Back to home

Privacy Policy

Last updated: December 5, 2025

1. Introduction

At Curate, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our wish list service ("the Service").

2. Information We Collect

2.1 Information from Third-Party Authentication

When you sign in to Curate using Google or Apple, we receive basic profile information including:

  • Your name
  • Email address
  • Profile picture (if available)
  • Unique identifier from the authentication provider

2.2 Content You Create

We store the content you create on Curate, including:

  • Wish lists and their titles
  • Items you add to your lists (URLs, titles, descriptions, images, prices)
  • Categories and priority levels you assign
  • Item ordering and organization preferences

2.3 Automatically Collected Information

We automatically collect certain technical information when you use the Service:

  • Browser type and version
  • Device information
  • IP address
  • Usage data (pages visited, features used, time spent)
  • Error logs and performance data

2.4 Metadata from URLs

When you add a URL to your list, we fetch publicly available metadata from that webpage, including Open Graph and Twitter Card data (title, description, image, price). This process is automated and does not require access to any private information.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service
  • To authenticate you and manage your account
  • To store and display your wish lists and items
  • To generate shareable links when you choose to share your lists
  • To improve and optimize the Service
  • To monitor usage patterns and diagnose technical issues
  • To communicate with you about service updates or issues
  • To ensure security and prevent fraud or abuse

4. Data Storage and Security

Your data is stored securely on Amazon Web Services (AWS) infrastructure, including:

  • DynamoDB for database storage
  • CloudFront for content delivery
  • Lambda for serverless processing

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS) and at rest, access controls using AWS IAM, and regular security monitoring. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

5.1 Public Sharing

When you choose to generate a shareable link for a list, that list becomes publicly accessible to anyone with the link. Shared lists are read-only and do not expose your personal information beyond what you've chosen to include in the list itself.

5.2 Service Providers

We use third-party service providers to help operate our Service:

  • Amazon Web Services (AWS) for hosting and infrastructure
  • Google and Apple for authentication

These providers have access to your data only to perform services on our behalf and are obligated to protect your information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 Business Transfers

If Curate is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

6. Your Rights and Choices

You have the following rights regarding your personal data:

  • Access: You can access your data at any time through your account
  • Correction: You can update or correct your lists and items directly in the Service
  • Deletion: You can delete individual items, entire lists, or request account deletion by contacting us
  • Export: You can request a copy of your data by contacting us
  • Withdrawal of Consent: You can stop using the Service at any time

7. Cookies and Tracking

We use essential cookies to maintain your session and authenticate you. These cookies are necessary for the Service to function and cannot be disabled. We do not use advertising or tracking cookies.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

9. Children's Privacy

Curate is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected]. We will respond to your inquiry as soon as possible.