Your data, on your terms.
This policy explains what we collect, why we collect it, and how you stay in control. We keep the minimum needed to run your account, and nothing more.
Last updated May 2026
What we collect
We collect the account details you provide when you sign up, such as your name and email, and the content you choose to publish. For each site we store its title, visibility, allowlist, and the access log. We also keep basic technical records needed to operate the service securely.
How we use it
We use your data to run your account, render your sites to verified viewers, maintain the access log, and keep the service secure. We use it to respond when you contact us. We do not sell your data, and we do not use the contents of your sites for advertising.
How we protect it
Site bundles live in private storage and are encrypted at rest. Traffic is encrypted in transit. Private sites render only after a viewer is verified, and the browser is never handed a direct or presigned storage link. Each site runs in an isolated sandbox.
Viewer information
When someone opens a private site, we verify their email and record the access so the site owner can see who viewed it and when. We use this only to enforce access and to power the owner's access log.
Data retention and deletion
You can delete a site and its access history at any time from your dashboard. When you delete a site, we remove its bundle from storage. If you close your account, we delete the data associated with it, except where we must keep records to meet a legal obligation.
Your rights
You can access, correct, export, or delete your personal data. To make a request, or if you have any question about this policy, email privacy@thryvate.com.
Changes to this policy
If we make material changes, we will update the date above and, where appropriate, let you know directly. Continued use of Thryvate after a change means you accept the updated policy.