and guard against potential fraud;
      3. To pull a credit report from a credit bureau, such as Experian, to help determine your creditworthiness;
      4. To determine your eligibility for a loan from Thrive;
      5. To enable our financial services partners to implement automatic payments and fund transfers;
      6. To contact you if there is a problem completing a transaction you requested or to discuss a problem with your Thrive Account;
      7. To implement collection activities as needed; and/or
      8. To maintain regular communications with you concerning transactions you initiate, including but not limited to requesting information or assistance, submitting a loan request, and making payments.
    2. More generally, we may use Personal Information that we collect from you or that you provide to us:
      1. To provide, maintain, protect and improve our services, to develop new ones, and to protect Thrive and our users;
      2. To notify you about changes to the Services;
      3. To keep a record of your communication to help solve any issues you might be facing;
      4. For our marketing purposes to offer our products and services to you, such as advertisements, by us through third parties;
      5. To offer you tailored content giving you more relevant search results and ads;
      6. To enforce or apply our Terms of Use, Borrower Agreement, and any other agreements between you and Thrive, including for purposes of billing and collection;
      7. To fulfill any other purpose for which you provide it or otherwise give your consent; and/or
      8. To comply with any court order, law, or legal process, including retaining Personal Information or responding to any government or regulatory request.
    3. Email Communications. We may use your Personal Information to provide you with marketing or other promotional communications via mail or email. If, at any time, you would like to stop receiving these promotional e-mails, you may follow the opt-out instructions contained in any such e-mail or by contacting us as set out below. Please note that by opting out, you may prohibit Thrive from informing you of offerings that may be of interest to you. It may take up to ten (10) business days for us to process opt-out requests. You will continue to receive non-promotional emails about your relationship with us.
  3. Disclosure of Personal Information

    Except as provided herein, Thrive will not sell, rent or otherwise disclose Personal Information about you to third parties.

    1. Third-party advertisers and interest-based Advertising

      1. Interest Based Advertising. We may share, or we may permit third-party online advertising networks, social media companies and other third-party services, to collect, information about your use of our Website or the App over time so that they may play or display ads on our Website, the App or the Services, on other devices you may use, and on other websites, apps or services. Typically, though not always, the information we share is provided through cookies or similar tracking technologies, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the Website and other information. We and our third-party partners may combine this information with information collected offline or from other sources. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research.
      2. Social Media Widgets and Advertising
        1. Our Services may include social media features, such as the Facebook Like button, Google Plus, Twitter or other widgets. These social media companies may recognize you and collect information about your visit to our Services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.
        2. We display targeted advertising to you through social media platforms, such as Facebook, Twitter, Google+ and others. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our Services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. These advertisements are governed by the privacy policies of those social media companies that provide them.
      3. Cross-Device Linking. We, or our third-party partners, may link your various devices so that content you see on one device can result in relevant advertising on another device. We do this by collecting information about each device you use when you are logged in to our Services. We may also work with third-party partners who employ tracking technologies, or the application of statistical modeling tools, to determine if two or more devices are linked to a single user or household. We may share a common account identifier (such as an email address or user ID) with third-party advertising partners to help recognize you across devices. We, and our partners, can use this cross-device linkage to serve interest-based advertising and other personalized content to you across your devices, to perform analytics and to measure the performance of our advertising campaigns.
    2. Your choices

      1. Interest-based advertising. To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative (NAI) online resources, at networkadvertising.org/choices, and/or the Digital Advertising Alliance (DAA) resources at aboutads.info/choices.
      2. Cross-device linking. Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use.
      3. Mobile advertising. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android). You may also be able to opt-out of some – but not all – interest-based ads served by mobile ad networks by visiting youradchoices.com/appchoices and downloading the mobile AppChoices app.
      4. Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.
    3. Google Analytics and Advertising

      1. We use Google Analytics to recognize you and link the devices you use when you visit our Website or the Services on your browser or mobile device, login to your account on our Services, or otherwise engage with us. We may share a unique identifier, like a user ID or hashed email address, with Google to facilitate the Services. Google Analytics allows us to better understand how our users interact with our Service and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s site “How Google uses data when you use our partners’ sites or apps” located at google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here https://tools.google.com/dlpage/gaoptout/.
      2. We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the Doubleclick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Services. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at google.com/ads/preferences or by vising NAI’s online resources at networkadvertising.org/choices.
    4. Third party partners and service providers

      We may share your Personal Information with unaffiliated, third parties that provide certain services on our behalf, including, but not limited to data storage, analytics, platform administration, identity verification, credit bureaus, collection agencies, loan servicers, payment processing, and/or other services. These third parties may have access to Personal Information or non-Personal Information in order to perform their functions on our behalf. However, these third parties are only permitted to use your Personal Information for the purpose for which it has been provided or to administer, service or process transactions that you have authorized, and may not disclose it to any other third party except at our express direction and in accordance with this Policy.

    5. Business transfers

      As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or our assets, Personal Information collected through the Services may be disclosed to such entity as one of the transferred assets. Also if any bankruptcy or reorganization proceeding is brought by or against us, all such information may be considered an asset of ours and as such may be sold or transferred to third parties.

    6. Legal disclosures

      Thrive may transfer and disclose information, including your Personal Information, information about how the Services are accessed and used, to third parties to comply with a legal obligation; when we believe in good faith that the law requires it; at the request of governmental authorities conducting an investigation; to verify or enforce our Terms of Use or other applicable policies; to respond to an emergency; or otherwise to protect the rights, property, safety or security of third parties, users of the Services or the public.

    7. For everyday business purposes

      We may share your Personal Information for our everyday business purposes, such as to process transactions, maintain accounts, or as otherwise permitted by law.

    8. With your permission

      At your direction or request, we may share your Personal Information with specified third parties.

  4. Updating Your Personal Information and Information Retention

    1. If you wish to modify, verify, correct, or update any of your Personal Information collected through the Services, you may do so by logging into your Thrive Account and updating your Thrive Account dashboard at any time or by emailing us at support@thrive.cash. Some information regarding your loan application cannot be changed due to laws or legal requirements, and in those cases we may not be able to accommodate your request. Please note that Thrive may continue to use your de-identified data after you delete any of your Personal Information.
    2. In accordance with our routine record keeping, we may delete certain records that contain Personal Information you have submitted through the Services. We are under no obligation to store such Personal Information indefinitely and disclaim any liability arising out of, or related to, the destruction of such Personal Information. In addition, you should be aware that it is not always possible to completely remove or delete all of your information from our databases without some residual data remaining because of backups and other reasons.
    3. We will retain your Personal Information as long as needed to provide you services, comply with our legal obligations, resolve disputes, or enforce our agreements.
  5. Security of your Personal Information

    1. Thrive has, and requires third-party service providers that may have access to Personal Information to have, administrative, technical, and physical safeguards in place in our respective physical facilities and in our respective computer systems, databases, and communications networks that are reasonably designed to protect information contained within such systems from loss, misuse, and alteration. The measures we use may include:
      1. Protecting Account Numbers: After you have entered your account numbers, we will never display your account number on our App or Services.
      2. Secure, Off-Site Hosting: We store your personal and sensitive financial data such as Social Security numbers and bank account information in a virtual private cloud hosted by Amazon Web Services.
      3. Defining Service Access points: Personal Information can only be read or written through defined service access points, the use of which is password-protected and limited to only those employees or third parties who have a need to know.
      4. Enabling Secure Socket Layer (“SSL”) certificate technology: We equip our servers with SSL certificate technology to provide a safe and secure channel to visit the Thrive Website.
      5. Ensuring data encryption: SSL also ensures that all data entered into the Website or App is encrypted. For further encryption protection, we require a 128-bit secure browser for logins and transactions.
    2. No method of electronic transmission or storage is 100% secure. Therefore, we cannot guarantee absolute security of your Personal Information. You also play a role in protecting your Personal Information. Please safeguard your username and password for your Thrive Account and do not share them with others. If we receive instructions using your Thrive Account log-in information, we will consider that you have authorized the instructions. You agree to notify us immediately of any unauthorized use of your Thrive Account or any other breach of security related to the Website or the Services. We reserve the right, in our sole discretion, to refuse to provide the Services, terminate your Thrive Account, and to remove or edit content.
  6. Do-Not-Track Settings

    Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties. We do not use technology that recognizes DNT signals from your web browser.

  7. Children Under 13

    Neither the Website, the App, nor the Services are directed to children under 13 years of age and we do not knowingly collect Personal Information from children under 13. If we become aware that a child under 13 has provided us with Personal Information, we will make reasonable efforts to delete such information from our files.

  8. Consent to Processing and Transfer of Information

    The Services are governed by and operated in, and in accordance with the laws of, the United States, and are intended for the enjoyment of residents of the United States. If you use the Website or the Services, or otherwise provide us with data, from outside the United States, you acknowledge and agree that your Personal Information may be transmitted outside your resident jurisdiction. In particular, please note that your Personal Information may be stored and processed in the United States. The laws pertaining to the collection, use, disclosure and protection of Personal Information in the United States may be more or less stringent than the laws of other countries. By using the Website or the Services, you (a) acknowledge that the Website and the Services are subject to the laws of the United States; (b) consent to your Personal Information being stored and processed in the United States and handled as described in this Policy; and (c) waive any claims that may arise under the laws of the country where you reside, are a citizen, and/or from where you access the Website or the Services.

  9. Changes to this Policy

    This Policy is the sole authorized statement of Thrive’s practices with respect to the collection of Personal Information and the subsequent use and disclosure of such information. Thrive may revise this Policy from time to time without prior notice to you, and any changes will be effective immediately upon the posting of the revised Privacy Policy on the Website and the App. You should bookmark and periodically review this page to ensure that you are familiar with the most current version of this Policy. You can determine when this Policy was last revised by checking the Last Updated" legend at the top of the Policy.

  10. Questions About This Privacy Policy

    If you have any questions or concerns about this Policy, please contact us at:

    Thrive Financial Inc.
    276 Shipley Street
    San Francisco, CA, 94107

    Email: support@thrivenow.com
    Telephone: 650-422-2612