Effective November 12, 2024

Privacy Policy

  1. COLLECTING AND RECEIVING INFORMATION

  2. YOUR INFORMATION AND OUR LEGAL BASIS

  3. SHARING INFORMATION

  4. PROTECTING INFORMATION

  5. STORING INFORMATION

  6. YOUR PRIVACY RIGHTS

  7. CALIFORNIA CONSUMER PRIVACY NOTICE

  8. COLORADO PRIVACY NOTICE

  9. RESPONSIBILITIES

  10. AMENDMENTS

  11. CONTACT US

Curio Marketplace, LLC ("Curio," "Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy outlines the practices concerning the collection, use, disclosure, and protection of information collected through our mobile application (the "App") and any related services, content, or offerings (collectively, the "Services").

This policy applies to our registered users (our "Members") and any other individuals who access or use our App or Services ("you" or "your"). It does not cover the privacy practices of third parties you may interact with through our Services. We encourage you to review the privacy policies of any third parties before sharing information with them, as their practices will be governed by their own privacy policies.

By using our Services, you consent to the collection, use, disclosure, and processing of your information as described in this Privacy Policy. We recommend that you review this policy in its entirety to understand how your data is handled.

Please also read Curio’s Terms of Use (“Terms”), which describe the terms under which you use and we provide our Services.

Key Highlights:

Information Collection and Use: We collect information necessary to provide, secure, and improve our Services and to comply with our legal obligations. For more details, refer to Sections 1 and 2.

Sharing of Information: We may share your data with trusted partners, service providers, and other parties for the purposes of operating our Services, enhancing security, complying with the law, or analyzing your interactions with our Services. See Section 3 for more details.

Your Rights and Choices: Depending on your location, you may have rights regarding your personal information, such as the right to access, correct, or delete your data. For further information on how to exercise your rights, refer to Section 11.

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us as outlined in Section 11.

  1. Collecting and Receiving Information

We collect and receive information about you in various ways during your use of our Services. This includes information you provide directly to us and information we collect automatically. Below is an overview of the types of information we collect. Please note that capitalized terms in this section may be referenced throughout the Privacy Policy.

  • Personal Information: Information you provide when you set up and manage an account with us, such as your name, email address, date of birth, and other contact details.

  • Public Profile Information: Your profile photo, bio, listing photos, linked third-party accounts (e.g., "continue with" options like social media accounts), and any seller policies (e.g., return or cancellation policies).

  • Community Information: Content you post in public community spaces, such as comments or reviews.

  • Message Information: Metadata regarding messages sent through our platform, including the date, time, and recipient of messages. Please note, we cannot access the contents of your private messages, as we offer end-to-end encryption to protect both you and third parties from unauthorized access.

  • Payment Information: Your billing address and payment details, including credit or debit card information or other payment credentials. Please note, we use a Level 1 PCI DSS-compliant third-party payment processor to handle payment transactions securely.

  • Transaction Information: Data regarding your purchases on our platform, such as the items purchased, the name of the buyer or seller, the purchase price, and the date of the transaction.

  • Device Information: Information about your device, including IP address, device type, hardware model, operating system, unique device identifiers, and detected language settings.

  • App Information: Data such as app version, app usage statistics, performance metrics, and debugging information to help us improve our Services.

  • Location Information: Your precise geo-location from your device when you use location-based features or when you enable location services in the App or mobile device settings. You can manage or disable location services through your device’s privacy settings at any time. However, please note that disabling location services may affect the functionality of certain features that rely on precise location data.


  1. Your Information and Our Legal Basis

When you access or use the Services or interact with our Sites and/or Apps, we collect, use, share, and otherwise process your information for the purposes described in this policy. To the extent required by applicable law, we rely on a number of legal bases to use your information in this manner. Depending on where you reside, the legal bases on which we rely may differ from those listed out below.

  1. Sharing Information

We share your data with third parties where necessary to provide the Services, comply with our legal obligations, or for purposes set out in this Privacy Policy, including:

Publicly Displayed Information: By using the Services, certain information about you will be publicly displayed on the Site and Apps, such as Public Profile Information (as defined in Section 2). Buyers and Sellers may choose to make certain information and activities private through their account or Account settings. We also display other information connected with your use of the Services, including the date you joined, information relating to items you review, photos or videos of items you purchased, those you follow, comments you post in our community spaces, and information you decide to share via social networks. Your reviews of sellers or purchased items may also be shared on other platforms and indexed by search engines, including Google.

