Privacy Policy

Overview

THRY ARCHIVE LLC (“THRY.ARCHIVE,” “we,” “us,” or “our”) operates the website thryarchive.com and provides tools, services, and a merchandise shop. This Privacy Policy explains how we collect, use, store, and protect your information when you use any part of our platform.

Information We Collect

Account Information

When you create a dashboard account (through tool access applications or bundle checkout), we collect your name, email address, and artist or label name. Your password is hashed using bcrypt before storage and is never stored in plain text.

Contact & Application Forms

When you submit a contact form, we collect your name, email address, inquiry type, and message. When you apply to join the team, we additionally collect your role, location, social media handles (Instagram, TikTok, Twitter/X), portfolio URL, experience, and a personal statement. When you apply for tool access, we collect your name, email, artist name, role, and a message.

Shop & Payment Information

When you purchase merchandise, payment processing is handled entirely by Stripe. We do not directly collect or store your credit card number, billing address, or other payment details. Stripe collects your email address and shipping address on our behalf to fulfill your order. After checkout, we receive your email, shipping name, and shipping address from Stripe to coordinate order fulfillment through our print-on-demand partners.

Smart Links

When you visit a smart link page, we track aggregate click counts per platform (e.g., Spotify, Apple Music). No personal information is collected from clicks. If you submit a presave or contest entry form on a smart link page, we collect your name and email address.

Blog Engagement

When you interact with blog posts, we track anonymous view counts (rate-limited to one per IP per 24 hours). Like and dislike reactions are anonymous. If you leave a comment, we collect the display name you provide and your comment text.

Academy

When you apply to the Academy as a student or teacher, we collect your name, email, background, goals, portfolio URL, and course-related information. Academy accounts store your email, name, and a hashed password.

YouTube & Google Data (THRY.VISUAL)

When you connect your YouTube account through THRY.VISUAL, we access the following through Google OAuth 2.0:

• Your YouTube channel name and ID (to display which channel you are uploading to)
• Permission to upload videos to your YouTube channel on your behalf

We store your OAuth refresh token securely to maintain your YouTube connection between sessions. We do not access your existing YouTube videos, playlists, subscribers, analytics, or any other YouTube data beyond what is listed above.

Client-Side Processing

Several tools process data entirely in your browser without sending it to our servers. The QR Code Generator runs fully client-side. Audio files and cover art uploaded to THRY.VISUAL are processed in your browser and are never stored on our servers.

IP Addresses

We use connection information, including IP addresses, to limit abuse on login attempts, form submissions, and other endpoints. Hosting and service providers may also process connection information in operational or security logs under their own retention practices. We do not promise that IP addresses exist only in application memory.

Cookies & Local Storage

Cookies

We use the following cookies, all strictly necessary for authentication:

• dashboard-session - Authenticates your dashboard login. HTTP-only, secure in production, expires after 30 days.
• academy-session - Authenticates your Academy login. HTTP-only, secure in production, expires after 30 days.
• NextAuth session - Used for administrative access only. JWT-based, expires after 8 hours.

We do not use any analytics cookies, advertising cookies, or third-party tracking cookies.

Browser Local Storage

We use your browser’s local storage for the following purposes:

• Remembering whether you already submitted a presave or contest entry
• Storing your blog like/dislike reactions and view state
• Remembering your comment display name
• Storing your shopping cart contents

How We Use Your Information

• To provide, maintain, and improve our services and tools
• To authenticate your account and manage tool access
• To process and fulfill merchandise orders
• To send transactional emails (account confirmation, password resets, order confirmations, application responses)
• To upload videos to YouTube on your behalf when you use THRY.VISUAL
• To respond to contact form inquiries and applications
• To prevent abuse through rate limiting

We do not use your information for marketing, advertising, or profiling purposes. We do not send promotional emails.

Data Storage & Security

Account data, application records, and other persistent information are stored using Supabase database and storage services. Vercel hosts the website and server functions. We use access controls and HTTPS for website connections, and hash account passwords before storage. No method of storage or transmission is completely secure.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

Our platform integrates with the following third-party services:

• Vercel - Hosting and server functions. See Vercel's Privacy Policy.
• Supabase - Database and uploaded-file storage. See Supabase's Privacy Policy.
• Stripe - Payment processing for merchandise purchases. Stripe collects payment information, email, and shipping addresses directly. See Stripe's Privacy Policy.
• Resend - Transactional email delivery. Email addresses are shared with Resend solely to deliver emails you trigger (confirmations, password resets, application notifications). See Resend's Privacy Policy.
• Google / YouTube - OAuth authentication and video uploads via the YouTube Data API v3 (THRY.VISUAL only). See Google's Privacy Policy.
• Printify / Printful - Print-on-demand order fulfillment. Your shipping name and address are shared with these providers to print and ship your merchandise order.

Google API Services User Data Policy

THRY.VISUAL’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide the video upload functionality you request and do not use it for any other purpose.

Revoking Access

You can disconnect your YouTube account from THRY.VISUAL at any time using the “Disconnect” button in the tool. This deletes your stored OAuth tokens from our servers.

You can also revoke access from your Google Account permissions page.

Session Licenses and Accounts

When Session signup and sales open, we collect name, email, license and order information, acceptance time, and trial-request user agent. Online license checks provide key ID, machine ID, app version/build, and operating system for activation management. One-time sign-in links expire after 15 minutes; the HTTP-only session-account cookie lasts up to seven days. Supabase stores hashed tokens and license records. Resend delivers sign-in and key emails; Stripe hosts payment entry and supplies order/payment status. Keys contain readable name and email information. For retention, privacy requests, and further details, see Session legal information.

Session Feedback and Privacy Requests

Session bug reports and feature ideas submitted through our website include the contact details and message you provide. We use them to respond, investigate issues, and plan improvements. Avoid sending license keys, passwords, confidential project files, or personal information that is not needed for the report. Reports are retained as needed for support and development, subject to applicable legal obligations.

Session update and installer requests are counted by day and release. If you choose to send a Session crash report, it may include version/build, operating system, report text, your description, and a memory dump that can contain file paths, project fragments, or personal information from application memory. Files are stored separately in private Supabase storage with owner-admin access and time-limited download links. Reports are retained for debugging until removed through retention controls or a supported deletion request; no fixed automatic deletion schedule is currently promised. Network identifiers are hashed for report rate limiting, while providers may maintain operational logs. For details and privacy requests, see Session legal information.

Contact us to request access, correction, or deletion of your information, or to exercise other privacy rights available under the law where you live. We may need to verify your identity and may retain records required for security, transactions, or legal compliance. Some rights depend on your location and the services you use.

Data Retention

We retain account data for as long as your account is active. Application data is retained for the duration of the review process and may be kept for recordkeeping purposes. OAuth tokens are retained until you disconnect your YouTube account or revoke access. Blog comments are retained until manually removed. Smart link entries are retained for the duration of the associated campaign.

You may request deletion of your account and all associated data by contacting us.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will provide additional notice or obtain consent for material changes when applicable law requires it.

Contact

For questions about this Privacy Policy or to request data deletion, contact THRY ARCHIVE LLC, a Wyoming limited liability company, at contact@thryarchive.com or thryarchive.com/contact. Our principal office and mailing address is 30 N Gould St Ste N, Sheridan, WY 82801, United States.