Privacy and data protection
Privacy Policy
We're committed to protecting your privacy and being transparent about how we handle your data. This policy explains how ThriveBase collects, uses, and protects your information.
Information We Collect
Account Information
When you create an account, we collect your name, email address, company name, and basic profile information.
Business Data
We store the contacts, deals, tasks, and other business information you enter into ThriveBase to provide our services.
Usage Data
We collect information about how you use ThriveBase, including features accessed, time spent, and performance metrics.
Technical Data
We automatically collect IP addresses, device information, browser type, and other technical data for security and service improvement.
Communications You Connect
When you link a WhatsApp number by scanning a QR code, ThriveBase receives the chats and messages on that linked device, including your contacts' phone numbers, names and message text, and stores them so they appear in your Inbox and CRM. Photos, documents and voice notes are not stored; only a note that one was received. You can disconnect at any time: disconnecting, or logging the linked device out from your phone, deletes the synced chats from ThriveBase. Leads, contacts, notes and tasks already created in your CRM remain until you delete them.
When you connect Gmail, we read and store the emails needed to show conversations with your CRM contacts and the emails you send from ThriveBase. You can revoke ThriveBase's access to your Google account at any time in your Google account settings or by disconnecting Gmail in ThriveBase.
SMS and calls
SMS messages, call logs and, where you enable them, call recordings and transcripts are processed through our telephony provider and stored with your CRM records.
Notifications
If you allow notifications in the ThriveBase mobile app, we store a push token for your device and send you an alert when a new WhatsApp message arrives. The alert shows the contact's name or number and the start of the message, and is delivered through Expo and Apple's or Google's push services. Signing out removes the device; you can also turn notifications off in your phone's settings. Desktop notifications in your browser are shown by your browser only after you turn them on in the Inbox.
Your responsibility
You are responsible for having a lawful basis to contact the people whose data you bring into ThriveBase, and for following the rules of WhatsApp, Google and your telephony provider.
AI Processing
What AI is used for
ThriveBase uses AI to draft emails, summarise and report on your CRM data, research companies, transcribe calls, and read inbound WhatsApp messages to suggest or create leads, contacts and notes.
Who processes it
The text needed for each request is sent to our AI providers: Google (Gemini), Z.ai (GLM models) as a backup, and OpenAI for call transcription. Each request contains only what that feature needs. Reports use totals from your CRM rather than contact details. We do not use your data to train our own AI models.
Your choice
You can turn off AI processing of WhatsApp messages in the Inbox connection settings. Messages are then still captured, but without AI extraction.
Service Providers and Storage Location
Who helps us run ThriveBase
We use these service providers to run the service: DigitalOcean (application hosting, database, file storage), Vercel (website delivery), Google Firebase (sign-in), Stripe (payments), Twilio (calls and SMS), Resend (account emails), Expo (mobile push notifications), PostHog (product analytics, with personal data masked in session recordings), and the AI providers listed above. Each receives only the data needed for its task.
Where data is stored
Your account and CRM data are stored on DigitalOcean in the United States. Uploaded files and short-lived cached data are stored in Singapore. Some providers may process data in other countries under their own safeguards.
How long we keep data
We keep your data while your account is active. WhatsApp chats are kept until you disconnect WhatsApp, or for a shorter period if your workspace sets one. When you close your account, we delete your workspace data within 30 days, except where the law requires us to keep it, such as billing records. Database backups are kept for 7 days.
How We Use Your Information
How We Protect Your Data
Your Privacy Rights
Questions About Privacy?
If you have questions about this privacy policy or how we handle your data, we're here to help.
Contact us at: support@thrivebase.app