Privacy Policy

1. Introduction

Curated For You, Inc. ("the Company," "we," "us," or "our") operates curatedforu.com and the Curated For You personalization platform (together, the "Service"). Our core service connects to mid-size retailers' online stores, reads their shoppers' purchase history, and rebuilds the product grid in real time per visitor, so each shopper sees a storefront tailored to what they actually buy, not a one-size-fits-all default sort. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to information we collect through the Service and through direct communications with you.

We are based at 401 East Jackson Street, Suite 2100, Tampa, FL 33602 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email, phone) when you fill out a form, request a demo, or subscribe to updates;
• Company information you choose to share (employer, role, monthly session estimate, project context);
• The content of any messages you send us.

2.2 Retailer-Submitted Shopper Data

When a retailer integrates the Curated For You platform with their store, they may submit or authorize access to their shoppers' behavioral data for the purpose of powering personalization. This data typically includes:

• Purchase transaction history (products bought, order combinations, purchase frequency);
• Return or refund signals (items returned and the associated patterns);
• Session timing data (visit frequency, time between sessions);
• Anonymized or pseudonymized shopper identifiers assigned by the retailer's platform.

This data is processed solely to generate per-shopper product grid rankings for that retailer's storefront. We do not use shoppers' purchase history or behavioral signals to train machine-learning models for any purpose outside the delivering retailer's personalization results, and we do not combine it with data from other retailers' shopper pools without explicit written consent. Retailers who submit shopper data remain the data controllers for their shoppers; the Company acts as a processor under applicable law.

2.3 Information Collected Automatically

When you visit curatedforu.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

curatedforu.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to retailer and merchant inquiries and provide requested demos or onboarding support;
• Operate, maintain, and improve the Curated For You personalization platform, including generating real-time product grid rankings per shopper session;
• Deliver merchant performance reports (category-level conversion metrics, session-level outcomes) to the subscribing retailer;
• Send service updates and (with your consent where required) marketing communications;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below. Shopper-level behavioral data submitted by retailers is processed exclusively for that retailer's storefront personalization and is not sold or transferred to any other party.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (e.g., cloud hosting, email delivery, anonymized usage analytics) under contractual confidentiality terms that restrict use to the purpose of serving our platform;
• The subscribing retailer, for data they themselves submitted or authorized us to process on their behalf (performance metrics, session outcomes);
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. Shopper behavioral data belonging to one retailer's customer base is never shared with or accessible to another retailer.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described. For the marketing and sales side of our business: inactive contact records are purged after 24 months. Server access logs for curatedforu.com are retained 90 days, then aggregated. For retailer-submitted shopper data: we retain purchase history and session signals for the duration of the retailer's active subscription plus 60 days to allow for data export; after contract termination we delete or return the data per the terms of the retailer's service agreement. We comply with legal and accounting retention obligations as required.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. Shopper behavioral data is stored in isolated per-retailer partitions to prevent cross-account access. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law. Note: if you are a shopper of a retailer that uses Curated For You, the retailer is the data controller for your purchase data and your primary point of contact for data rights requests related to their store.

9. Florida Residents (FDBR)

The Florida Digital Bill of Rights ("FDBR") gives Florida consumers the rights described below. The FDBR's main controller-obligation chapters apply primarily to large operators; we extend the consumer-rights provisions to all Florida visitors as a matter of policy.

9.1 Your FDBR Rights

• Right to Confirm and Access personal data we process about you.
• Right to Correct inaccuracies.
• Right to Delete personal data we have collected from or about you.
• Right to Data Portability where technically feasible.
• Right to Opt Out of sale of personal data, targeted advertising, and significant-effect profiling. We do not engage in any of these.

9.2 Sensitive Data Consent

We do not knowingly process sensitive data within the meaning of the FDBR. If we ever begin to process such data, we will obtain consent first.

9.3 How to Exercise

Email [email protected]. We respond within 45 days; one 45-day extension is available with notice.

9.4 Appeal

You may appeal a denial by replying to our response. The Florida Department of Legal Affairs receives unresolved complaints.

9.5 California Visitors

If you are a California resident visiting from another state, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: