Effective May 8, 2026
This European Regional Privacy Notice (this “Notice”) supplements Thrivania's Privacy Policy and contains additional information for Members and Visitors located in the European Economic Area (EEA), Switzerland, and the United Kingdom. If there is a discrepancy between the Privacy Policy and this Notice, the information in this Notice will apply to you.
Thrivania is the data controller of your personal data. When we refer to “Thrivania” in this Notice, we mean the entity responsible for processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.
Thrivania only processes your personal data when we have a valid legal basis. We set out below each of the legal bases we rely on, why and how we use your data.
Thrivania processes personal data when it is necessary to perform our contract (the User Agreement) with our Members. This includes:
Thrivania processes personal data when Members give us consent. Where we rely on consent, you can withdraw your consent at any time through your account settings, however this will not affect our use of your data up to that point. Consent-based processing includes:
In some cases, we process your personal data based on our legitimate interests, provided that these interests are not overridden by your rights and freedoms. We have considered whether these interests are outweighed by your rights and have concluded, based on the limited impact of the processing and the controls we offer, that we can proceed. Legitimate interest processing includes:
You have the right to object to processing based on legitimate interests. See “Your Rights” below.
Thrivania processes information to comply with legal obligations, such as preserving or disclosing certain information to adhere to valid legal requests from law enforcement agencies, courts, or regulators, or to comply with financial, tax, or consumer protection laws.
Under GDPR and applicable local laws, you have the following rights regarding your personal data. You can exercise these rights through your account settings or by contacting us.
Download a copy of your personal data at any time from your account settings. We provide your data in a structured, machine-readable format (JSON).
Update or correct your information directly through your profile or settings. If there is data you cannot edit yourself, contact us to request corrections.
Request deletion of your personal data or close your account entirely. Most profile data can be deleted through your account settings.
Request that processing of your data is restricted if the data is inaccurate or if you believe processing is unlawful.
Object to processing based on legitimate interests or public interest. For direct marketing, you always have the right to object and we will stop.
Receive your data in a structured, commonly used format and transfer it to another controller. Download your data anytime from settings.
Where we process data based on consent, you can withdraw it at any time through your settings. Withdrawal does not affect prior processing.
If you have concerns about our data practices, you have the right to lodge a complaint with your local supervisory authority.
In addition to Section 3 of our Privacy Policy, we provide the following additional information about how Thrivania shares data:
Thrivania shares data with third-party service providers and processors, including cloud infrastructure providers (Google Cloud Platform), AI services (Microsoft Azure OpenAI), authentication providers, analytics services, and email delivery services. These providers have access to your information only as necessary to perform their functions and are bound by data processing agreements.
When you apply for a position or participate in co-founder matching, certain profile data is shared with relevant parties as described in our Privacy Policy and subject to your visibility settings.
Thrivania does not encourage you to provide data that includes genetic, biometric, or health data, or data revealing racial and ethnic origin, political opinions, religious or ideological convictions, or trade union membership (“Special Category Data”) when using our Services. Where you voluntarily provide such data (for example, in your profile or content), we process it on the basis of your explicit consent or where such data has been manifestly made public by you.
We generally retain your personal data as long as you keep your account open or as needed to provide you Services. If you close your account, we will generally delete or anonymize your data within 30 days, except where we need to retain data to:
Thrivania may transfer personal data outside of the EEA and the UK as part of its Services. For example, Thrivania stores personal data on servers located in the United States. Thrivania will always use a lawful transfer mechanism, including:
If you have a concern or complaint about the use of your personal data that you feel has not been addressed by us, you always have the right to raise a concern with the supervisory authority in your jurisdiction. A list of EEA data protection authorities is available at edpb.europa.eu. UK residents can contact the Information Commissioner's Office (ICO) at ico.org.uk.
If you have questions about this Notice or wish to exercise your rights:
Online: Contact form
Email: privacy@thrivania.com