Privacy Policy

Privacy Policy

Your privacy is important to us. It is Curtsy's policy to respect your privacy regarding any information we may collect from you across our website, https://curtsyapp.com, and other sites we own and operate.

1. Information we collect

Log data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

Device data

We may also collect data about the device you’re using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal information

We may ask for personal information, such as your:

• Name
• Email
• Social media profiles
• Date of birth
• Phone/mobile number
• Home/Mailing address
• Website address
• Payment information

2. Legal bases for processing

We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.

These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:

• it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
• it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
• you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter); or
• we need to process your data to comply with a legal obligation.

Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).

We don’t keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.

3. Collection and use of information

We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes:

• to enable you to customize or personalize your experience of our website;
• to attribute any content (eg. posts and comments) you submit that we publish on our website;
• to process any transactional or ongoing payments;
• to deliver products and/or services to you;
• to enable you to access and use our website, associated applications and associated social media platforms;
• to contact and communicate with you;
• for internal record keeping and administrative purposes;
• for analytics, market research and business development, including to operate and improve our website, associated applications and associated social media platforms;
• to run competitions and/or offer additional benefits to you;
• for advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you;
• to comply with our legal obligations and resolve any disputes that we may have; and
• to consider your employment application.

4. Disclosure of personal information to third parties

We may disclose personal information to:

• third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, ad networks, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers, professional advisors, and payment and fraud-prevention providers, including Stripe;
• our employees, contractors and/or related entities;
• sponsors or promoters of any competition we run;
• courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
• third parties, including agents or sub-contractors, who assist us in providing information, products, services or direct marketing to you; and
• third parties to collect and process data.

4a. Privacy Policy Governing User Phone Numbers and SMS Marketing

We do not share phone numbers with third parties for marketing purposes. Per carrier requirements for SMS/MMS, consent is only be obtained from the individual consumer and not on behalf of another individual. Opt-in data and consent will never be shared, sold, or bought.

5. International transfers of personal information

The personal information we collect is stored and processed in United States and Philippines, or where we or our partners, affiliates and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means.

Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to similar data protection laws to the ones in our jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction and this might mean that you will not be able to seek redress under our jurisdiction’s privacy laws.

6. Your rights and controlling your personal information

Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. If you are under 16 years of age, you must have, and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.

Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Notification of data breaches: We will comply laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

7. Cookies and website tracking

We use necessary cookies and browser storage for security, sign-in, cart contents, preferences, and other features you request. These technologies are required for the website to work and cannot be disabled through our privacy controls.

Payments and fraud prevention

Curtsy uses Stripe to provide secure payments, determine whether supported payment methods are available, authenticate payment users, and detect and prevent fraud, card testing, and other abuse. On item, checkout, and cashout pages, Stripe.js may load before you begin a purchase or payout so these functions can operate throughout the transaction session. Stripe.js may also load hCaptcha to help prevent automated abuse and provide additional security signals to Stripe.

Stripe may collect information through cookies and similar technologies, including IP address; browser, device, screen, and approximate-location information; page and referring-page information; Stripe cookie or device identifiers; and activity signals such as interaction patterns and time spent on pages. If you begin or complete a purchase or payout, Stripe also processes the transaction, contact, shipping, payment, or payout information needed to provide the applicable service. Stripe uses this information to provide and improve its payment services, prevent fraud and loss, authenticate users, determine payment-method availability, and evaluate the performance of its payment services.

We treat Stripe's payment-security and fraud-prevention technologies as necessary and do not disable them when you decline Curtsy's optional analytics or advertising choices. Curtsy does not use this processing for targeted advertising. Stripe states that it does not use advanced fraud-detection signals for advertising or rent, sell, or provide those signals to advertisers. Stripe processes information under its agreements with us and its own privacy disclosures. Learn more in Stripe's Privacy Policy and Privacy Center.

Optional analytics

If you choose to allow analytics, we load Google Analytics to help us understand how people use the website and improve its performance. Google may receive online activity and device information, such as a standardized page category, event time, IP address, browser and device details, and analytics cookie or device identifiers. We configure Google Analytics so that advertising storage, Google signals, and ad personalization remain disabled, and we do not intentionally send Google full page URLs, URL query strings or fragments, search terms, listing identifiers, form contents, or other information that directly identifies you.

Optional advertising and sharing

If you separately choose to allow advertising and sharing, we load Meta Pixel to measure advertising performance and understand whether an ad led to a visit. Meta may receive online activity and device information, such as an eligible public page address or category, a public listing identifier when you view an eligible item page, event time, IP address, browser and device details, and advertising cookie or device identifiers. We disable automatic configuration and advanced matching and do not intentionally send Meta names, email addresses, phone numbers, form contents, URL query strings or fragments, search terms, or identifiers from product grids. This choice is treated separately because disclosure to Meta for cross-context behavioral advertising may be considered a sale or sharing of personal information under some state laws.

We ask visitors who enable advertising and sharing to confirm that they are at least 16 years old. Advertising and sharing are not enabled without that confirmation, and Meta Pixel is unavailable for accounts Curtsy knows belong to visitors under 16.

Where optional tracking is limited

Even after you make an optional choice, we suppress these tools on pages that Curtsy designates as sensitive, including sign-in, account, checkout, messages, offers, orders, selling, and wallet flows. We also suppress them when a page address contains a query string or fragment. On supported public pages, Google Analytics receives a general page category rather than the full page address. Meta Pixel may receive the eligible public page address after the separate advertising and sharing choice described above.

Our website infrastructure and content-delivery providers, including Cloudflare and ImageKit, necessarily receive request information such as your IP address, browser and device details, referrer or origin, and the content requested so they can secure and deliver the website and its images.

We do not load Google Analytics or Meta Pixel before you make the corresponding optional choice in this browser. Your choice is stored for up to 12 months. You can change or withdraw it at any time using Privacy Choices below. Withdrawal stops future optional collection in this browser, revokes the applicable vendor consent, and removes the optional cookies available to us; it does not affect processing that occurred before withdrawal.

Curtsy honors browser Global Privacy Control signals as a request not to sell or share personal information. When a signal is present, Meta Pixel and advertising sharing remain disabled regardless of a previously stored advertising choice. A Global Privacy Control signal does not, by itself, withdraw an analytics choice that does not involve sale or sharing. Because there is no single accepted interpretation of other “Do Not Track” signals, we do not respond to them.

If you are signed in when we receive a Global Privacy Control signal, you use our Do Not Sell or Share link, or you explicitly reject or turn off advertising and sharing in our privacy controls, we record the sale/sharing opt-out with your account. We then continue to honor it on later website visits when you sign in from another browser or device, even if that browser does not send the signal. We do not use the absence of a later signal as permission to opt you back in, and we do not ask an opted-out account to enable sale or sharing through these controls.

Google and Meta process information under their own privacy policies as well as their agreements with us. You can learn more in the Google Privacy Policy and the Meta Privacy Policy.

This website-tracking notice was updated on August 26, 2026.

8. Business transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.

9. Limits of our policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

10. Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.

This policy is effective as of January 1, 2016. The website-tracking notice in Section 7 was updated on August 26, 2026.