Legal

Privacy Policy

Last updated June 15, 2026

This Privacy Policy explains how ThriveRent, operated by Thrivelayer (“we,” “us”), collects, uses, and protects information in connection with the ThriveRent platform (the “Service”). ThriveRent is used by senior-living operators to manage resident billing; much of the personal information we process is provided to us by those operators acting as the data controller.

1. Information we process

Account information — names, work email addresses, and roles for operator and facility staff.
Resident & billing information — resident names, units, charges, statements, and payment records submitted by operators.
Payment information — handled by our payment processor (Stripe); we receive limited transaction metadata, not full card or bank credentials.
Usage & device information — log data, IP address, and basic analytics used to operate and secure the Service.

2. How we use information

To provide, maintain, and secure the Service;
To process payments and reconcile charges;
To communicate about the Service, including support and service notices;
To detect, prevent, and address fraud, abuse, and security incidents; and
To comply with legal obligations.

3. Roles and responsibilities

For resident and billing data, the operating organization is the data controller and ThriveRent acts as a processor on its behalf, as described in our Data Processing Addendum. Residents and responsible parties with questions about their data should contact their facility.

4. Sharing

We do not sell personal information. We share information with subprocessors who help us operate the Service (see Subprocessors), and as required by law or to protect our rights. Each subprocessor is bound by appropriate confidentiality and data-protection obligations.

5. Security

We use industry-standard safeguards, including encryption in transit, role-based access controls, tenant isolation at the database layer, and audit logging. See our Security page for more detail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain personal information for as long as needed to provide the Service and to meet legal, accounting, or reporting obligations. Operators may request export or deletion of their data subject to applicable legal retention requirements.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, or to object to certain processing. Because operators control resident data, we will route such requests to the relevant operator where appropriate.

8. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by other reasonable means.

9. Contact

For privacy questions, reach us through the Help Center or your facility administrator.

Questions about this document? Visit the Help Center or reach your facility administrator.