For certain Sellers, some additional information will be publicly displayed. For example, your location is publicly displayed.

We may share some of the information we collect, such as Account Information, Verification Information, Service Usage Information, Device and Browser Information, and Cookie Information to help us conduct business around the world. The information shared may be used for the purposes described in this Privacy Policy and generally to operate our business, including for ID verification purposes, transaction monitoring, fraud prevention, payment processing, customer support, business development, user account administration and IT, technical, and engineering support.

Sellers: We may share aggregated information about your use of the Services to Sellers, for example if you frequently purchase products or are a new Buyer, to provide you with better service and improve our Site and Apps.

Linked Third-Party Websites or Services: Members connect to Curio or register a Curio account using an external third-party application, such as Apple or Google. When you connect your account to a third-party application, the providers of those services or products may receive information about you that Curio, you, or others share with them. Please be aware when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services.

You may also link your bank account or payment method to pay for purchase (or receive payment, in the case of Sellers).

Professional Advisors, Industry Partners, Authorities, Regulators, and other Entities: We share your information described in Section 3 with our advisors, consultants, regulators, and tax authorities, law enforcement, government agencies, civil litigants, and industry partners (for example, trade groups), and other entities as reasonably necessary to:

  • comply with applicable law or regulations, court orders, subpoenas, legal process, or government requests;

  • detect, investigate, prevent, or address actual or suspected fraud, violation of Curio’s Terms of Use, and other illegal activity or security and technical issues; and/or

  • protect the rights, property, and safety of our Members, Curio, or others, including to prevent death or imminent bodily harm.

Business Reorganization: In some cases, Curio may choose to reorganize its business. In these types of transactions (such as a sale, merger, liquidation, receivership, or transfer of all or substantially all of Curio’s assets), Member information is typically one of the business assets transferred. If Curio intends to transfer information about you, Curio will notify you by email, or by putting a notice on the Site and the App.

Service Providers: Curio may also engage third-party companies and individuals (such as analytics services, and security providers) to help us operate, provide, and advertise the Services. These third parties may have limited access to your information, and may use your information only to perform these tasks on our behalf, and are prohibited from disclosing or using your information for other purposes. The types of third-party services providers we may work with include:

Additionally, where necessary for the purpose of our legitimate interest, we may share certain categories of information with our payment processors. We do this because it is in our legitimate interests, and those of our Members, to share information with payment processors to monitor transaction activity to help detect, prevent and address fraud and other illegal activities, comply with their legal obligations, and protect our community. The data we share in this context is Account Information and Transaction Information.

  1. Protecting Information

We protect your information through technical and administrative measures designed to mitigate the risk of unlawful or unauthorized access, destruction, loss, alteration, disclosure, or use of your data including E2EE for all private messaging between Buyers and Sellers.

We use third-party authentication with our Services to help prevent spam, fraud, and abuse. These third-party services may collect hardware and software information, such as device and application data for the purposes of providing, maintaining, and improving general security purposes.

  1. Storing Information

Curio retains your information only for as long as necessary for the purposes set out in this Policy, for as long as your account is active, or as needed to comply with our legal obligations under applicable law. We decide how long we need  information on a case-by-case basis and depending on the retention laws applicable.

The following factors typically affect the retention period:

Necessity to provide our Services. We keep your information as long as necessary to provide the Services to you. This includes things like maintaining and improving the performance of our Sites and Apps, keeping our Services secure, and maintaining and improving appropriate business and financial records. Most of our retention periods are determined on the basis of this general rule.

If we process your data on the basis of consent (including consent to the extended storage), we store the data for as long as necessary to process it according to your consent or until you withdraw your consent.

Statutory, contractual, or similar obligations Curio retains and uses your information to the extent necessary to comply with our legal obligations, for example, if we must retain your information to comply with applicable tax/revenue laws, Know Your Customer (“KYC”), and similar obligations.

The following describes how long we keep your information:

  1. Your Privacy Rights

Unlike many companies, we do not sell your personal information for money, nor do we use third-party services to deliver interest-based ads to you.

