Privacy Policy

1. Overview

This Privacy Policy explains how ThrivioHealth Pty Ltd (“we”, “us”) handles personal information in connection with ThrivioMeet (the “Service”). We aim to handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

2. Information we collect

The information we hold depends on how you use the Service:

• Clinicians and administrators: account details such as name, email, organisation, and role.
• Organisations and clinics: configuration such as clinic names, rooms, branding, and settings.
• Patients and guests: a display name only. Guests do not hold accounts and we do not require patient health identifiers to join a meeting.

3. Call media and recordings

Live audio and video are encrypted in transit and routed to deliver the call. Recording is off by default; where an organisation enables it, a recording is made only after participants consent and is stored in private, access-controlled storage. Recordings remain under the control of the hosting organisation.

4. How we use information

We use personal information to provide, secure, and improve the Service; to authenticate clinicians; to operate meetings and waiting queues; to keep an audit record of key actions; and to meet our legal obligations.

5. Hosting and data location

Application data is hosted in Australia (Sydney region). Real-time call media is carried by a specialist video infrastructure provider. We aim to keep data within Australia where practicable; any cross-border handling will be described in the final, legally reviewed version of this policy.

6. Service providers

We rely on trusted third-party providers to run the Service, including infrastructure and database hosting, and real-time video infrastructure. These providers process information on our behalf under their own security and privacy commitments.

7. Retention and security

We keep personal information only as long as needed for the purposes above or as required by law, and we apply technical and organisational measures to protect it (including tenant isolation, access controls, and encryption in transit). No system can be guaranteed completely secure.

8. Your rights

Subject to law, you may request access to, or correction of, the personal information we hold about you. Patients should direct requests about their clinical records to the treating clinician or organisation, who is the custodian of that information.

9. Changes and contact

We may update this policy from time to time and will post the revised version here with a new “last updated” date. For privacy questions or requests, contact privacy@thriviomeet.com.au.