Privacy Policy

This Privacy Policy explains how Curya, Lda ("Curya", "we", "us", or "our") collects, uses, and protects personal data when you visit our website at www.curya.co (the "Website").

This policy covers the marketing website only. If you or your organisation use the Curya application to manage scheduling, the processing of personal data within that product is governed by a separate agreement (including our Terms of Service and Data Processing Agreement) between Curya and your organisation.

1. Who we are

The data controller responsible for the personal data described in this policy is:

Curya, Lda
Registered in Portugal under NIPC 519450752
Registered office: Rua do Carvalhido 84, 4250-204 Porto, Portugal
Email: hello@curya.co

If you have any questions about this policy or about how we handle your personal data, you can contact us at the email address above.

2. What personal data we collect

We collect personal data in the following ways:

Information you give us directly. When you fill in a contact form, request a demo, subscribe to updates, or email us at hello@curya.co, we collect the information you provide. This typically includes your name, work email address, company name, job role, and the content of your message.

Information collected automatically. We do not use analytics or advertising tools, so we do not build a profile of your browsing. When you interact with our demo booking widget, our scheduling provider (Calendly) and its security provider (Cloudflare) may process limited technical data such as your IP address to load the widget securely and protect it against malicious traffic. We also store one small preference in your browser's local storage to make the interactive demo run smoothly. For details, see our Cookie Policy.

We do not intentionally collect any special categories of personal data (such as data revealing health, political opinions, or religious beliefs) through this Website.

3. Why we use your personal data and our legal basis

Under the General Data Protection Regulation (GDPR) and applicable Portuguese law, we must have a legal basis for processing your personal data. We rely on the following:

To respond to your enquiries and demo requests. When you contact us or request a demo, we use your data to reply and to discuss whether Curya is a fit for your organisation. Legal basis: your consent and our legitimate interest in responding to and following up on business enquiries, and, where relevant, steps taken at your request prior to entering into a contract.

To send you updates you have asked for. If you subscribe to receive updates from us, we use your email address to send them. Legal basis: your consent, which you can withdraw at any time.

To operate and secure the Website. We use limited technical data to keep the Website running and to protect it and our demo booking widget against misuse. Legal basis: our legitimate interest in maintaining and securing the Website.

To comply with legal obligations. We may process personal data where required to meet legal, accounting, or regulatory requirements. Legal basis: compliance with a legal obligation.

4. Who we share your personal data with

We do not sell your personal data. We share it only with:

Service providers who help us run the Website and our business, such as our hosting provider, email and communication tools, and our demo scheduling tool. These providers act on our instructions and are bound by appropriate confidentiality and data protection obligations. Our current key providers include:

• Website hosting: Lovable
• Demo scheduling: Calendly (which uses Cloudflare to secure the booking widget)
• Email and communication: Resend, connected to the hello@curya.co Google account

We do not use analytics or advertising providers on the Website.

Professional advisers and authorities where necessary, for example legal or accounting advisers, or public authorities where we are required to disclose information by law.

5. International transfers

Some of our service providers, including Calendly and Cloudflare, are based in the United States and may process personal data outside the European Economic Area (EEA). Where this happens, we rely on appropriate safeguards to protect your data, such as European Commission adequacy decisions (including the EU-US Data Privacy Framework, where applicable) or Standard Contractual Clauses. You can request more information about these safeguards by contacting us at hello@curya.co.

6. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and demo request data: for as long as needed to handle your request and for a reasonable period afterwards to manage our relationship, unless you ask us to delete it sooner.
• Subscription data: until you unsubscribe or ask us to remove you.
• Technical data from the demo booking widget and local storage: for the short periods set out in our Cookie Policy.

We may retain certain data for longer where required to comply with legal obligations or to establish, exercise, or defend legal claims.

7. Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you.
• The right to have inaccurate data corrected.
• The right to have your data erased in certain circumstances.
• The right to restrict or object to certain processing.
• The right to data portability.
• The right to withdraw consent at any time, where we rely on consent, without affecting processing carried out before you withdrew it.

To exercise any of these rights, contact us at hello@curya.co. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Portuguese data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt

8. Cookies

The Website uses cookies and similar technologies. For full details of what we use and how you can manage your preferences, please see our Cookie Policy.

9. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we work to protect your data appropriately.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will take appropriate steps to inform you.

11. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at:

Curya, Lda
Email: hello@curya.co