Legal
Privacy PolicyLast Updated: July 4, 2026
iThrive Corporation (“iThrive,” “we,” “us,” or “our”) respects individual privacy and is committed to transparency regarding how information is collected, used, maintained, disclosed, shared, licensed, and sold.
This Privacy Policy describes our practices concerning information collected or maintained through our websites, platforms, marketplaces, products, services, databases, and business operations.
It also includes supplemental provisions for individuals in the European Economic Area (“EEA”) where the European Union General Data Protection Regulation (“GDPR”) applies.
1. Information We Collect
We may collect or maintain information directly from individuals and from other lawful sources
Depending on the circumstances, this information may include:
- Names and contact information
- Email addresses and telephone numbers
- Business and professional contact information
- Employment and work history
- Job titles and professional roles
- Education, qualifications, certifications, licenses, and skills
- Resumes, professional profiles, and career information
- Company and organizational information
- Employment opportunities and job information
- Professional relationships and network information
- Compensation and employment-related information
- General geographic information
- Professional interests and preferences
- Commercial and transaction information
- Information contributed, created, updated, validated, or supplemented by others
- Website, account, and platform activity
- Device information, IP addresses, cookies, and similar technical information
- Inferences and insights derived from information we maintain
- Other information reasonably related to our business, services, marketplaces, and commercial activities
Some information maintained by iThrive may concern individuals who are not registered members or who have not directly interacted with iThrive.
2.Sources of Information
We may obtain information from a variety of sources, including:
- Individuals
- Members and users
- Companies and organizations
- Employers
- Customers and business partners
- Service providers and contractors
- Data providers and licensors
- Publicly available sources
- Professional and business directories
- Databases and websites
- Other lawful sources
Members and other participants may contribute, create, update, validate, supplement, or otherwise provide professional, company, employment, relationship, and workforce-related information
As a result, information concerning an individual may be provided to iThrive by someone other than that individual.
3.How We Use Information
- Operate, maintain, develop, and improve our business, platforms, marketplaces, products, and services
- Connect individuals, companies, opportunities, and other participants
- Create, maintain, supplement, validate, and improve professional and company information
- Facilitate employment, professional, commercial, and business opportunities
- Communicate with individuals, members, users, companies, customers, and other participants
- Provide workforce and marketplace services
- Conduct research, analytics, measurement, and reporting
- Develop databases, datasets, insights, products, services, and technologies
- Develop, train, test, evaluate, validate, improve, or support technologies, software, algorithms, models, and automated systems
- Analyze workforce, employment, professional, company, industry, and market information
- Perform data enhancement, enrichment, matching, validation, and quality improvement
- Create aggregated, statistical, anonymized, or de-identified information
- License, commercialize, disclose, share, or sell information where permitted by applicable law
- Detect and prevent fraud, misuse, security threats, and unlawful activity
- Protect our rights, property, operations, users, and others
- Comply with legal and regulatory obligations
- Support other lawful business and commercial purposes consistent with this Privacy Policy/
4. Disclosure, Licensing, Sharing, and Sale of Information
iThrive may derive commercial value from information and data maintained through our business, platforms, marketplaces, services, and databases. Subject to applicable law and applicable privacy rights, iThrive may disclose, provide access to, license, commercialize, share, sell, or otherwise make information available to third parties for business or commercial purposes.
Categories of recipients may include:
- Customers
- Business partners
- Technology companies
- Software companies
- Data and information companies
- Analytics organizations
- Research organizations
- Service providers and contractors
- Employers
- Workforce-related organizations
- Commercial organizations
- Other third parties engaged in lawful business, research, technology, or commercial activities
Information may be used by recipients for lawful purposes including research, analytics, data enrichment, workforce intelligence, market intelligence, product development, technology development, training, testing, evaluation, validation, and commercial services.
Where applicable law gives an individual the right to opt out of, object to, or otherwise restrict a sale, sharing, disclosure, or other processing activity, iThrive will honor applicable rights and requirements.
5. Aggregated, Anonymized, and De-Identified Information
We may create aggregated, statistical, anonymized, or de-identified information from information we collect or maintain.
Where information is maintained as de-identified or anonymized information under applicable law, we will maintain and use that information in accordance with applicable legal requirements.
Subject to applicable law, iThrive may use, analyze, disclose, license, commercialize, or sell aggregated, anonymized, or de-identified information for lawful business and commercial purposes.
6. Service Providers and Contractors
We may provide information to service providers and contractors that assist us in operating our business and providing our products and services.
