HiThrive Inc. ("HiThrive," "our," "us," or "we") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy applies to information collected by HiThrive through the HiThrive website, any HiThrive software or applications, and any services offered by HiThrive (collectively, the "HiThrive Services").
This Privacy Policy describes our privacy practices regarding the personal information we collect from individuals in the usual course of business, including when you:
"You" may, depending on the context, be a Visitor or a User of one or more of the HiThrive Services. For purposes of this Privacy Policy, "Personal Information" means any information relating to an identified or identifiable individual (e.g., name, address, email address, or phone number). This Privacy Policy does not cover aggregated or de-identified information that cannot reasonably be linked to an individual ("Aggregated Information").
By using the HiThrive Services or otherwise providing us with your Personal Information, you are accepting the practices described in this Privacy Policy, as they may be amended by us from time to time, and agreeing to our collection and use of your information in accordance with this Privacy Policy.
We are HiThrive Inc., a company headquartered in New York, New York. We make employee recognition and engagement software to help organizations build culture, celebrate milestones, and reward performance. We provide a hosted platform and related tools, including web and mobile applications, gifting and rewards programs, and integrations with popular workplace systems, that help people teams across the globe to more effectively recognize and engage their employees.
If you are a resident of the European Economic Area ("EEA"), UK, or Switzerland, the controller of your Personal Information that we process for the purposes described in this Privacy Policy is HiThrive Inc., 8 The Green #4000, Dover, DE 19901, United States.
HiThrive Customers are organizations who use the HiThrive Services to help with workplace recognition, engagement, and culture. HiThrive processes Personal Information in these services only according to our Customers' and their Users' instructions (as defined in our Customer agreements). If you have questions about Personal Information you have entered into the HiThrive Services used by one of our Customers, or wish to exercise any of your rights regarding your Personal Information, our Customer contract requires that we redirect your inquiry back to that Customer.
This Privacy Policy does not apply to the Personal Information we process as a service provider or processor on behalf of our Customers. HiThrive is not responsible for the privacy or security practices of our Customers, which may differ from those set out in this Privacy Policy. Please review the relevant Customer's privacy policy to understand more about their data processing activities.
HiThrive follows these principles in order to protect your privacy:
The information we collect depends on the ways you interact with HiThrive and the choices you make (including your privacy settings), the products and features you use, your location, and applicable law.
Visitors. When a Visitor to our website contacts us or registers for information or content, we will collect certain Personal Information so that we may fulfill the Visitor's request or keep in touch with them in connection with our sales and marketing activities (always in accordance with a Visitor's marketing preferences). The Personal Information we collect and may have collected in the past twelve (12) months includes:
Users. If you are a User, you (or your team administrator) may provide certain Personal Information to us through the HiThrive Services — for example, when you register for a HiThrive account, consult with customer support, or communicate with us in any way. The Personal Information we collect may include:
If you ever communicate directly with us, we will maintain a record of those communications and responses.
Visitors. As is true of most websites, when you visit our sites or interact with our emails, we gather certain technical information from your browser or device automatically and store it in log files. In some countries, including countries in the EEA, UK, and Switzerland, this information is considered Personal Information under data protection laws. This information includes:
Users. When you use or interact with the HiThrive Services, we automatically collect or receive certain information through our Services and through other technologies (such as cookies) about your device and usage of the HiThrive Services. This information includes:
This information is used to maintain security, provide necessary functionality, improve performance, assess and improve your experience, review compliance with applicable usage terms, assess capacity requirements, and analyze overall trends.
In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, data providers, and social media platforms. This information may include your mailing address, job title, business email, phone numbers, and social media profiles. We process this data for the purposes of updating our records, targeted advertising, event promotion, and our sales and marketing activities.
HiThrive uses a technology called "cookies" to store session information. A cookie is a small amount of data, which often includes an anonymous unique identifier, sent to your browser from a website's computers and stored on your computer's hard drive. We use both session ID cookies and persistent cookies. Session ID cookies expire when you close your browser and are only ever transmitted over HTTPS. Persistent cookies remain on your hard drive for an extended period of time.
Cookies are required to use the HiThrive Services. You can remove persistent cookies by following directions provided in your Internet browser's "help" directory. If you disable cookies, you may still use our website, but your ability to use some areas of our website may be limited.
We use cookies served by Google Analytics to collect limited data directly from Service Users' browsers to enable us to better understand your use of the Services. Further information on how Google collects and uses this data can be found at www.google.com/policies/privacy/partners/. You can opt out of all Google supported analytics by visiting https://tools.google.com/dlpage/gaoptout.
Global Privacy Control (GPC). We honor website visitors' Global Privacy Control signals. If your browser transmits a GPC signal, we will treat it as a valid opt-out request from the sale or sharing of your Personal Information as required under applicable law.
Do Not Track. HiThrive does not currently respond to browsers' DNT signals, in part because no common industry standard for DNT has been adopted by industry groups, technology companies, or regulators. HiThrive takes privacy and meaningful choice seriously and will continue to monitor developments around DNT browser technology.
HiThrive processes personal information for the following business and commercial purposes, and if you are a resident of the EEA or UK, on the legal basis identified below:
Certain HiThrive Services include AI-powered features ("HiThrive AI") that may process Personal Information to generate outputs such as recognition suggestions, engagement insights, or workflow recommendations. HiThrive AI features are designed to assist and inform human decision-makers, not to replace them.
HiThrive does not make automated decisions that produce legal or similarly significant effects on individuals solely by automated means. A human is always involved in any decision that materially affects an individual's employment status, compensation, or performance evaluation. HiThrive AI outputs are recommendations only and do not constitute employment decisions.
Where a Customer has enabled HiThrive AI features, the Customer is responsible for ensuring that appropriate notices have been provided to end users and that any required consents have been obtained under applicable law.
HiThrive will not share Personal Information, or otherwise make your Personal Information available to any other parties except as provided in this Privacy Policy. Parties with whom we may share your Personal Information include:
Legal or Regulatory Bodies and Agencies. HiThrive will share your information, including Personal Information, in order to respond to investigations, court orders, legal processes, or to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person, violations of HiThrive's Master Subscription Agreement, or as otherwise required by law. If HiThrive is required by law or an order of a court of competent jurisdiction to disclose your information, HiThrive will promptly notify you of this requirement, if permitted by the court or applicable law, so that you may seek a protective order or other appropriate relief.
Service Providers. In order to provide our websites and the HiThrive Services and undertake our marketing and business activities, it may be necessary for us to disclose your information to contracted third parties and service provider partners who perform certain functions on our behalf. Examples include payment providers (to authorize, record, settle, and clear payment card transactions); cloud hosting providers (to provide data storage and processing services); communications providers (to process new queries and manage our emails); and analytics companies. These third-party service providers may use data we provide to them only as instructed by HiThrive.
Rewards Suppliers. When a User redeems points or allowances for rewards through the HiThrive platform, certain Personal Information may be disclosed to the third-party supplier fulfilling that reward. For physical rewards such as merchandise or gifts, this may include the User's name, shipping address, and order details necessary to complete fulfillment. For digital rewards such as gift cards or codes, no shipping information is required and disclosure is limited to information necessary to generate and deliver the reward. Rewards Suppliers may use Personal Information disclosed to them solely for the purpose of fulfilling the applicable reward and are not permitted to use it for any other purpose.
Business Transfers. If HiThrive is involved in a merger, acquisition, or sale of all or a portion of its assets, Personal Information may be transferred to the acquiring person or entity, in which case you will be notified via email and/or a prominent notice on our website of any such change in ownership or uses of Personal Information, as well as any choices you may have regarding your Personal Information.
The security of your Personal Information is important to us. HiThrive maintains a comprehensive written information security program that is assessed periodically through independent third-party audits, including SOC 2 Type I certification. Our program includes appropriate administrative, technical, and physical safeguards designed to protect Personal Information submitted to us, both during transmission and once we receive it, including:
No method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we are committed to protecting your Personal Information, we cannot guarantee its absolute security. For additional information about our security measures, please see our security policy at https://hithrive.com/security.
All HiThrive employees, contractors, and agents who access Personal Information are bound by confidentiality obligations and are required to complete security awareness training within fourteen (14) days of hire and at least annually thereafter.
When acting as a controller, and depending on your location, your jurisdiction, and applicable law, you may have the rights below with regard to the Personal Information we control about you. We will respond to your requests within the appropriate timeline under applicable law. Please note that the rights described below are not absolute and may be subject to conditions or limitations under applicable law. To exercise any of the rights described in this section, please contact us at privacy@hithrive.com.
Right of Access / Right to Know. You have the right to request that we disclose what Personal Information we have collected, used, and disclosed about you, including the categories of Personal Information collected, the sources from which it was collected, the purposes for collection, and the categories of third parties with whom it has been shared.
Right of Deletion. You have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
Right to Correct or Update. You can ask us to correct or update your Personal Information at any time.
Right to Non-Discrimination. You will not receive any discriminatory treatment when you exercise one of your privacy rights. HiThrive will not deny goods or services, charge different prices, or provide a different level of quality of services as a result of your exercising any privacy right.
Right to Object. You may object to the processing of your Personal Information in certain circumstances, including where we process your information on the basis of our legitimate interests.
Right to Restrict Processing. You may ask us to restrict processing of your Personal Information in certain circumstances.
Right to Portability. You may request that we provide your Personal Information in a structured, commonly used, and machine-readable format.
Right to Opt Out of Marketing. While you cannot opt out of service-related emails if you are an account holder, you have the right to opt out of marketing communications at any time by clicking the "unsubscribe" or "opt-out" link in any marketing email we send, or by contacting us using the information below.
Right to Withdraw Consent. If we have collected and processed your Personal Information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing conducted in reliance on lawful grounds other than consent.
Right to Appeal. If we deny your privacy rights request, you may appeal our decision by contacting us at privacy@hithrive.com with the subject line "Privacy Rights Appeal." We will review your appeal and respond within the timeframe required under applicable law.
Authorized Agents. Depending on your state or country, you may designate an authorized agent to exercise privacy rights on your behalf. To use an authorized agent, please contact us at privacy@hithrive.com with proof of the agent's written authorization to act on your behalf. We may require you to directly confirm that you have provided the agent permission to submit the request.
If your Personal Information has been submitted to us by or on behalf of our Customer (your employer) and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable Customer directly. For more information on how your employer uses your Personal Information, please see your employer's privacy policy.
If you are a California resident, the following additional rights apply to you under the California Consumer Privacy Act of 2018 (the "CCPA") and the California Privacy Rights Act of 2020 (the "CPRA"):
Sale and Sharing of Personal Information. HiThrive does not sell personal information to third parties under the CCPA. HiThrive does not share personal information with third parties for cross-context behavioral advertising purposes. HiThrive does not share personal information with third parties for their direct marketing purposes.
Right to Opt Out. Although HiThrive does not sell or share Personal Information as described above, you may submit an opt-out request by contacting us at privacy@hithrive.com. We will also honor valid Global Privacy Control signals as described in Section 6 above.
HiThrive certifies that it understands and will comply with the restrictions on use of Personal Information set forth under the CCPA and CPRA.
Our website includes links to other websites whose privacy practices may differ from those of HiThrive. If you submit information to any of those sites, your information is governed by the privacy policies that apply to those sites. We encourage you to carefully read the privacy policy of any website you visit.
We will retain your Personal Information for as long as is necessary to fulfill the services that you have requested, comply with any laws or regulations, resolve disputes, and enforce our agreements. Following the termination or expiration of our relationship with you, we retain Personal Information for a period of one hundred eighty (180) days, after which it is securely deleted in accordance with our formal data retention and disposal procedures, unless a longer retention period is required or permitted by law.
Data entered into the HiThrive Services and processed on behalf of our Customers as a service provider or processor is retained in accordance with any applicable agreement between HiThrive and its Customer.
Our website and services are not targeted at children under sixteen (16) years of age. HiThrive does not process or disclose Personal Information of minors under sixteen years of age. If you believe we have collected personal information about a child under sixteen, please contact us at privacy@hithrive.com.
Your personal information may be transferred to, and processed in, the United States and in any other country where HiThrive or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel. These countries may have data protection laws that are different from the laws of your country.
If you are a resident of or visitor from the EEA, United Kingdom, or Switzerland, we will protect your Personal Information when it is transferred outside of such locations by: (a) processing it in a territory which the European Commission has determined provides an adequate level of protection for Personal Information; or (b) implementing appropriate safeguards, including through the use of Standard Contractual Clauses or another lawful transfer mechanism approved by the European Commission or relevant authority.
For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, HiThrive has appointed an EU/UK representative pursuant to Article 27 of the GDPR. For questions related to GDPR or UK GDPR compliance, please email privacy@hithrive.com.
HiThrive's EU/UK Representative (GDPR Article 27)
Data Protection Representative Limited (trading as DataRep)
The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Email: datarequest@datarep.com (quoting "HiThrive Inc." in the subject line)
Web: www.datarep.com/data-request
Country-specific postal addresses for DataRep's EU/EEA and UK offices are available at www.datarep.com. When mailing enquiries, please address letters to "DataRep" and not "HiThrive Inc." — letters addressed directly to HiThrive may not reach DataRep.
HiThrive's DSA Legal Representative (DSA Article 13)
Data Protection Representative Limited (trading as DataRep)
The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Email: digitalrequest@datarep.com (quoting "HiThrive Inc." in the subject line)
Web: www.datarep.com/data-request
HiThrive may update this Privacy Policy from time to time. For material changes, we will provide at least thirty (30) days' prior notice to the email address associated with your account or by posting a prominent notice on our website. Non-material changes will be effective upon posting to HiThrive's website, and the "Effective Date" at the top of this Privacy Policy will be revised. Your continued use of the Service following the effective date of any modification constitutes your acceptance of the updated Privacy Policy.
For questions, complaints, or comments regarding this Privacy Policy or to exercise any of your privacy rights, please contact us by:
Email: privacy@hithrive.com
Postal Mail: HiThrive Inc., 8 The Green #4000, Dover, DE 19901, United States
We will respond to your request within the timeframe required under applicable law. For requests from EEA, UK, or Swiss residents, please contact our EU/UK representative as described in Section 17 above.