Certain privacy laws around the world provide users with rights and choices related to their information. Consistent with those laws, Curio gives you the choice of accessing, editing, or removing certain information, as well as choices regarding how we contact you. In addition, subject to applicable law, you may have certain rights with respect to your information, such as the following:

  • You may request the following information regarding how we collected and used your personal information during the last 12 months: The categories of personal information we collected; the categories of sources from which we collected personal information; our business or commercial purpose for collecting and/or selling personal information; the categories of third parties with which we share personal information; the categories of personal information that we “sold” (as defined in the State Privacy Laws, as applicable) or disclosed for a business purpose; and the categories of third parties to whom the personal information was “sold” or disclosed for a business purpose. If you are located in Oregon, you may also request a list of third parties to which we have disclosed data.

  • You may request a copy of the personal information we collected about you.

  • You may ask us to correct any inaccurate personal information we collected about you.

  • You may ask us to delete the personal information collected about you.

  • You may access certain information associated with your account by visiting your account settings, and may request a copy of your information in an easily accessible format, as well as an explanation of how the information is used.

  • You have the right to receive certain information which you provided in a structured, commonly used, machine-readable format and to transmit such information to another controller.

  • You have the right to request we rectify any inaccurate information about you. You can correct and change certain information through your account settings.

  • In certain circumstances, you may also have the right to restrict or limit the ways in which we use your information.

  • In certain circumstances, you have the right to request deletion of your information, except information we are required by law, regulation, or to protect the safety, security, rights, and integrity of Curio.

  • If we process your information based on our legitimate interests as explained above, or in public interest, you can object to this processing in certain circumstances. In such instances, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.

  • Where we rely on consent, you may choose to withdraw your consent to our processing of your information using, for example, your account privacy preferences. If you consented to share your precise device location details with us, you may revoke that consent through the settings on your mobile device. This is without prejudice to your general right to permanently close your account and delete your information. Please be aware withdrawing consent will not affect the lawfulness of processing that happened before withdrawing your consent.

  • You may opt out of certain processing of personal information for targeted interest-based advertising purposes, including sharing personal information with our marketing partners for cross-contextual or interest based behavior advertising.

  • You have the right to opt out of the Sale of your personal information. “Sale” is defined broadly under certain State Privacy Laws to include the transfer of personal information to third parties in exchange for anything of value.

Certain states offer the right to opt-out of automated processing or profiling of personal data used to make significant decisions affecting you (such as legal, employment or credit decisions). To the extent we engage in automated processing or profiling to prevent, detect, protect against or respond to fraudulent or illegal activity, we are not required to offer the right to opt out. We otherwise do not engage in profiling or automated decision-making defined under the State Privacy Laws.

If you would like to manage, change, limit, correct, or delete your information, you may do so via your Curio account settings. Alternatively, you may exercise any of the rights above, subject to applicable law, through the contact options set out in Section 10. Once you contact us to exercise any of your rights, we will confirm receipt of the request. Limiting use of, or deleting, your information may impact features and services that rely on that information.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. No industry consensus exists as to what site and app operators should do with regard to these signals. Accordingly, absent an applicable legal requirement, we generally do not monitor or take action with respect to “Do Not Track” signals.

We may need to verify your identity in order to process your right to know, access, appeal, correct, or delete requests, and we reserve the right to confirm your identity and residency, and in our discretion, deny your request if we cannot verify your identity and residency. As part of this process, we may require a copy of your valid, government-issued identification. You may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, in which case we will require valid government-issued identification for both you and the authorized agent, we may verify the authenticity of the request directly with you.

In certain states, you may have the right to appeal our decision regarding a request to these rights. If you wish to appeal a decision, please contact us through any of the methods in Section 10. We will not discriminate against you for exercising any of your rights.

If you need further assistance, or if you have a visual impairment or otherwise need accommodations and would like to access this policy in an alternative format, please contact us using one of the channels listed in Section 10.

  1. California Consumer Privacy Notice

This California Consumer Privacy Notice (“California Notice”) supplements and applies to personal information Curio collects about California consumers. This California Consumer Privacy Notice uses certain terms that have meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

We may collect and may have collected during the 12-month period prior to the Last Updated date of this California Notice the following categories of personal information about you:

  • Information that identifies you, including your legal name, email address, unique identifier (such as a device identifier and/or IP address), account name, username, billing address, or credit or debit card information, and any other personal information covered by Cal. Civ. Code §1798.80(e) (which may overlap with other categories listed here).

  • Demographic information such as your age, where you have provided such information to Curio voluntarily. This category includes information that may qualify as protected classifications under other California or federal laws.

