Privacy Policy

We collect what we need to build your site, bill you, and answer you. We do not sell your data, we do not share it with anyone for their own marketing, and we do not put advertising trackers on your website unless you ask us to.

The Trust Center lists every third party involved in running your site and exactly what each one sees.

Curb builds and operates websites for its customers. In this policy, “we” and “Curb” mean Curb, Inc., a Delaware corporation, and “you” means either a customer whose site we run or a visitor to this site.

For questions about this policy, email privacy@hicurb.com.

We collect three categories of information, and nothing outside them.

• Account information: your name, business name, email address, phone number, and the billing details held by our payment processor. Card numbers never reach our servers.
• Site content: the copy, photographs, service lists, hours, and other material that appears on your website, together with the change requests you send us by email (hello@hicurb.com), from the Plan tab, or by text if you have turned Edit by text on.
• Usage information: standard server logs for this site and for the sites we host, traffic analytics on this marketing site, and product analytics in the Curb app (PostHog): the pages you open and the steps you take, such as starting a site, choosing a plan or sending a change, tied to your account once you sign in. PostHog may also record how a session moves through the app, with everything typed into forms hidden. None of it tracks you across other websites or is used for advertising.

Edit by text is an additional way to ask for a change, not a replacement for email or the portal. If you turn it on in account settings, you opt in by checking a box that names Curb, says the messages are replies about site edits you requested, says message frequency varies, and includes “Msg & data rates may apply. Reply STOP to opt out, HELP for help,” with links to this policy and the terms.

We then collect your mobile number, the time you verified it, the time you opted in, the exact wording you agreed to, the IP address of that request, and the sites on your account at that moment. We keep the texts you send us and the texts we send you, including photos you attach, so we can make the change and so we have the record the carriers require.

We text you only about edits you asked for: a code to confirm your number, a confirmation that texting is on, replies while we draft a change, a preview link, and a note when a change you approved is publishing. Message frequency varies with how often you text. We do not send marketing on this number. Msg & data rates may apply.

Mobile numbers and opt-in data are never shared or sold to third parties for marketing. The carrier that delivers the messages sees the number and the message content so the text can be delivered. That is the delivery, not a sale and not marketing.

You can opt out any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT, or by turning Edit by text off in settings. Reply START to opt back in after a STOP. Reply HELP for help, or email hello@hicurb.com.

If your website has a contact or quote form, submissions go to you. We process them only to deliver them and to keep the form working. We do not build profiles of your customers, market to them, or share their information with anyone.

Do not use a Curb-built form to collect sensitive information — health details, financial account numbers, or government identifiers. Marketing sites are the wrong place for that, and our forms are not designed for it.

Each category has a purpose, and we do not repurpose data outside it.

• To build, host, publish and maintain your website.
• To bill you and keep the required financial records.
• To answer your messages and execute the changes you request.
• To improve our own service in aggregate — how long builds take, where quality checks fail.
• To meet legal obligations.

We use AI systems to audit websites, draft and edit content, review builds for defects, and triage incoming support messages. Content you send us may be processed by our model provider’s API, which does not use submitted content to train models.

Decisions with a meaningful effect on you — cancellations, disputes, anything unusual — are made by a person, not automatically.

We share information only with the service providers needed to run the service, and only to the extent each one needs. The current list, with what each provider sees, is published in the Trust Center.

We will disclose information if legally required to. If that happens and we are permitted to tell you, we will.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Account and site content are kept while your account is active. After you cancel, we keep your content for 30 days so you can change your mind, then delete it. Financial records are kept as long as tax and accounting law requires.

Server logs are retained for a short operational period and then discarded.

Wherever you live, you may ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@hicurb.com and we will act within 30 days.

Depending on your state or country, you may also have the right to object to processing, to restrict it, or to complain to a regulator. We will never charge you or degrade your service for exercising any of these rights.

This marketing site uses analytics to understand traffic, and the Curb app uses PostHog to understand how people use it; both set first-party cookies or local storage for that. Websites we build for customers do not carry advertising or cross-site tracking cookies unless the customer asks us to add them and takes responsibility for the disclosure that requires.

Everything we run is served over HTTPS. Data at rest is encrypted by our infrastructure providers. Access to production is limited, requires multi-factor authentication, and is reviewed when the team changes.

No system is perfectly secure. If a breach affects your data, we will tell you promptly and tell you what we know.

Our service is for businesses. We do not knowingly collect information from anyone under 16, and we delete it if we discover we have.

When we change this policy we update the date at the top. If a change is material, we email active customers before it takes effect.