Privacy Policy

THREVO is an organisational resilience platform. This policy describes how the public website and the platform are designed to handle information. It is the product policy for this website, and a signed agreement with your organisation governs any deployment.

What the public site collects

The marketing pages can be read without an account. The contact form collects your name, work email, organisation, and message so THREVO can reply. That form sends the details only when the THREVO API is connected. Until then, the message stays in your browser and is not stored by this website.

Accounts and roles

Sign-in is handled by the THREVO API. A session is created only when that service returns one. Access is limited by role: Super Admin, Organisation Admin, HR Admin, Manager, Employee, Practitioner, and Executive each have a defined scope.

Employee information

Wellbeing activity belongs to the person who takes part. Employer, HR, manager, and executive views are designed around consent, anonymisation, and aggregated reporting. Those views are not a place for individual health records.

Care and practitioners

A route into practitioner care is available when a person chooses it. Information shared for care is not the same information used in organisational scores.

Security

The platform is designed for secure authentication, role-based access, auditability of sensitive actions, and reporting that removes direct identifiers before a pattern is shown to the organisation.

Contact

Questions about this policy can be sent through the contact page. If the contact service is unavailable, the form will tell you that the message was not sent.