At Curowell, your privacy is not an afterthought. It is built into how we design, develop, and operate our platform. This policy explains what information we collect, why we collect it, and the choices you have.

If you have questions about anything in this policy, reach out to us at privacy@curowell.com.

1. Who this policy applies to

This policy covers anyone who visits our website at curowell.com, interacts with our marketing content, or contacts us through our forms or email. If you are a patient using a healthcare practice that runs on Curowell, your data is governed by your provider's privacy practices — we act as a service provider (data processor) on their behalf.

2. Information we collect

Information you give us directly

Contact information — name, email address, phone number, and practice name when you fill out a contact form, book a demo, or sign up for our newsletter
Account information — email and password when you create a Curowell account
Communications — any messages you send us through email, chat, or support channels

Information collected automatically

Analytics data — pages visited, time on site, browser type, device type, and approximate location (country/city level). We use Vercel Analytics for privacy-friendly performance monitoring and Google Analytics 4 for traffic analysis (only with your consent)
Cookies — we use essential cookies to keep the site working and optional analytics cookies to understand how people use our site. See our Cookie Policy for full details
Log data — IP address, request timestamps, and referring URLs, collected automatically by our hosting infrastructure

Information we do not collect on this website

This marketing website does not collect protected health information (PHI), medical records, insurance details, or any clinical data. Our product platform has separate, more stringent data handling policies covered in our Business Associate Agreements with healthcare providers.

3. How we use your information

To respond to you — when you book a demo, ask a question, or request support
To improve our website — analytics help us understand which pages are useful and where people get stuck
To send you updates — if you subscribe to our newsletter, we will send you product updates and industry insights. You can unsubscribe at any time
To protect our service — detecting and preventing fraud, abuse, or security threats

We do not sell your personal information. We do not share it with third parties for their own marketing purposes. Full stop.

4. How we protect your information

We take security seriously. All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Access to personal data is restricted to team members who need it, and we conduct regular security reviews. Our infrastructure is hosted on SOC 2 compliant providers.

5. Third-party services

We use a small number of trusted third-party services:

Vercel — website hosting and privacy-friendly analytics
Google Analytics 4 — traffic analysis (loaded only after you consent via our cookie banner)
Calendly — for booking demo appointments

Each of these providers has their own privacy policies. We choose partners that meet our standards for data protection and security.

6. Your rights

Depending on where you are located, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for analytics tracking at any time
Object to processing of your data
Request a portable copy of your data

To exercise any of these rights, contact us at privacy@curowell.com. We will respond within 30 days.

7. Data retention

We keep your contact information for as long as you have an active relationship with us (an account, an active subscription, or ongoing communication). If you unsubscribe from our newsletter, we remove your email from our mailing list promptly. Analytics data is retained in aggregate form and is not linked to your identity after 26 months.

8. Children's privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we make significant changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: privacy@curowell.com
General enquiries: hello@curowell.com

Privacy Policy