Privacy Policy

Who we are

ThriveInMarkets (“we”, “us”, “our”) is an independent market commentary and trading education publisher operating the website thriveinmarkets.com. For any privacy-related question, write to [email protected]. For the purposes of GDPR, we act as the data controller of the personal data described below.

What we collect and why

• Email address and first name — only if you subscribe to our newsletter. We use it to send you market commentary and education updates. You can unsubscribe from any email at any time.
• Chat messages — if you use the “Questions?” chat widget, we receive your name, email, optional Telegram handle, and the message you send. We use this only to reply to you.
• Ask Thrive AI account — when you sign up for the Ask Thrive AI feature, we store your email address, the time you signed up, your approximate country (from your IP at signup), and a count of how many questions you have asked today. We also store the text of questions you ask the AI briefly, so we can debug abuse and improve safety filters. We do not sell or share this data. You can delete your account by emailing [email protected].
• Ask Thrive AI -- third-party AI provider — your question text and a snapshot of live market data are sent to xAI (Grok) to generate an answer. xAI's API terms state they do not train models on API traffic by default. We do not attach your email or identity to the request.
• Analytics data — if (and only if) you accept cookies via our consent banner, Google Analytics 4 records your IP address, browser information, pages visited, and referring URL. We use this to understand aggregate traffic patterns. No analytics is loaded until you consent.
• Server and security logs — our hosting provider (Cloudflare) records standard request data (IP, user agent, timestamp) to deliver the site and protect it from abuse. These logs are short-lived.

Legal basis (GDPR)

• Consent — analytics cookies and marketing email.
• Legitimate interest — replying to chat messages, protecting the site from abuse, and aggregate traffic analysis post-consent.
• Contract — delivering the newsletter you subscribed to.

Cookies and similar technologies

We use a small number of cookies and local storage keys:

• mt5gold_cookie_consent (essential, local storage) — remembers whether you accepted or rejected analytics cookies. Stored for 12 months.
• _ga, _ga_* (analytics, Google) — only set after you accept. Used to distinguish unique visitors. You can clear them at any time from your browser, or click “Cookie settings” in the footer to withdraw consent.

Third-party processors

We rely on the following providers. Each is bound by its own data protection terms and appropriate safeguards (such as EU Standard Contractual Clauses where data is transferred outside the EEA).

• Cloudflare — website hosting, CDN, and DDoS protection.
• Google (Google Analytics 4) — traffic analytics, only after you accept cookies.
• Resend — email delivery for the newsletter, Ask Thrive AI sign-in codes, and other transactional emails.
• xAI (Grok) — powers the Ask Thrive AI custom-question feature. Receives your question text and a live market data snapshot per call. Governed by the xAI API Terms of Service.
• Cloudflare Turnstile — bot-protection challenge shown during Ask Thrive AI signup. Turnstile does not use tracking cookies.
• YouTube (Google) — video embeds on some articles. When a video plays, Google may set its own cookies under its privacy policy.

International transfers

Some of our processors (Google, Cloudflare, Resend) are headquartered in the United States. Where personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards to protect your data.

How long we keep your data

• Newsletter subscribers — until you unsubscribe.
• Chat messages — up to 24 months, then deleted.
• Analytics (post-consent) — retained by Google for 14 months by default.
• Server logs — 30 days at most.

Your rights

Depending on where you live you have some or all of the following rights:

• Access — a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data.
• Restriction and objection — limit or object to certain processing.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, without affecting past processing.
• Complain — lodge a complaint with your local data protection authority (EU), the ICO (UK), or the California Attorney General.

To exercise any right, email [email protected]. We respond within 30 days.

California residents (CCPA / CPRA)

We do not sell or share your personal information for monetary consideration. You have the right to know what we collect, request deletion, and be free from discrimination for exercising those rights. Submit requests to [email protected].

Children

ThriveInMarkets publishes content aimed at adults interested in financial markets. We do not knowingly collect personal data from anyone under 18. If you believe a minor has shared data with us, contact us and we will delete it.

Changes to this policy

If we materially change this policy we will update the effective date above and, where appropriate, notify newsletter subscribers by email.