Privacy Policy

Overview

This Privacy Policy describes how Curo Co LLC ("Curo", "we", "us", or "our") collects, uses, and discloses your personal information when you use our payment services at GetCuro.com (the "Platform") or otherwise communicate with us (collectively, the "Services").

Curo is a payment platform that enables users to send and receive digital checks (e-checks) and physical checks with QR codes. For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a sender, recipient, trustee, caregiver, or other individual whose information we have collected.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Platform, update the "Last updated" date, and take any other steps required by applicable law.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Platform and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You

Account Information:

• Name, email address, phone number, mailing address
• Username, password, security questions
• Profile photo (optional)

Payment Information:

• Bank account details (account number, routing number, bank name) for ACH transfers
• Debit card information (for instant payout options)
• Transaction history and payment records
• Check recipient information (name, email, phone, mailing address)

Identity Verification Information (KYC):

• Date of birth
• Social Security Number (SSN) or Tax Identification Number (TIN)
• Government-issued ID (driver's license, passport)
• Address verification documents

Delegated Access Information:

• For trustees and caregivers: relationship to account owner, permission levels, approval thresholds
• For account owners: delegate contact information and access permissions

Some features of the Services require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features, particularly payment processing features that require identity verification for regulatory compliance.

How We Use Your Personal Information

Providing Payment Services

• Process check creation, delivery, and claims
• Facilitate ACH bank transfers and instant debit payouts
• Verify identity and prevent fraud (KYC/AML compliance)
• Send payment notifications via email, SMS, or mail
• Enable QR code scanning and claim verification
• Manage your account and payment history
• Process disputes, refunds, and cancellations

Delegated Access Management

• Enable trustees and caregivers to send payments on behalf of account owners
• Enforce permission levels and approval thresholds
• Maintain audit trails of delegated actions
• Send notifications to account owners about delegate activities

Security and Fraud Prevention

• Detect, investigate, and prevent fraudulent, illegal, or malicious activity
• Monitor for unauthorized access or suspicious transactions
• Verify recipient identity before payment disbursement
• Maintain secure account access

Legal and Regulatory Compliance

• Comply with financial regulations and reporting requirements
• Respond to legal requests (subpoenas, court orders)
• Maintain records as required by law
• Report suspicious activity to relevant authorities

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:

Service Providers

• Payment processors (Stripe, ACH networks)
• Identity verification services (KYC/AML providers)
• Cloud storage and database providers
• Email and SMS delivery services
• Customer support platforms
• Fraud detection and prevention services

Financial Institutions

• Your bank or credit union for ACH transfers
• Debit card networks for instant payouts
• Banking partners that facilitate payment processing

Other Users

• Check recipients receive your name and any memo/notes you include
• Account owners can see actions taken by their trustees/caregivers
• Trustees/caregivers may see account activity they're authorized to view

Data Retention

We retain your personal information for as long as necessary to:

• Maintain your account and provide Services
• Comply with legal and regulatory obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Prevent fraud and maintain security

After your account is closed, we will retain certain information as required by law and for legitimate business purposes.

Security of Your Information

We implement industry-standard security measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure data centers with restricted access
• Regular security audits and vulnerability assessments
• Multi-factor authentication options
• Employee training on data security

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Right to Access/Know: Request access to personal information we hold about you
• Right to Delete: Request deletion of your personal information (subject to legal retention requirements)
• Right to Correct: Request correction of inaccurate personal information
• Right to Portability: Receive a copy of your personal information in a portable format
• Right to Opt-Out: Opt out of marketing communications (you'll still receive transactional emails)
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time
• Right to Appeal: Appeal our decision if we decline your request

To exercise these rights, contact us at privacy@getcuro.com. We will verify your identity before processing requests to protect your information.

We will not discriminate against you for exercising your privacy rights.

Children's Privacy

The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Cookies and Tracking Technologies

We use cookies and similar technologies to power and improve our Platform, remember your preferences, run analytics, and better understand user interaction with the Services.

Most browsers automatically accept cookies by default, but you can choose to set your browser to remove or reject cookies through your browser controls. Please keep in mind that removing or blocking cookies can negatively impact your user experience and may cause some features to work incorrectly or no longer be available.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

State-Specific Privacy Rights

California Residents

You have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, and the right to opt-out of sales (though we do not sell personal information).

Other States

Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have similar rights. Contact us to exercise your rights.