Cureledger Marketplace Privacy Policy

This Privacy Policy describes how Cureledger, Inc. ("Cureledger," "we," or "us") handles personal data of users of the Cureledger Marketplace at https://cureledger.com. We are the controller of this data. For all privacy questions and requests, contact privacy@cureledger.com.

The datasets offered on the Marketplace are de-identified and are not personal data about Marketplace users; this Policy covers the personal data we collect from you as a user of the Marketplace.

1. Data We Collect

We collect: (a) account data you provide, such as name, organization, email address, and credentials; (b) transaction data, such as purchases, invoices, and payment records (payment card details are processed by our payment provider, not stored by us); (c) usage and device data, such as log data, IP address, browser type, and pages viewed, including through cookies and similar technologies; and (d) communications you send us.

2. How We Use Data

We use personal data to: provide and operate the Marketplace; process transactions and maintain accounts; secure the Marketplace and prevent fraud and misuse, including enforcing license restrictions; communicate with you about the Marketplace; comply with legal obligations; and establish, exercise, or defend legal claims. Where the GDPR or similar law applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the Marketplace, compliance with legal obligations, and, where required, your consent.

3. How We Share Data

We share personal data with: (a) service providers who process it on our instructions to run the Marketplace, currently:

• Vercel: site hosting and content delivery (United States)
• Stripe: payment processing (United States)
• Resend: transactional email delivery (United States)
• Cloudflare: bot protection and network security (United States)

(b) professional advisors; (c) authorities where disclosure is required by law; and (d) a successor in a merger, acquisition, or sale of assets, subject to this Policy. We do not sell Marketplace users' personal data.

4. Cookies

We use cookies and similar technologies necessary to operate the Marketplace, such as authentication and security, and analytics cookies where permitted. You can control cookies through your browser settings.

5. Retention

We keep personal data for as long as your account is active and afterward as needed for the purposes above, including legal, tax, and accounting requirements, then delete or anonymize it.

6. International Transfers

We are based in the United States and process data there. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, to withdraw consent, and to complain to a supervisory authority. To exercise any right, contact privacy@cureledger.com. We will not discriminate against you for exercising your rights.

8. Children

The Marketplace is not directed to children, and we do not knowingly collect personal data from anyone under 18.

9. Changes

We may update this Policy by posting the updated version with a new "Last updated" date and, for material changes, notice to account holders.

10. Contact

privacy@cureledger.com