These services may include cloud infrastructure, hosting, communications, payment processing, payroll, security, analytics, customer service, workforce services, marketing, technology, professional services, and other operational functions.
We may require service providers and contractors to process personal information subject to applicable contractual and legal requirements, including data processing terms where required.
7. Sensitive Personal Information and Special Categories of Personal Data
Certain information may constitute sensitive personal information or, under the GDPR, special categories of personal data.
When iThrive collects, uses, or discloses such information, we will handle it in accordance with applicable legal requirements and, where required, identify an appropriate legal condition for processing and provide applicable rights concerning its use or disclosure.
8. Business Transactions
Information may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, investment, restructuring, reorganization, sale of assets, bankruptcy, or other corporate or business transaction, subject to applicable law.
9. Legal, Security, and Safety Disclosures
We may disclose information when reasonably necessary to comply with applicable laws, regulations, legal proceedings, court orders, governmental requests, or other legal obligations.
We may also use or disclose information to investigate, detect, prevent, or address fraud, misuse, security incidents, unlawful conduct, or threats to the rights, property, operations, or safety of iThrive or others.
10. Data Retention
We retain information for periods reasonably necessary and proportionate to accomplish the purposes for which the information was collected or processed, subject to applicable law.
Retention periods may vary based on the nature of the information, its source, our relationship with the individual or organization, operational requirements, contractual obligations, legal requirements, and the purposes for which the information is maintained.
Information may be retained to operate databases, provide services, maintain workforce and business records, conduct research and analytics, resolve disputes, protect legal rights, prevent fraud, and comply with legal obligations.
Where the GDPR applies, we will consider applicable storage-limitation requirements and retain personal data no longer than necessary for the relevant purpose unless a longer period is required or permitted by law.
11. Data Security
iThrive maintains reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, loss, destruction, or disclosure.
No method of electronic transmission or storage can guarantee absolute security. Where applicable, iThrive will address personal data breaches in accordance with legal notification and documentation requirements
12. Cookies and Similar Technologies
We may use cookies and similar technologies to operate our websites and services, maintain security, remember preferences, understand usage, improve functionality, measure performance, and support business and marketing activities.
Individuals may have options for controlling cookies and similar technologies through their browsers, devices, and available privacy controls.
Where applicable law requires consent before using certain non-essential cookies or similar technologies, we will seek that consent.
13. General Privacy Rights
Depending upon an individual's residence and applicable law, individuals may have rights concerning their personal information.
These rights may include the right to:
- Know what personal information is collected or maintained
- Access certain personal information
- Request correction of inaccurate personal information
- Request deletion or erasure of certain personal information
- Request restriction of certain processing
- Object to certain processing
- Obtain information concerning disclosure, sale, or sharing
- Opt out of certain sales or sharing
- Limit certain uses or disclosures of sensitive personal information
- Obtain a portable copy of certain information
- Withdraw consent where processing is based on consent
- Exercise rights relating to certain automated decision-making or profiling
- Exercise other rights provided by applicable privacy laws
These rights may be subject to exceptions and limitations established by applicable law.
iThrive will not unlawfully discriminate against an individual for exercising applicable privacy rights.
Privacy requests may be submitted to:support@ithrive.com
14. California Privacy Notice
This section supplements the remainder of this Privacy Policy and applies to California residents to the extent required by the California Consumer Privacy Act, as amended, and other applicable California privacy laws.
Categories of Personal Information
Depending upon the information available to us and our relationship with an individual, iThrive may collect or maintain categories of personal information including:
- Identifiers
- Personal and business contact information
- Commercial information
- Professional and employment-related information
- Education information
- Internet and electronic activity information
- General geolocation information
- Inferences derived from other information
- Sensitive personal information, where applicable
- Other personal information recognized under applicable California law
You can opt-out of our sharing of your personal information with anyone including with third parties for the third parties' direct marketing purposes) by contacting us at support@ithrive.com and informing us of your decision to opt out. Please note that under California law businesses are only required to respond to a customer making such a request once during any calendar year.
Categories of Sources
Personal information may come from individuals, members, users, companies, organizations, employers, customers, business partners, service providers, contractors, data providers, licensors, publicly available sources, directories, databases, websites, and other lawful sources.
Business and Commercial Purposes
We may collect and use personal information for the business and commercial purposes described in this Privacy Policy.
Where permitted by applicable law, personal information may also be disclosed, licensed, shared, or sold for the purposes described in this Privacy Policy.
