Privacy policy

Who we are

Thrive Talent Development is operated from Grand Rapids, Michigan, and delivered with SDI Clarity. For anything in this policy, write to hello@thrivetalentdevelopment.com. The same address handles requests to see, correct, or delete your data.

What we collect on the marketing site

Conversations with ARIA

ARIA is the sales consultant on this site. When you talk to her, the conversation is stored so it can continue across pages and so the team can follow up. If you share your name, email, phone number, company name, headcount, or industry, that information is saved as a sales lead. A transcript of the conversation is emailed to the Thrive team. Conversations are generated with a large language model provided by Anthropic; the text you type is sent to that provider to produce the reply and is not used by them to train models under our agreement.

The contact form

The contact form hands what you wrote to ARIA and to the team. It is treated the same way as an ARIA conversation.

Analytics, only if you accept

We use Google Analytics 4 to understand which pages are read. The Google tag loads with Consent Mode v2. Until you choose Allow analytics on the cookie notice (or turn on Website analytics in the choices below), and if you choose Decline, analytics_storage, ad_storage, ad_user_data and ad_personalization are set to denied. Google may receive cookieless measurement pings in that state; it does not write analytics cookies. Choosing Allow analytics, or a previous acceptance that is still stored, updates analytics_storage to granted. Advertising storage, user data and personalization stay denied. Your choice is stored in your browser (localStorage, with a matching cookie named thriveCookieConsent that lasts thirty days). After thirty days the notice appears again so you can reconsider. Use the cookie choices below to change or withdraw consent at any time. Withdrawing consent sets analytics storage back to denied and reloads this page.

LinkedIn inquiry measurement, only with separate permission

If you separately allow advertising measurement, a LinkedIn image pixel loads after a complete inquiry is successfully received on our homepage, HR, platform or contact page. LinkedIn receives the inquiry event, our website origin, your IP address and browser information, and any available LinkedIn cookies. This helps LinkedIn attribute inquiries to our ads. We do not send your name, email, company, conversation, internal lead identifier or URL query parameters in this event. Browser restrictions can prevent attribution.

We do not install LinkedIn’s site-wide Insight Tag or automatically collect website actions. This pixel does not run on authenticated portal, learning, coaching, login or checkout pages, or for visitors with a stored sign-in token. Global Privacy Control disables advertising measurement. Accepting analytics does not enable it. You can withdraw permission below to stop future events; withdrawal does not undo events already sent. See LinkedIn’s privacy policy for its data practices.

Essential cookies and storage

The site keeps your ARIA conversation and a random session identifier in your browser's local storage so the conversation survives a page change. This is not used to track you across other sites.

What we collect in the platform

Account information

• Name, work email, job title, and company, provided by you or by your company's administrator.
• A password, stored only as a salted hash. We never see the password itself.

Learning activity

• Courses started and completed, assessment results, workshop registrations and attendance, and program work you submit.
• Conversations with Morgan and Coach Taylor, the agents inside the platform, stored so they can follow up and so your company's administrator can see progress.

Payments

Payments are processed by Stripe. Card numbers go to Stripe directly and are never stored on our systems. We keep the invoice records Stripe returns to us.

How we use it

• To run the service: enroll people, schedule sessions, answer questions between sessions, and report progress to your company.
• To follow up on a sales conversation you started.
• To improve the programs. Aggregate, de-identified completion and attendance figures may be used to decide what to build next.
• To meet legal obligations, including tax and accounting records.

We do not sell contact details or conversations. Optional advertising measurement shares the limited event and browser information described above with LinkedIn, only with separate permission.

Who processes it for us

• Anthropic: language model behind ARIA, Morgan, and Coach Taylor.
• Neon: the database, hosted in the United States, encrypted at rest.
• Render and Vercel: application hosting.
• Stripe: payments.
• Resend: transactional email, including the transcripts sent to the team.
• Microsoft Teams: live workshops and program sessions. Microsoft's own terms apply to the meeting.
• Google Analytics 4: page analytics with Consent Mode; cookies only with your consent.
• LinkedIn: optional inquiry attribution, only with separate advertising-measurement consent.

These services handle data under their applicable agreements and privacy policies. The purposes for which Thrive uses them are listed above.

How long we keep it

• Sales conversations and leads: until you ask us to delete them, or three years after the last contact, whichever comes first.
• Platform accounts and learning records: for as long as your company's subscription is active, and ninety days after it ends unless your company asks for an export or earlier deletion.
• Invoices and payment records: seven years, as tax law requires.

Your choices

• Ask to see what we hold about you, correct it, or delete it. Write to hello@thrivetalentdevelopment.com and we respond within thirty days.
• If your account was created by your employer, some requests go through them, because the learning records belong to their program.
• Residents of California and other states with privacy laws may have additional rights, including opting out of sale or sharing for cross-context advertising. Advertising measurement is off unless you separately allow it. Reject it using the cookie choices above; we also honor Global Privacy Control for this measurement.

Security

Data is encrypted in transit and at rest. Access inside Thrive is limited by role. Thrive is not SOC 2 certified today; the security page says what is in place and what is not.

Children

The site and the platform are for working adults. We do not knowingly collect information from anyone under sixteen.

Changes

When this policy changes, the date at the top changes with it, and material changes are announced to account administrators by email.