Privacy Policy

Effective Date: January 1, 2026 Last Updated: ${new Date().toLocaleDateString('en-US', { month: 'long', day: 'numeric', year: 'numeric' })}

Curious About ("curiousabout.net", "we", "our", or "us") is dedicated to protecting your privacy and ensuring your personal data is handled in a safe, transparent, and GDPR-compliant manner.

1. Data Controller Identification

Curious About is operated by Curious About Ltd ("Curious About", "we", "our", or "us"). For any inquiries regarding data protection, GDPR compliance, or data subject requests, the designated Data Controller can be contacted at: privacy@curiousabout.net (or legal@curiousabout.net).

2. Information We Collect

• Creator Account Information: When registering for a Creator Pass, we collect your email address, name, and securely hashed password credentials (or your verified Google profile info via OAuth 2.0).
• Payment Information: Subscription billing ($5/month) is processed directly by Stripe, Inc. We never receive, process, or store raw credit card numbers or CVC codes on our servers.
• Funnel Subscriber Emails: When visitors subscribe to a creator's funnel, their email is collected solely for delivery to the creator's configured email provider (such as Brevo).
• Security & Integrity Logs: Timestamps and anonymized request headers are recorded for security, fraud prevention, and GDPR Article 7 consent verification.

3. Legal Basis for Processing (GDPR Article 6)

• Contractual Necessity: Processing account details and subscription status to deliver the $5/month Creator Pass.
• Consent: When subscribers submit their email into a creator's funnel form to receive correspondence.
• Legitimate Interests: Platform security, fraud mitigation, and service uptime.

4. Third-Party Data Processors

• Stripe, Inc.: PCI-DSS Level 1 certified payment processor handling subscriptions, billing invoices, and payment methods.
• Brevo (Sendinblue SAS): Newsletter distribution platform storing subscriber records. ISO 27001 certified and GDPR compliant.
• Google OAuth: Secure authentication provider for 1-click creator login.

5. Data Retention & Deletion

We retain creator account information as long as the account is active. Creators may cancel subscriptions and delete their accounts and funnels at any time from their creator dashboard. Subscribers may unsubscribe from any email with 1 click.

6. Your GDPR Rights

Under the EU General Data Protection Regulation (GDPR) and UK GDPR, you have the following rights:

• Right to Access & Data Portability (Article 20): You have the right to receive an export of your account, funnel configurations, and subscriber activity in a structured, commonly used, and machine-readable format (JSON/CSV).
• Right to Rectification (Article 16): Update your personal information and funnels anytime via your dashboard.
• Right to Erasure ("Right to be Forgotten", Article 17): Request complete deletion of your personal records and funnels.
• Right to Restriction & Withdrawal of Consent (Article 7 & 18): Revoke newsletter subscriptions or cancel recurring memberships at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a competent supervisory authority (such as the UK Information Commissioner's Office - ICO, or your local EU Member State Data Protection Authority).

For any privacy or data rights requests, please contact: privacy@curiousabout.net