LEGAL & COMPLIANCE

Legal & Trust Center

Review our customer agreements, privacy protections under GDPR, security controls, and enterprise data processing commitments.

CORE AGREEMENTS

Customer Agreements & Policies

Transparent, standardized legal agreements governing your use of ThriveStack products and personal data processing.

GDPR Compliant · Updated Oct 2026

Privacy Policy

Comprehensive policy detailing how ThriveStack processes personal data for ThriveStack citedby and ThriveStack Revenue Intelligence.

Key Provisions
  • Controller & processor responsibilities under GDPR Art. 4(7) & 28
  • Data subject rights: access, rectification, erasure, and portability
  • Transparent sub-processor list & international transfer safeguards
  • Strict 90-day post-termination data deletion timeline
Master SaaS Agreement · Updated Oct 2026

Terms of Service

The standard business terms governing subscription access, Customer Data ownership, AI engine integrations, and platform use.

Key Provisions
  • Customer retains 100% intellectual property rights in Customer Data
  • Non-exclusive license to reports, scores, and generated outputs
  • 30-day post-termination window for full data export
  • Governed by the laws of the State of Delaware, USA
SOC 2 Type II Certified · Continuous Telemetry

Trust Center & Security

Real-time compliance dashboard tracking our SOC 2 Type II controls, data safeguards, infrastructure security, and sub-processor directory.

Key Provisions
  • AES-256 encryption at rest and TLS 1.3 encryption in transit
  • Continuous automated evidence monitoring and annual independent audits
  • Role-based access control (RBAC) and least-privilege principles
  • Live system availability and security posture metrics
GDPR Article 28 · EU Standard Contractual Clauses

Data Processing Agreement (DPA)

Pre-signed GDPR Article 28 Data Processing Addendum incorporating European Commission Standard Contractual Clauses (SCCs) for enterprise customers.

Key Provisions
  • Standard Contractual Clauses (SCCs) for cross-border data transfers
  • Detailed Technical and Organizational Measures (TOMs)
  • Prompt personal data breach notifications without undue delay
  • Sub-processor authorization commitments and audit assistance
SECURITY & PRIVACY PRINCIPLES

Our Data Protection Commitments

Every feature of ThriveStack is built with enterprise security, privacy by design, and strict confidentiality as foundational requirements.

Zero AI Training on Your Data

ThriveStack strictly does not use identifiable Customer Data, connected CRM records, or product telemetry to train artificial intelligence models.

100% Customer Data Ownership

You retain all rights, title, and intellectual property in your data. ThriveStack processes customer data solely to deliver contracted services.

Independent Security Audits

Our security controls, infrastructure safeguards, and internal processes are verified via annual independent SOC 2 Type II examinations.

Enterprise-Ready Governance

Standardized Delaware governing law, comprehensive commercial terms, and mutual confidentiality protections for growing and enterprise teams.

FREQUENTLY ASKED QUESTIONS

Legal & Compliance FAQ

Do you train AI models on Customer Data?

No. ThriveStack does not train any foundation AI models, LLMs, or generative algorithms on identifiable Customer Data, connected system records, or customer software events.

Where is customer data stored and processed?

ThriveStack Corporation is established in the United States. Data is hosted in SOC 2 Type II certified United States cloud facilities with strict technical and organizational safeguards.

Can our company execute a custom DPA?

Yes. For qualifying business and enterprise subscriptions, ThriveStack executes our standard GDPR Article 28 Data Processing Addendum with EU Standard Contractual Clauses (SCCs).

OFFICIAL NOTICE & CONTACT

Have legal or compliance questions?

For contract inquiries, security questionnaire assistance, or official legal notices, please reach out directly to our legal and compliance team.

ThriveStack Corporation · 2747 204th LN NE, Sammamish, WA, USA
Entity Type: Delaware Corporation · Support: support@thrivestack.ai