Privacy Policy

1. Introduction

Curadeco, LLC, a Delaware limited liability company ("Curadeco," "Company," "we," "us," or "our") operates the curadeco.com website and related services (collectively, the "Service," "Platform," or "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website or use our Services.

This Privacy Policy applies to all users of our Services, including venues that create storefronts ("Venue Partners" or "Venues"), visitors who browse venue storefronts ("Guests" or "Visitors"), and anyone who interacts with our Platform.

We respect your privacy and are committed to protecting personally identifiable information you may provide us through the Website. We have adopted this Privacy Policy to explain what information may be collected on our Website, how we use this information, and under what circumstances we may disclose the information to third parties.

2. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Curadeco, LLC
c/o Legalinc Corporate Services Inc.
131 Continental Dr, Suite 305
Newark, DE 19713
United States
Email: hello@curadeco.com
Website: www.curadeco.com

For data protection inquiries specifically, please email: privacy@curadeco.com

3. Information We Collect

We collect information you provide directly to us, information we collect automatically when you use our Services, and information from third-party sources.

3.1 Information Venue Partners Provide Directly

When you register as a Venue Partner or use our Services, we collect information you voluntarily provide, including:

• Account Information: Your name, business name, email address, phone number, and password when you create an account
• Business Details: Business address, venue type, business registration information, and venue description
• Payment Information: Information needed for commission payments through Stripe Connect. Note that Stripe collects and stores tax identification information directly when required by law; we do not have access to your full tax ID or banking details
• Content: Product listings, descriptions, images, prices, and any other content you upload to create your digital storefront
• Communications: Information contained in your communications with us, including support requests, feedback, and correspondence

3.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage patterns:

• Device Information: Hardware model, operating system and version, unique device identifiers, browser type and version, IP address, and general geographic location derived from your IP address
• Usage Information: Pages or screens viewed, time spent on pages, links clicked, QR codes scanned, products viewed, and the pages visited before navigating to our Services
• Analytics Data: We use Google Analytics and similar services to collect aggregated information about usage patterns, traffic sources, and user behavior on our Platform
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities over time and across different websites following your use of our Services

3.3 Information We Collect from Guests

For Guests visiting venue storefronts, we collect limited information:

• Browsing Data: Pages viewed, products clicked, time spent on pages, and referral source (such as QR code scan location)
• Device Data: Browser type, device type, operating system, and general geographic location (city/state level)
• Interaction Data: Clicks on affiliate links, which are tracked by our affiliate network partners for commission attribution

We do not require Guests to create accounts or provide personal information unless they voluntarily contact us.

3.4 Information from Third Parties

We receive information from third parties including:

• Stripe: Verification of Venue Partner identity and payment capability status
• Affiliate Networks: Commission data, conversion tracking, and transaction verification from networks including Amazon Associates, ShareASale, CJ Affiliate, and others
• Analytics Providers: Aggregated data about user behavior and demographics

4. How We Use Information

We use the information we collect for various purposes described below.

4.1 To Provide and Maintain Our Services

• Process and manage Venue Partner accounts
• Create and maintain digital storefronts
• Generate QR codes for physical-to-digital commerce
• Track affiliate commissions and process payments
• Provide customer support and respond to inquiries
• Send administrative information, such as updates to our terms or policies

4.2 To Improve and Develop Our Services

• Analyze usage patterns to improve user experience
• Develop new features and functionality
• Monitor and analyze trends and usage
• Conduct research and analysis
• Test and troubleshoot new products and features

4.3 For Marketing and Communications

• Send Venue Partners information about new features, products, or services
• Provide Venue Partners with news and information we think will be of interest
• Send promotional communications, with the ability to opt-out

4.4 For Legal and Safety Purposes

• Comply with applicable laws, regulations, and legal processes
• Protect the rights, property, and safety of Curadeco, our users, and the public
• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms of Service and other agreements

4.5 For Business Operations

• Process commission payments and maintain financial records
• Analyze Platform performance and business metrics
• Make business decisions about current and future Service offerings
• Coordinate with Stripe for tax reporting requirements

5. How We Share Information

We share information in the following circumstances or as otherwise described in this Privacy Policy.

5.1 With Service Providers

We share information with third-party service providers that perform services on our behalf, including:

• Payment Processing: Stripe for processing payments to Venue Partners
• Email Services: Resend for transactional and marketing emails
• Analytics: Google Analytics for usage analytics
• Hosting: Vercel for platform hosting and Supabase for database services
• Affiliate Networks: To track commissions and attribute sales

These service providers are authorized to use your information only as necessary to provide services to us.

5.2 With Affiliate Networks and Merchants

We share limited transaction data with affiliate networks and merchants to:

• Track and verify commissions
• Attribute sales to the appropriate venue
• Comply with affiliate program requirements
• Process commission payments

This data typically includes anonymized venue identifiers, transaction amounts, and product information, but does not include personal information of individual Guests.

5.3 For Legal Reasons

We may disclose information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law or legal process
• Respond to valid government requests, including from law enforcement or other government agencies
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Services
• Protect the personal safety of users of the Services or the public
• Protect against legal liability

5.4 With Consent

We may share information with your consent or at your direction. For example, Venue Partners may authorize us to share information with additional third-party services.

5.5 Business Transfers

We may share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5.6 Aggregated or Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you. This may include analytics about platform usage, shopping trends, or venue performance that we may share or sell to third parties for business intelligence purposes.

6. Data Retention

We retain information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

• Venue Account Information: We retain Venue Partner account information for the duration of the account and for three (3) years after account closure to comply with legal obligations
• Transaction Records: Commission records are retained for three (3) years for accounting purposes; Stripe maintains tax-related records for seven (7) years as required by law
• Analytics Data: Usage analytics are retained for twenty-four (24) months
• Communications: Support communications and correspondence are retained for three (3) years for legal protection
• Marketing Lists: Email marketing lists are maintained until opt-out

When we no longer need to retain information, we will delete it or anonymize it in accordance with our data retention policies and applicable law.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

We use the following categories of cookies:

• Essential Cookies: Required for the operation of our Services, including cookies that enable you to log into secure areas
• Analytics/Performance Cookies: Allow us to count visits and traffic sources to measure and improve performance
• Functionality Cookies: Enable enhanced functionality and personalization
• Affiliate Tracking Cookies: Used to track clicks and attribute commissions through our affiliate network partners

7.2 Your Cookie Choices

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.

• Browser Controls: You can set your browser to refuse all or some browser cookies
• Google Analytics Opt-Out: Visit tools.google.com/dlpage/gaoptout
• Do Not Track: We honor Do Not Track signals for marketing cookies

8. Your Rights and Choices

8.1 Account Information

Venue Partners may access, update, or correct account information at any time by logging into their account or contacting us at hello@curadeco.com.

8.2 Email Communications

You may opt out of receiving promotional emails from us by following the instructions in those emails or by contacting us. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.

8.3 Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Portability: Request a copy of your personal information in a structured, machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request that we restrict processing of your personal information

To exercise these rights, please contact us at privacy@curadeco.com. We may need to verify your identity before processing your request.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose what personal information we collect, use, disclose, and sell
• Right to Delete: You may request deletion of personal information we collected from you
• Right to Opt-Out: You may opt out of the sale of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@curadeco.com. You may designate an authorized agent to make a request on your behalf.

We do not sell personal information in the traditional sense, but we may share anonymized, aggregated data with third parties for business purposes.

10. European Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

10.1 Legal Basis for Processing

We process personal information under the following legal bases:

• Contract: To perform our contract with Venue Partners
• Legitimate Interests: For business operations, analytics, and platform improvement
• Consent: For marketing communications and certain cookies
• Legal Obligations: To comply with applicable laws

10.2 Your GDPR Rights

In addition to the rights described above, you have the right to:

• Withdraw consent where we rely on consent for processing
• Lodge a complaint with your local data protection authority
• Object to processing based on legitimate interests
• Request restriction of processing

10.3 International Data Transfers

Your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. We implement appropriate safeguards for international data transfers, including standard contractual clauses where required.

11. Children's Privacy

Our Services are not directed to individuals under eighteen (18) years of age, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information. If you believe we have collected information from a child, please contact us at privacy@curadeco.com.

12. Security

We implement reasonable administrative, technical, and physical security measures designed to protect against unauthorized access, use, modification, or disclosure of personal information. These measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security audits and assessments
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Third-Party Links

Our Services may contain links to third-party websites, including merchant sites and affiliate network partners. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending an email to Venue Partners
• Providing a prominent notice on our Platform

Your continued use of our Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

15. International Users

Our Services are provided from the United States. If you are accessing our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to the transfer and processing of your information in the United States.

16. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you need this Privacy Policy in an alternative format, please contact us at privacy@curadeco.com.

17. How to Contact Us

If you have questions about this Privacy Policy, our data practices, or your privacy rights, please contact us at:

Email: privacy@curadeco.com
General Inquiries: hello@curadeco.com

Mailing Address:
Curadeco, LLC
c/o Legalinc Corporate Services Inc.
131 Continental Dr, Suite 305
Newark, DE 19713
United States

For EU/EEA Residents:
If you are located in the EU/EEA and have concerns about our data processing activities that we have not adequately addressed, you have the right to lodge a complaint with your local data protection authority.

This Privacy Policy was last updated on December 11, 2025 and is effective as of December 1, 2025.