Introduction
Welcome to CurbCash ("we", "our", "us"). We operate the website curbcash.cloud and related services (the "Service").
This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service. By accessing or using CurbCash, you agree to the practices described in this policy.
We are committed to complying with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws in Québec (Law 25 / Law 64).
Data We Collect
Information You Provide Directly
- Name, email address, and contact information when you create an account or contact us
- Payment information (processed securely through third-party processors — we do not store full card numbers)
- Profile data you voluntarily enter into the Service
- Communications you send to our support team
Information Collected Automatically
- IP address and approximate geographic location
- Device type, operating system, and browser type
- Pages visited, time spent on pages, and navigation paths
- Referring URLs and search terms used to find our site
- Cookies and similar tracking technologies (see below)
Information from Third Parties
- If you sign in via Google or another OAuth provider, we receive your name, email, and profile picture as shared by that provider
- Analytics data aggregated from partners such as Google Analytics
How We Use Your Data
We use your information for the following purposes:
- Service delivery: To provide, maintain, and improve CurbCash features and functionality
- Account management: To create and manage your user account and authenticate your identity
- Communications: To respond to inquiries, send transactional emails, and provide customer support
- Security: To detect fraud, abuse, and protect the integrity of our platform
- Analytics: To understand how users interact with our Service and improve the user experience
- Legal compliance: To comply with applicable laws and enforce our Terms of Service
- Marketing (with consent): To send promotional communications only if you have opted in
Data Sharing & Disclosure
We may share your information only in the following circumstances:
Service Providers
We work with trusted third-party providers (hosting, payment processing, email delivery, analytics) who process data on our behalf under confidentiality agreements and only for the purposes we specify.
Legal Requirements
We may disclose your data if required by law, court order, or governmental authority, or to protect the safety and rights of our users and the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
With Your Consent
We may share your information for any other purpose with your explicit prior consent.
Google Services & OAuth
CurbCash uses Google APIs and OAuth 2.0 to allow users to sign in with their Google account. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
What We Access
- Basic profile information: name, email address, profile picture
- We only request the minimum OAuth scopes necessary to operate the Service
What We Do NOT Do
- We do not use Google user data to serve personalized advertisements
- We do not allow humans to read your Google data unless you explicitly request support
- We do not transfer Google user data to third parties except as necessary to provide the Service
Authorized Domains
Our Service operates under the primary domain curbcash.cloud and associated technical subdomains used for infrastructure (Google Cloud Run, Firebase). These domains are used solely for delivering and operating the Service.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. When you close your account, we delete or anonymize your data within 90 days, except where we are required by law to retain it longer (e.g., financial records for tax purposes — typically 7 years in Canada).
Log data and analytics are retained for up to 24 months and then automatically deleted or aggregated.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to or restrict the processing of your data
- Withdraw Consent: Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at contact@curbcash.cloud. We will respond within 30 days.
Data Security
We implement industry-standard security measures to protect your personal information:
- All data in transit is encrypted using TLS 1.2 or higher (HTTPS)
- Sensitive data at rest is encrypted using AES-256
- Access to production systems is restricted to authorized personnel
- We conduct regular security reviews and vulnerability assessments
Despite these measures, no system is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the applicable regulatory authority within the timeframes required by law.
Children's Privacy
CurbCash is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it promptly.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by:
- Posting a notice on our website at curbcash.cloud
- Sending an email to your registered address (for significant changes)
- Updating the "Effective Date" at the top of this document
Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: