This Privacy Policy and Data Processing Agreement (“Agreement”) describes how Thravic (“Thravic,” “we,” “our,” or “us”) collects, processes, and protects data in connection with its analytics and traffic intelligence services (the “Services”).
By using Thravic, Customers (“you,” “Controller”) agree to the terms of this Agreement.
2. Scope and Roles
2.1 Roles of the Parties
For the purposes of applicable data protection laws:
Customer acts as the Data Controller
Thravic acts as the Data Processor
Thravic processes personal data strictly on behalf of and under the instructions of the Customer.
3. Categories of Data Processed
Thravic processes limited categories of data necessary to provide analytics services:
3.1 Traffic Source Data
Referral URLs
Campaign identifiers (UTM parameters)
Source attribution
3.2 Usage Data
Page views and session activity
Click interactions
Navigation paths and behavioral flows
3.3 Device & Technical Data
Browser and version
Operating system
Device type and screen resolution
3.4 Geographic Data
Approximate location (country/city level) derived from IP
IP Address Handling: IP addresses may be temporarily processed for security and geolocation purposes but are not stored in a persistent, human-readable format.
3.5 Your Account Details
For the people who sign up to Thravic (not the visitors to their websites), Thravic is the controller of the following account details:
Full name and email address: to run your account and contact you about it.
Date of birth: to confirm you are 18 or older. It is shown only to you and to Thravic support, and can be corrected by support.
Country and phone number: to know who our customers are, for billing, and to reach you about your account or its security.
Company, job title, website and timezone (optional): to tailor reports and support to you.
These details are kept while your account exists and deleted with it. They are never sold or used for advertising. You can view and update them under Settings → Account.
Customer’s legitimate interests in analytics and optimization
Consent, where required and obtained by the Customer
Compliance with legal obligations
DATA PROCESSING AGREEMENT (DPA)
6. Subject Matter and Duration
This DPA governs the processing of personal data by Thravic for the duration of the Customer’s use of the Services.
7. Nature and Purpose of Processing
Processing includes:
Collection, Recording, Organization
Storage, Analysis, Retrieval
Deletion or anonymization
All strictly for providing analytics services.
8. Types of Personal Data
Online identifiers (e.g., IP address, cookie identifiers)
Device information
Behavioral interaction data
No special categories of personal data are intentionally collected.
9. Categories of Data Subjects
Data subjects may include:
Website visitors
Application users
End-users interacting with Customer platforms
10. Processor Obligations (Thravic)
Thravic agrees to:
10.1 Process Data Only on Instructions
Process personal data only on documented instructions from the Customer unless required by law.
10.2 Confidentiality
Ensure that all personnel authorized to process data are bound by confidentiality obligations.
10.3 Security Measures
Implement appropriate technical and organizational measures, including:
Encryption in transit and at rest
Access control and authentication
Monitoring and incident detection
10.4 Sub-Processors
Thravic may engage sub-processors (e.g., cloud hosting providers), provided that:
They are bound by equivalent data protection obligations
Thravic remains fully liable for their actions
10.5 Assistance to Controller
Thravic shall assist the Customer, where reasonably possible, in:
Responding to data subject requests
Ensuring compliance with GDPR, CCPA, and similar laws
Conducting data protection impact assessments (where required)
10.6 Data Breach Notification
Thravic will notify the Customer without undue delay upon becoming aware of a personal data breach.
10.7 Deletion or Return of Data
Upon termination of Services, Thravic will:
Delete or anonymize personal data
Retain data only where legally required
10.8 Audit Rights
Customers may request reasonable information to verify Thravic’s compliance with this Agreement.
11. Data Retention
Data is retained only as necessary:
Short-term processing (e.g., IP handling) is minimized
Long-term analytics data may be anonymized
Retention periods depend on Customer plan configuration
12. Data Security
Thravic maintains industry-standard safeguards:
Encryption: HTTPS/TLS and encrypted storage
Access Control: Restricted, role-based access
Minimization: Limited collection of identifiable data
13. International Data Transfers
Where data is transferred internationally, Thravic ensures appropriate safeguards such as:
Standard Contractual Clauses (SCCs)
Equivalent legal protections
14. Data Subject Rights
End-users have the right to:
Access their personal data
Request correction or deletion
Restrict or object to processing
Request data portability
Requests should be directed to the Customer (data controller).
15. Opt-Out Mechanisms
Users may opt out of tracking via:
Browser “Do Not Track” settings
Customer-provided consent tools
Script blocking mechanisms
16. Third-Party Disclosure
Data is not sold or shared for advertising. Disclosure occurs only:
When legally required
To protect system integrity
To essential service providers under strict agreements
17. Children’s Data
Thravic accounts are only for people aged 18 or older; sign-up asks for a date of birth and refuses anyone younger. If we learn that an account belongs to someone under 18, it is restricted at once (its dashboard is locked and its sites stop collecting data) and deleted with its data after 30 days, unless the date of birth was entered by mistake and support corrects it.
Thravic does not knowingly collect data from children under applicable legal age thresholds.
18. Changes to This Agreement
We may update this Agreement periodically. Updates will be reflected by the “Last Updated” date.
19. Contact Information
For privacy-related inquiries:
Email: thravic247@gmail.com
20. Final Statement
Thravic is built on a privacy-first, compliance-driven foundation, ensuring that Customers can access powerful analytics while maintaining the trust, security, and rights of their users.