Privacy Policy

01 — Who We Are

Thryvo AI is operated by ThryvoAI LLC, a Vermont limited liability company. We provide AI-powered social media marketing automation services for small businesses through our platform at thryvoai.ai and via our AI assistant VEXA on Telegram.

02 — What We Collect

Information you give us

• Your name, business name, and contact information during onboarding
• Brand voice, visual style, and business preferences collected through our DNA onboarding process
• Product photos and videos you send to your AI team for content creation
• Your Telegram username to connect you with your dedicated AI assistant
• Social media account access via OAuth — we never ask for or store passwords

Information collected automatically

• Social media performance data from connected accounts (engagement, reach, clicks)
• Content approval and feedback history to improve your brand profile over time
• Payment and billing information processed securely through Stripe

03 — How We Use Your Data

• To create, schedule, and publish social media content on your behalf
• To generate product ideas, shoot guides, and weekly intelligence reports
• To improve your AI team's understanding of your brand over time
• To manage billing and subscription through Stripe
• To send you service communications through Telegram and email
• To monitor and manage your social media community when enabled by you

04 — How We Protect Your Data

Every client account runs in a completely isolated instance with its own data store. Your brand data, content history, and DNA file cannot be accessed by any other client — this is enforced at the architecture level, not just policy.

All files are stored in Cloudflare R2 cloud storage in isolated client folders. Generated content is automatically deleted on a rolling schedule. Your DNA file — your brand knowledge — is stored permanently and is the only file we retain long term.

Social media connections use OAuth authentication only. We can publish approved content to your accounts. We cannot read private messages on unsupported platforms, change account settings, go live, or delete posts.

05 — Who We Share Data With

We do not sell your data. Ever. We share data only with the third-party tools required to deliver your service:

• Anthropic (Claude) — AI reasoning and content generation
• Stripe — Payment processing
• Buffer — Social media scheduling and publishing
• Cloudflare R2 — Secure file storage
• Google Gemini / Stability AI — Image generation
• Runway / Kling AI — Video creation (plan dependent)
• Telegram — Client communication platform

Each of these providers has their own privacy policy and data handling practices. We only share the minimum data required for each tool to function.

05a — Your Images and Content

Your product photos, brand materials, and the content we create for you belong to you completely. Here is exactly how we treat them:

• We never sell your images, videos, or content to anyone
• We never share your product photos or identifiable content with other clients
• We never use your product photos, brand DNA, or identifiable content to train AI models — ours or anyone else's. Your creative work is yours
• We never identify you publicly as a client without your explicit written permission

We may use anonymised, non-identifiable AI-generated examples to demonstrate our capabilities on our website. These are generic samples where your business cannot be identified. If we ever want to feature your work with your name attached, we will always ask first and you can say no.

We may reference general statistics about our client base — for example "serving 500+ makers" — without identifying you specifically.

06 — Data Retention

• Generated images and video clips — deleted after 90 days
• Published content files — deleted 30 days after posting
• Client-sent photos — retained for 6 months
• Your DNA brand file — retained permanently while your account is active
• Upon cancellation — all data preserved for 30 days then permanently deleted unless you request otherwise

07 — Your Rights

You have the right to:

• Request a copy of all data we hold about your business
• Request correction of any inaccurate information
• Request deletion of your data at any time
• Cancel your subscription with no further charges — no contracts, no lock-in
• Revoke social media OAuth access at any time through your platform settings

To exercise any of these rights, contact us at the address below.

08 — Cookies

Our website thryvoai.ai uses minimal cookies for basic functionality and analytics. We do not use advertising cookies or tracking pixels. You can disable cookies in your browser settings without affecting your Thryvo AI service.

09 — Children

Thryvo AI is a business service intended for adults. We do not knowingly collect data from anyone under the age of 18.

10 — Changes to This Policy

If we make material changes to this privacy policy we will notify active clients through their Telegram bot before the changes take effect. The effective date at the top of this page will always reflect the most recent version.