Privacy Policy

1. Who we are

Cureledger, Inc. ("Cureledger," "we," "us," or "our") operates this website and related services. We are a Delaware corporation based in Raleigh, North Carolina, United States. This Privacy Policy describes how we handle personal information when you visit our site, join our mailing list, use our chat features, or otherwise interact with us online.

For data protection purposes in the European Economic Area ("EEA") and United Kingdom ("UK"), Cureledger, Inc. is the controller of your personal information described here, unless we tell you otherwise in a specific notice.

2. Information we collect

We may collect the following categories of information:

• Contact and account data: for example, your email address if you sign up for updates, join a waitlist, or contact us.
• Technical and usage data: IP address, browser type, device identifiers, general location derived from IP, pages viewed, and timestamps. We use this to operate, secure, and improve the site.
• Communications: messages you send us, including through forms, email, or any chat or support channel we offer.
• Information you choose to provide: any other personal information you voluntarily submit.

We do not intentionally collect sensitive health information through this marketing site. If you are invited to separate research or product programs, those programs will provide their own notices.

3. How we use information

We use personal information to:

• Provide, maintain, and improve our website and services;
• Respond to your requests and communicate with you;
• Send marketing or informational messages when you have opted in or where law allows;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with law and enforce our terms; and
• Analyze use of our site in aggregate or de-identified form.

4. Legal bases (EEA, UK, Switzerland)

Where the GDPR or UK GDPR applies, we rely on one or more of the following:

• Consent where we ask for it, for example for certain cookies or marketing emails you can withdraw at any time;
• Contract where processing is necessary to respond at your request before entering a contract or to perform our agreement with you;
• Legitimate interests where we have a legitimate interest that is not overridden by your rights, for example site security, analytics, and product improvement, balanced against your expectations; and
• Legal obligation where we must process data to comply with law.

5. Sharing and subprocessors

We share personal information with vendors who help us run our business, such as hosting, analytics, email delivery, and customer support tools. They may process data only on our instructions and subject to appropriate contractual commitments where required.

We may also disclose information if we believe in good faith that disclosure is required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not sell your personal information for money as that term is defined under the CCPA.

6. International transfers

We are located in the United States. If you access our site from the EEA, UK, or Switzerland, your information may be transferred to the United States and other countries that may not be deemed to provide an adequate level of data protection. Where required, we use appropriate safeguards such as the EU Commission-approved Standard Contractual Clauses or the UK International Data Transfer Addendum, together with supplementary measures where appropriate.

7. Retention

We keep personal information only as long as needed for the purposes described here, unless a longer period is required or permitted by law. Criteria for retention include whether you have an ongoing relationship with us, whether we must keep records to resolve disputes, and applicable legal requirements.

8. Your privacy rights

EEA, UK, Switzerland

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information;
• Restrict or object to certain processing;
• Data portability where applicable;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact privacy@cureledger.com. We may need to verify your request.

California residents (CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CPRA") may grant you additional rights, including:

• The right to know what personal information we collect, use, and disclose;
• The right to delete personal information we hold, subject to exceptions;
• The right to correct inaccurate personal information;
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising, where applicable (we do not sell personal information for monetary consideration);
• The right to limit use of sensitive personal information where that category applies; and
• The right not to receive discriminatory treatment for exercising these rights.

California residents may designate an authorized agent to make a request on their behalf. We will verify agent authority as required by law.

Shine the Light: California Civil Code Section 1798.83 permits California users to request certain information regarding disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes as described in that statute.

Other U.S. states

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact us at privacy@cureledger.com to make a request. We will respond in line with applicable law.

9. Children

Our site is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

10. Cookies and similar technologies

We and our vendors may use cookies, local storage, pixels, and similar technologies for essential operation, preferences, analytics, and where permitted, marketing. You can control cookies through your browser settings. Where required by law, we will obtain consent before using non-essential cookies.

11. Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. If changes are material, we will provide additional notice as required by law.

13. Contact

Questions about this Privacy Policy or our privacy practices may be sent to privacy@cureledger.com or by mail to:

Cureledger, Inc.
Attn: Privacy
Raleigh, NC
United States