Data Processing Addendum

Data Processing Addendum

Thrive DeFi, LLC offers a data processing addendum for customers who require one under the GDPR or UK GDPR. The addendum incorporates the European Commission's Standard Contractual Clauses (2021/914) for transfers outside the EEA and the UK. It addresses:

• Subject matter and duration of processing
• Categories of data subjects and personal data
• Processor obligations under Article 28, including confidentiality, subprocessor controls, breach notification, and deletion
• An exhibit listing vendors, provided with the signed addendum
• Audit and cooperation rights for enterprise customers

Where the addendum applies, it governs the processing of personal data on the customer's behalf. Consumer use of the Services remains governed by the Terms of Service and the Privacy Policy. Request a countersigned copy from legal@thrive.fi.

Master Services Agreement

For enterprise, API, and team deployments, Thrive offers a master services agreement covering service scope, service levels, liability caps, intellectual property (customer data as against the Thrive platform), and pricing on an order form. Consumer subscriptions remain governed by the Terms of Service.

Order Form

An enterprise order form references the master services agreement and states the tier, seats, support level, processing scope, and term. Contact cs@thrive.fi.

Intellectual Property

Thrive DeFi, LLC owns Thrive signals, Thrive Metrics (TPS, TAS, and TRP), the workbench, moat archives, and brand assets. Journal data and exchange-synced trades remain user data. Creator marketplace content is licensed to subscribers under the Terms of Service. Founder and contractor assignment records are available under NDA in the due diligence package.

Due Diligence

An acquirer may request an MRR export, a vendor register, a security questionnaire, a sync-volume attestation, and an intellectual-property summary. Email cs@thrive.fi with the subject "Due diligence request."