Categories of Recipients
Categories of third parties to which information may be disclosed, licensed, sold, or shared may include customers, business partners, technology companies, software companies, data and information companies, analytics organizations, research organizations, employers, workforce-related organizations, service providers, contractors, commercial organizations, and other third parties as permitted by applicable law.
Prior 12-Month Disclosures
As required by applicable California law, iThrive will maintain disclosures concerning categories of personal information sold or shared during the applicable preceding 12-month period, categories of recipients, and applicable business or commercial purposes.
If no personal information was sold or shared during the applicable period, iThrive may disclose that fact as required by applicable law.
15. California Right to Opt Out of Sale or Sharing
California residents have the right, where applicable, to direct iThrive not to sell or share their personal information.
Consumers may exercise this right through iThrive's Do Not Sell or Share My Personal Information mechanism.
Privacy requests may also be submitted to: support@ithrive.com
iThrive will recognize and process applicable opt-out preference signals as required by California law.
An individual who has exercised an applicable right to opt out may subsequently authorize the sale or sharing of personal information in accordance with applicable law.
16. California Rights to Know, Access, Correct, and Delete
Subject to applicable exceptions and limitations, California residents may request that iThrive:
- Disclose categories of personal information collected
- Disclose categories of sources
- Disclose applicable business or commercial purposes
- Disclose categories of third parties to which information is disclosed, sold, or shared
- Provide certain specific pieces of personal information
- Correct inaccurate personal information
- Delete certain personal information
We may take reasonable measures permitted by law to verify the identity and authority of individuals submitting requests.
17. Information Obtained Indirectly
iThrive may maintain professional, employment, company, business, and workforce-related information concerning individuals with whom iThrive does not have a direct relationship.
Such information may be obtained from members, users, companies, organizations, customers, business partners, service providers, data providers, licensors, publicly available sources, directories, databases, websites, and other lawful sources.
Subject to applicable law and applicable privacy rights, iThrive may collect, maintain, use, analyze, disclose, license, share, sell, or otherwise process such information for the purposes described in this Privacy Policy.
Where the GDPR applies and personal data is obtained from a source other than the individual, iThrive will provide the information required by applicable law within the required period unless an applicable exception applies, such as where the individual already has the information or providing it proves impossible or would involve disproportionate effort, subject to the conditions of applicable law.
18. Children
iThrive's general services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through our general services.
We will comply with applicable requirements concerning the collection, use, sale, or sharing of personal information relating to minors.
Where EU law applies to an information society service offered directly to a child, we will comply with applicable GDPR and Member State requirements concerning consent and children's data.
19. European Economic Area Privacy Notice
This section supplements the remainder of this Privacy Policy for individuals in the European Economic Area where the GDPR applies.
If this section conflicts with another provision of this Privacy Policy with respect to processing governed by the GDPR, this section controls to the extent required by applicable law.
19.1 Controller and Contact Information
iThrive Corporation
620 Newport Center Drive, Suite 1100
Newport Beach, California 92660
United States
Privacy inquiries:support@ithrive.com
Where the GDPR requires iThrive to designate a representative in the European Union or a Data Protection Officer, applicable contact information will be made available through this Privacy Policy or another appropriate notice.
19.2 Legal Bases for Processing
Where the GDPR applies, iThrive will process personal data only where an applicable legal basis exists.
Depending on the processing activity, the legal basis may include:
- Performance of a contract or taking steps at an individual's request before entering into a contract
- Compliance with a legal obligation
- iThrive's legitimate interests or the legitimate interests of a third party, where those interests are not overridden by the individual's interests or fundamental rights and freedoms
- Consent, where consent is requested and legally appropriate
- Other legal bases permitted by applicable law
Legitimate interests may include operating and improving our services and marketplaces, facilitating professional and workforce opportunities, maintaining accurate professional and company information, protecting our services and users, conducting appropriate analytics and research, developing products and technologies, and supporting lawful commercial activities.
We will assess and document legitimate interests where required.
Where consent is the legal basis, an individual may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
19.3 Purpose Limitation, Data Minimization, and Accuracy
Where the GDPR applies, iThrive will process personal data for specified, explicit, and legitimate purposes and will not further process it in a manner incompatible with those purposes unless permitted by law.
We will seek to limit personal data to what is adequate, relevant, and reasonably necessary for the applicable purpose and take reasonable steps to maintain accuracy where required.
