Privacy Policy

We collect what we need to build your site, bill you, and answer you. We do not sell your data, we do not share it with anyone for their own marketing, and we do not put advertising trackers on your website unless you ask us to.

The Trust Center lists every third party involved in running your site and exactly what each one sees.

Curb builds and operates websites for local service businesses. In this policy, “we” and “Curb” mean Curb, Inc., a Delaware corporation, at 5227 N Greenwood Blvd, Spokane, WA 99205, and “you” means either a customer whose site we run or a visitor to this site.

For questions about this policy, email privacy@hicurb.com.

We collect three categories of information, and nothing outside them.

• Account information: your name, business name, email address, phone number, and the billing details held by our payment processor. Card numbers never reach our servers.
• Site content: the copy, photographs, service lists, hours, and other material that appears on your website, together with the change requests you send us by text or email.
• Usage information: standard server logs for this site and for the sites we host, and privacy-friendly analytics that do not track people across websites.

If your website has a contact or quote form, submissions go to you. We process them only to deliver them and to keep the form working. We do not build profiles of your customers, market to them, or share their information with anyone.

Do not use a Curb-built form to collect sensitive information — health details, financial account numbers, or government identifiers. Marketing sites are the wrong place for that, and our forms are not designed for it.

Each category has a purpose, and we do not repurpose data outside it.

• To build, host, publish and maintain your website.
• To bill you and keep the required financial records.
• To answer your messages and execute the changes you request.
• To improve our own service in aggregate — how long builds take, where quality checks fail.
• To meet legal obligations.

We use AI systems to audit websites, draft and edit content, review builds for defects, and triage incoming support messages. Content you send us may be processed by our model provider’s API, which does not use submitted content to train models.

Decisions with a meaningful effect on you — cancellations, disputes, anything unusual — are made by a person, not automatically.

We share information only with the service providers needed to run the service, and only to the extent each one needs. The current list, with what each provider sees, is published in the Trust Center.

We will disclose information if legally required to. If that happens and we are permitted to tell you, we will.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Account and site content are kept while your account is active. After you cancel, we keep your content for 30 days so you can change your mind, then delete it. Financial records are kept as long as tax and accounting law requires.

Server logs are retained for a short operational period and then discarded.

Wherever you live, you may ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@hicurb.com and we will act within 30 days.

Depending on your state or country, you may also have the right to object to processing, to restrict it, or to complain to a regulator. We will never charge you or degrade your service for exercising any of these rights.

This marketing site uses analytics to understand traffic. Websites we build for customers do not carry advertising or cross-site tracking cookies unless the customer asks us to add them and takes responsibility for the disclosure that requires.

Everything we run is served over HTTPS. Data at rest is encrypted by our infrastructure providers. Access to production is limited, requires multi-factor authentication, and is reviewed when the team changes.

No system is perfectly secure. If a breach affects your data, we will tell you promptly and tell you what we know.

Our service is for businesses. We do not knowingly collect information from anyone under 16, and we delete it if we discover we have.

When we change this policy we update the date at the top. If a change is material, we email active customers before it takes effect.