Trust, Security & Privacy

• • Accounts are protected by email/password sign-in with industry-standard hashing.
• • Sessions use signed tokens; signing out invalidates your session on this device.
• • Administrative actions are restricted to verified staff accounts.

All traffic to Thrive & Glow Collective is served over HTTPS (TLS). Data is stored with our managed database and storage providers, which encrypt data at rest using their platform-standard encryption.

• • Account info you provide (name, email, business profile details).
• • Bookings, messages, and listings you create on the platform.
• • Basic technical logs needed to operate the service securely.

We do not sell your personal information.

We use cookies and local storage that are strictly necessary to keep you signed in and to operate core features. We may use privacy-respecting analytics to understand aggregate usage and improve the product.

The platform relies on trusted third-party providers for hosting, database, email delivery, and payment processing. Each provider is selected with security and reliability in mind, and only receives the data necessary to perform its function.

We retain account and booking data for as long as your account is active or as needed to provide the service. To request deletion of your account or personal data, contact us at the address below.

Questions about security, privacy, or your data? Email us at hello@thriveandglowcollective.com. If you believe you've found a security vulnerability, please report it to the same address and we'll respond as quickly as possible.