19.4 EEA Data Subject Rights
Subject to applicable conditions, exceptions, and limitations, individuals whose personal data is governed by the GDPR may have the right to:
- Receive information about the processing of their personal data
- Access their personal data
- Correct inaccurate or incomplete personal data
- Request erasure of personal data
- Request restriction of processing
- Receive certain personal data in a structured, commonly used, machine-readable format and transmit it to another controller
- Object to processing based on legitimate interests or the performance of a task carried out in the public interest
- Object at any time to processing for direct marketing
- Withdraw consent where processing is based on consent
- Exercise applicable rights concerning decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect them
- Lodge a complaint with a competent supervisory authority
Requests may be submitted to: support@ithrive.com
We may take reasonable steps to verify identity and authority before responding. We will respond within the time periods required by applicable law.
19.5 Automated Decision-Making and Profiling
iThrive may use algorithms, models, analytics, matching, scoring, recommendations, or other automated tools to support workforce, marketplace, technology, research, or business functions.
Where the GDPR applies, if iThrive engages in a decision based solely on automated processing, including profiling, that produces legal effects concerning an individual or similarly significantly affects that individual, iThrive will provide the safeguards and information required by applicable law, including applicable rights to obtain human intervention, express a point of view, or contest a decision.
19.6 Indirectly Obtained Personal Data
Where iThrive obtains personal data about an individual from another source and the GDPR applies, iThrive will provide applicable information about the processing, including the categories and source of the personal data, within the period required by law unless an applicable exception applies.
The source may include publicly accessible sources, professional or business directories, customers, employers, business partners, members, users, service providers, data providers, licensors, databases, websites, or other lawful sources.
19.7 International Transfers from the EEA
iThrive is established in the United States, and personal data may be transferred to, stored in, or processed in the United States or other countries outside the EEA.
Where the GDPR restricts an international transfer, iThrive will use an applicable transfer mechanism or safeguard as required by law.
Depending on the circumstances, this may include:
- A European Commission adequacy decision
- Participation by an eligible recipient in the EU-U.S. Data Privacy Framework
- European Commission Standard Contractual Clauses
- Binding Corporate Rules
- An applicable derogation
- Another legally recognized transfer mechanism
Where required, iThrive will implement supplementary safeguards and conduct assessments concerning international transfers.
Individuals may contact support@ithrive.com for information about applicable safeguards and, where legally required, how to obtain a copy or description of them.
19.8 Recipients and Commercial Data Activities
Where the GDPR applies, any disclosure, licensing, commercialization, sharing, sale, or other making available of personal data described in this Privacy Policy will occur only where iThrive has an applicable legal basis and satisfies applicable transparency, purpose limitation, data subject rights, contractual, and international-transfer requirements.
The use of the term “sell” in this Privacy Policy does not itself determine the legal characterization of a transaction under the GDPR or any other law.
19.9 Processor Activities
In some circumstances, iThrive may process personal data on behalf of a customer or other organization acting as controller.
Where required, iThrive will enter into appropriate data processing terms and process personal data in accordance with documented instructions and applicable law.
In addition, we do not share your mail, email, or text message content except as set forth in this privacy policy.
19.10 Data Protection Impact Assessments
Where a type of processing is likely to result in a high risk to the rights and freedoms of individuals, iThrive will conduct a data protection impact assessment where required by the GDPR and will consult a supervisory authority where required by law.
19.11 Supervisory Authority Complaints
Individuals in the EEA may have the right to lodge a complaint with the data protection supervisory authority in the Member State of their habitual residence, place of work, or place of an alleged infringement.
We encourage individuals to contact us at support@ithrive.com so we can attempt to address privacy concerns directly, but doing so does not limit the right to contact a supervisory authority.
20. International Information
Information may be processed or stored in the United States or other jurisdictions in which iThrive or its service providers operate.
Where applicable law establishes requirements concerning international transfers or processing, we will process personal information in accordance with those requirements.
The EEA-specific provisions above apply to transfers governed by the GDPR.
21. Data Protection Roles, Records, and Accountability
Depending on the processing activity, iThrive may act as a controller, joint controller, or processor as those terms are defined by applicable law.
Where required, iThrive will maintain appropriate records of processing activities, implement data protection policies and contractual safeguards, and apply privacy and security measures proportionate to the nature, scope, context, and purposes of processing and the risks to individuals.
22. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business, products, services, technologies, data practices, or applicable laws. Where required by applicable law, we will provide appropriate notice or obtain consent before using personal information for a materially different purpose.
The “Last Updated” date at the beginning of this Privacy Policy identifies the most recent revision.
23. Contact Us
Questions, inquiries, or privacy requests concerning this Privacy Policy or iThrive's privacy practices may be directed to:
iThrive Corporation
620 Newport Center Drive, Suite 1100
Newport Beach, California 92660