Privacy Policy

Thryve Mental Health ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our practice management platform and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account registration information (name, email address, phone number)
• Professional credentials and licensing information
• Practice information and settings
• Patient information and clinical data (Protected Health Information, or PHI)
• Billing and payment information
• Communications with us

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, error logs)

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative information and updates
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our agreements

As a Business Associate under HIPAA, we are committed to protecting PHI. We:

• Implement administrative, physical, and technical safeguards to protect PHI
• Use encryption for data at rest and in transit
• Limit access to PHI to authorized personnel only
• Maintain Business Associate Agreements with covered entities
• Comply with HIPAA requirements and breach notification rules

We do not use or disclose PHI except as permitted or required by law, your authorization, or our Business Associate Agreement.

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., cloud hosting, payment processing)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have provided explicit consent

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure cloud infrastructure hosted on AWS
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal and contractual obligations)
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of certain communications and data processing

To exercise these rights, please contact us at support@thryvementalhealth.com.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: