1 Who we are and what this policy covers
Cura.it Intelligence Corp ("Cura.it," "we," "us," or "our") operates https://cura-it.ai/ (the "Website"). This Privacy Policy explains how we handle personal information in connection with the Website and business communications addressed to us. Personal information means information that identifies, relates to, or can reasonably be linked to an individual.
Cura.it is an early-stage technology company building a matching engine for agentic commerce. Our goal is to help enterprise consumer brands and retailers build relevance in agentic commerce by connecting their product portfolios with shoppers' expressed needs and the emotional context they share through AI tools. The Website introduces this work. It does not provide a public shopper-input tool, AI conversation service, customer account, checkout, or commercially deployed enterprise platform. When available, the newsletter form lets visitors subscribe to the communications described below. Descriptions of work in development do not mean those capabilities are available through the Website.
This policy does not authorize participation in a research study, use of research responses for model training, or processing of customer information in an enterprise product. Research activities require their own participant information and permissions. A separately agreed pilot or enterprise engagement may have its own agreement and privacy disclosures; applicable law determines our responsibilities for that processing. Employment and recruitment activities are outside this Website policy.
Our business mailing address is 3206 NE 2nd Ave #1152, Miami, FL 33137, United States. Privacy questions and requests should be sent to privacy@cura-it.ai.
2 Information processed through the Website
When your browser requests the Website, it transmits technical connection information. This can include your IP address, browser and device characteristics, the requested page or resource, and the date and time of the request. Information made available by your browser can also include a referring page or origin. Our network provider processes connection information to deliver Website resources, maintain availability, and protect the network. Your browser settings and the way you access the Website affect the information transmitted.
Cloudflare Workers with Static Assets hosts the Website and provides its request-processing and network-delivery infrastructure. The Website's responses also configure network error reporting to Cloudflare. Browsers that support this feature may send reports about failed network requests, including the affected URL and technical information about the failure. These technical functions are distinct from marketing subscriptions and email engagement tracking.
When the newsletter form is available, we ask for your full name, work email address and company, together with an affirmative newsletter-subscription choice. Industry, company size and how you found us are optional. You can leave optional fields blank or choose not to subscribe. A separate, optional choice concerns email open and link-click measurement; it is not a condition of newsletter signup. We record the date and time, wording and version, stated purpose, relevant notice link and submission identifier for the choices you make. The form is not a channel for submitting personal shopper conversations, research responses or customer catalog data.
Separately, if you email us, we receive your email address, message, attachments, and the correspondence needed to handle your inquiry or privacy request. Google Workspace handles that email correspondence. Privacy requests sent to privacy@cura-it.ai are managed by our designated US-based request owner.
We do not ask Website visitors to provide passwords, payment-card details, government identifiers, biometric identifiers, health information, or personal shopper conversations. Please do not send sensitive personal information or third-party personal information that is unnecessary for a business inquiry. An unsolicited disclosure does not authorize us to use it for another purpose.
3 How we use personal information
We use technical connection information to make the Website available, diagnose delivery problems, and protect its availability and integrity. We use business communications to answer the request, discuss the business matter you raise, and maintain appropriate correspondence. We use privacy-request records to evaluate and respond to requests, protect information from unauthorized disclosure, and document how we handled a request.
We may also process information where reasonably necessary to comply with applicable legal obligations, respond to valid legal process, investigate misuse, and establish, exercise, or defend legal rights. These purposes do not permit unrelated or disproportionate use of personal information.
If you subscribe, we use the submitted information to manage and send Cura.it's monthly newsletter, containing educational insights about market developments, commerce and shopper behavior, together with updates and reports on Cura.it's roadmap and progress. This subscription does not cover sales offers, research invitations or study participation. We do not subscribe you merely because you visit the Website, send a business inquiry, make a privacy request, accept Website terms or allow analytics. A materially different communication purpose requires appropriate notice and any additional permission required before that use begins.
You can unsubscribe using the link in a newsletter or by contacting privacy@cura-it.ai. We process opt-outs promptly and within applicable legal deadlines. Unsubscribing and requesting deletion are different; you may make either or both. An opt-out does not prevent a response to your request or a nonmarketing communication needed for a separate business relationship or legal obligation. Newsletter details are available in our Email Consent Terms: https://cura-it.ai/legal/email-consent-terms.
4 Cookies tracking and advertising choices
The technical delivery, security and network error-reporting functions described in Section 2 can process connection information without setting cookies. Optional Google Analytics 4 (GA4) measurement is separate. Where enabled on the Website, Google Analytics 4 operates only after you affirmatively allow analytics through Cookie Preferences. For this release, it measures page views and basic session engagement. Newsletter signup and subscription events are not enabled. It can process browser or device identifiers, page and referring-source information, event times and interaction data. Network requests also transmit connection information. Such information is not treated as anonymous merely because a name is absent. We do not send form-field values or subscriber/contact identifiers to Google Analytics or use email-link identifiers to join Website activity to a named subscriber record.
We use Cloudflare Web Analytics, a cookieless browser beacon, to understand Website usage and performance. It can process page and referring-page information, a page-load identifier and browser performance measurements. Cloudflare states that the beacon does not use cookies or browser storage and does not track visitors across its customers' websites. Cloudflare receives an IP address when the beacon request is transmitted and states that its RUM service discards that address at the nearest data center rather than storing it in core databases or logs. This measurement operates independently of the GA4 choice in Cookie Preferences; rejecting GA4 does not turn off the Cloudflare beacon. This is distinct from Cloudflare's hosting, security and network error reporting.
When the analytics controls are available, you can accept, reject or change optional GA4 analytics through Cookie Preferences. GA4 remains off without a valid affirmative choice; closing or ignoring a banner is not consent. Rejecting GA4 does not prevent browsing or newsletter signup. A later withdrawal stops future GA4 analytics through this setup; it does not automatically delete information already received by a provider. Browser settings can also restrict cookies and storage. Our Cookie Policy identifies the actual technologies, durations and controls: https://cura-it.ai/legal/cookie-policy. These choices do not control the Cloudflare cookieless measurement described above.
Email engagement measurement is separate from Website cookies. You may subscribe without allowing email measurement. If you separately allow it, ActiveCampaign uses tracking images and tracked links to measure newsletter opens and link clicks. Engagement events can be associated with your subscriber record and may include event times, links interacted with, IP address and email-client or device information. Image blocking, mail privacy features, automated security checks and link scanning can distort these signals; they do not reliably prove that a person read or interacted with an email. If you decline measurement or withdraw permission, we send future newsletters with both open and link-click tracking disabled after the choice is processed, within applicable deadlines. You can withdraw this permission by contacting privacy@cura-it.ai without unsubscribing from the newsletter. This does not undo requests already made or automatically delete previously collected events. Website cookie choices do not control tracking inside emails. We do not use reply tracking, ActiveCampaign Site Tracking, advertising pixels or remarketing in this setup. These choices do not authorize AI model training.
Global Privacy Control and other legally recognized opt-out preference signals are distinct from the legacy Do Not Track signal. Where applicable law requires us to act on an opt-out signal, we will honor it for the processing covered by that requirement. A signal does not by itself prevent technical processing necessary to serve the Website or a submission you choose to make.
5 How information is disclosed
Cloudflare provides the cookieless Website analytics described in Section 4, hosts and processes Website requests and, when the form is enabled, routes submissions to ActiveCampaign. ActiveCampaign supports subscriber and consent records, newsletter delivery and permitted email engagement measurement. The configured form workflow does not automatically copy submissions to Google Workspace. Google provides Google Analytics 4 for permitted optional Website analytics. Google Workspace separately processes email correspondence, including privacy requests. Our iPostal1 mailbox service and Print and Post Midtown Miami, the mail center operating at the stated mailing address, handle postal correspondence sent there. The information each provider receives depends on its function and the choices applied.
We may disclose relevant information to professional advisers where reasonably necessary for advice concerning our business or legal obligations and subject to applicable confidentiality duties. We may disclose information to comply with a binding legal requirement or valid legal process, or where necessary and legally permitted to protect the Website, prevent unlawful activity, or protect legal rights or safety. These disclosures must be appropriate to the circumstances.
If we consider or complete a merger, financing, acquisition, reorganization, or transfer of business assets, relevant information may be disclosed to advisers and transaction participants subject to appropriate confidentiality and use restrictions. A business transaction does not remove privacy obligations or authorize materially incompatible uses without the notice, permission, or other legal requirements that apply.
6 AI development and research boundaries
The Website does not offer an AI tool that accepts or analyzes visitors' shopper statements. Building a matching engine is separate from collecting Website visitor information. We are investigating whether expressed emotional context can improve product relevance beyond clearer supported functional information; this is a research hypothesis, not a validated effect or a medical capability.
We do not use Website form submissions or business correspondence to train AI models. Participation in any separate research activity requires its own information and permissions. This policy does not authorize use of research responses or customer data for model training or general reuse of personal information across clients. Before personal information is introduced into a research activity, prototype, or third-party AI service, its processing must have an appropriate, separately documented purpose, notice, permissions, and provider arrangement. Those activities require their own applicable disclosures before participation or data transfer.
We do not invite medical histories or hidden psychological inferences through this Website. A shopper's statement about a desired feeling is not automatically a diagnosis, a biometric identifier, or a promise that a product will cause a feeling. Information about health, treatment, or other protected characteristics requires separate assessment and safeguards.
7 Retention
We retain personal information only as reasonably needed for the purposes described in this policy, taking account of the information's type and sensitivity, whether a subscription or business matter remains active, applicable legal requirements, and a specific need to resolve a dispute or protect legal rights. Newsletter records, email-engagement events, analytics information, cookie-choice evidence, correspondence and privacy-request records are considered separately. We review information for deletion or anonymization when its purpose no longer justifies retention. Anonymization must prevent reasonable reidentification; removing a name alone may not do so. Verified Website analytics and cookie-choice retention details are stated in our Cookie Policy. Provider backups and company-controlled copies may follow different retention and deletion processes.
If you unsubscribe, we stop using your information to send marketing emails. We may retain limited suppression information, such as your email address and opt-out status, to honor that choice, together with consent or request records needed for applicable legal obligations or to establish how a request was handled. Suppression records are not used to restart marketing. A legal hold may require preserving particular records for longer. A deletion request is evaluated separately under applicable law, including any permitted need to retain limited suppression, consent, request or legal records. Deletion from active systems and the expiry of protected provider backups may follow different processes; this policy does not promise immediate erasure of every backup.
8 Security
The Website is delivered over HTTPS. No internet transmission or storage system is completely secure. Please avoid sending information that is unnecessary for your inquiry, including account credentials and sensitive records. Nothing in this policy limits any security or incident-notification obligation imposed by applicable law.
9 Your requests and choices
You can ask questions about your personal information or request access, correction, or deletion by writing to privacy@cura-it.ai. Depending on the law that applies to the information and our processing, you may also have rights to obtain a portable copy, withdraw consent, restrict or object to processing, opt out of certain uses or disclosures, or appeal a decision. The rights available to you depend on applicable law and may be subject to exceptions.
We will evaluate requests under applicable law and explain any action we take or legally permitted reason we cannot fulfill a request. We may request proportionate information to verify your identity or the authority of an agent. Please do not send government identification or sensitive documents unless a secure and necessary verification method has been arranged. Where an appeal right applies, you can send an appeal to the same contact with "Privacy Appeal" in the subject line; we will explain the available review and complaint process. We will not discriminate against you for exercising a legally protected privacy right.
10 Locations and international access
Cura.it operates from Florida, United States, and its intended business market is the United States. Privacy requests are managed by our designated US-based request owner. Authorized Cura.it personnel working from Brazil may access newsletter submissions and related ActiveCampaign records for assigned business-communications duties under applicable safeguards. This does not grant access to the US-managed privacy inbox. Our providers process information in the locations applicable to their services and our actual arrangements. A US business focus does not mean that all processing takes place only in the United States. Privacy rights and any required transfer safeguards depend on applicable law and the actual processing.
The availability of this Website outside the United States does not itself establish that we target every country. Applicable privacy rights and transfer requirements are determined by the law and facts, not by this statement or by consent presumed from a visit.
11 Children
The Website is intended for adults acting in a business or professional capacity. It is not directed to children under 13, and we do not knowingly request their personal information through the Website. If you believe a child has sent us personal information, contact privacy@cura-it.ai so we can assess and address it as required by law. A statement about the intended audience does not remove obligations that arise from actual knowledge of a child's information or from applicable protections for teenagers.
12 Other websites and changes to this policy
An external website or service you choose to visit is subject to its own practices and terms. Adding a link does not authorize that service to process your information for us or establish that its practices are covered by this policy.
We will post an updated policy with its effective date when the policy changes. Where a change requires additional notice or permission under applicable law, we will provide that notice or obtain that permission before the relevant new processing. An updated policy does not retroactively authorize an incompatible use of information already collected.
For questions or requests, contact Cura.it Intelligence Corp at privacy@cura-it.ai or 3206 NE 2nd Ave #1152, Miami, FL 33137, United States.
Effective date: November 13, 2026
Last updated: November 13, 2026