  • Commercial information including purchases, products sold, and/or your interaction with the Services.

  • Internet or network activity including your interactions with our Services; device type and/or identifier, operating system and version, browser type and settings and cookie-related data (e.g., cookie ID).

  • Data categorized as visual data such as pictures or videos posted on our Service.

  • Geolocation data through location enabled services such as WiFi and GPS or precise location information, with your consent, when enabled through our mobile application or from your device settings.

  • Inferences based on personal information about you, including interests, preferences, and likes; inferred information about your demographic category used to create profiles.

We collect the categories of personal information described in this California Notice from the sources described in Section 1 of the Curio Privacy Policy, which includes collecting information directly from you, your devices, and our partners. The sources of this data include you, Curio Members, service providers (including internet service providers), social networks, government entities or other public sources, marketing, and business partners.

We use these categories of personal information for our business and commercial purposes as described throughout the Curio Privacy Policies.

We may share personal information with service providers and other third parties. Below are the categories of personal information that may have been disclosed during the last 12 months for a business purpose and the categories of recipients with whom we may have shared your information. Please note not every one of the following categories may apply to your information.

Categories of Personal Information

  • Identifiers

  • Other records

  • Commercial information

  • Internet or other electronic network activity information

  • Geolocation information

  • Sensory information

  • Inferences derived from personal information

Categories of Third Parties

  • Buyers and Sellers (for example, when you post publicly or leave reviews)

  • Our vendors or other service providers

  • Analytics providers

  • Our marketing and business partners

  • Social networks

  • Internet service providers

  • ISPs, operating systems and platforms

In addition to the categories of third parties identified above, during the past 12 months, we may have disclosed personal information about you to government entities for the purposes listed in our Privacy Policy, and third parties in connection with corporate transactions, such as mergers, acquisitions or divestitures.

Please see Section 6 of this Policy for information about your privacy rights and how to exercise them.

  1. Colorado Privacy Notice

This Colorado Privacy Notice (“Colorado Notice”) supplements Curio’s US Notice and applies to personal information Curio collects online about Colorado consumers. We adopt this Supplemental Notice to comply with the Colorado Privacy Act (the “CPA”). This Colorado Notice uses certain terms that have the meanings given to them in the CPA.

Please see Sections 1 and 2 of this Policy, for information about the categories of personal information we collect and the purposes for which we use the information.

We do not knowingly process personal information from children under the age of 13. We do not knowingly process “sensitive data” as that term is defined under the CPA.

2. Sharing of Personal Information. We share your information with our service providers or other third parties where necessary to perform the Services, comply with our legal obligations, or for purposes set out in this Privacy Policy. Your personal information will be shared with our service providers or other third parties. Below are the categories of personal information and categories of service providers and third parties with whom we may share your information. Please note that not every one of the following categories may apply to your personal information. 

Categories of Personal Information

  • Buyer Account Information

  • Seller Account Information

  • Payments Information

  • Transaction Information

  • Customer Support Information

  • Browser / Device Information

  • Service Usage Information

  • Location Information

Categories of Third Parties With Whom We May Share Personal Information

  • Our Buyers and Sellers, such as when you post to your Public Profile or in our public forums

  • Professional services organizations, such as auditors and law firms

  • Our business partners

  • Data analytics providers

  • Social networks

  • ISPs, operating systems and platforms

  • Government entities

We do not sell your personal information in exchange for monetary compensation, nor do we share your personal information to allow certain third parties (such as online advertising services) to collect personal information via automated technologies on our Site and Apps for targeted advertising purposes.

To the extent we engage in automated processing or profiling to prevent, detect, protect against or respond to fraudulent or unlawful activity, we are not required to offer the right to opt out. We otherwise do not engage in profiling that requires an opt-out as defined under the CPA. 

Please see Section 6 for information about your privacy rights and how to exercise them.

  1. Responsibilities

If you are a Seller, you may receive certain information and will have legal obligations with respect to certain information. Your privacy responsibilities, including when you act as an independent data controller (someone who decides what data to collect and the purpose you use the data for) are laid out in the Seller Policy.

  1. Amendments

We may amend or update this policy from time to time. If we believe that changes are material, we will notify you by posting the changes through the Services and sending you an email about the changes. We encourage you to check back regularly and review any updates.

  1. Contact Us

If you have any questions, please email us at help@curio.supply