Privacy Policy

Everything below is collected directly from you, or generated while running the Service for you:

• Account data. Your email address (and an optional separate delivery email for digests). Sign-in is passwordless, so we never store a password.
• Career profile.Your resume (the uploaded PDF/text file and the text we extract from it); professional-profile data you direct us to import (for example from LinkedIn: name, headline, summary, location, experience, education, skills); and the narrative you write about what you’re looking for.
• Search preferences. Work-arrangement choices (remote/hybrid/onsite), target cities and base location (with approximate coordinates and timezone, resolved via Google Places), salary preferences, employment types, must-haves and nice-to-haves, and digest schedule settings.
• Activity and feedback.Your reactions to matches (“interested,” “not for me,” dismissals, optional written reasons), match history, and digest delivery records.
• Billing data. Subscription status, plan, and trial/renewal dates. Your payment card details go directly to Stripe, our payment processor — we never see or store full card numbers.
• Consent and technical records. When you accept our Terms, we record the document versions, timestamp, and the IP address and browser user-agent of the request, so we can prove what you agreed to. We also keep internal service logs (for example, LLM and email usage metrics) for cost tracking, debugging, and abuse prevention.
• Usage, device, and advertising data. Pages viewed and actions taken on our site and app, device and browser type, approximate location derived from your IP address, and identifiers set by cookies and similar technologies — collected through analytics tools (including Google Analytics) and advertising pixels, subject to the choices described in Section 4.

We do not collect precise GPS location, biometric data, government identifiers, or health data, and we do not want them — please don’t include sensitive information of that kind in your resume or narrative if you’re not comfortable with it being processed as described here.

• match job listings to your profile and rank them (our core service);
• send you your digest emails and account emails (sign-in links); billing receipts and renewal notices come from Link/Stripe as merchant of record;
• process subscriptions and payments, and maintain billing records;
• improve match quality — for example, your feedback teaches the matcher what fits;
• secure the Service, prevent fraud and abuse, and debug problems;
• understand how Curio is used, and measure and improve our marketing and advertising;
• comply with legal obligations and enforce our Terms.

AI processing. To generate matches, we send your career profile and preferences, together with job-listing text, to large-language-model providers. They process the data strictly as our service providers to return match results; under the terms we rely on, they do not use your data to train their models. Match results are recommendations for your own job search — no automated decision with legal or similarly significant effect is made about you.

We share personal information only with service providers acting on our instructions to run Curio, under contracts that limit what they can do with it, and only what each needs:

• Cloud infrastructure providers — application hosting, database, authentication, and file storage (where your account, profile, and resume live).
• AI model providers — score and explain matches, as described above; they may not use your data to train their models.
• Stripe and Link— Curio subscriptions are sold through Stripe’s Managed Payments, with Link (a Stripe company) acting as merchant of record: it processes payment, appears on your statement, collects and remits applicable taxes, and provides transaction support. Your card details go to them, never to us.
• Google (Places API) — converts the city names you type into structured locations. This feature uses Google Maps functionality; Google’s privacy policy applies to that processing.
• An email delivery provider — sends digests, sign-in links, and account notices.
• A professional-profile data provider — used only when you choose LinkedIn import; the identifier you provide is used to retrieve your public profile data.
• A background-job scheduler — orchestrates match runs and, in doing so, processes the account and matching data those runs need.
• Analytics and advertising partners (including Google Analytics) — receive usage data, device information, and cookie identifiers to help us measure how Curio is used and how our marketing performs. They never receive your resume, narrative, criteria, or match history.

Job-data sources (such as Firecrawl-scraped job boards and aggregated listing feeds) receive search parameters, never your identity or profile.

We do notsell personal information for money, and we never give your career profile (resume, narrative, criteria, matches) to advertisers or data brokers. Like most companies that advertise online, we do share limited identifiers and usage data (cookies, device information) with advertising and analytics partners; some US state laws treat this as “sharing” for cross-context behavioral advertising, and you can opt out at any time (Section 6). We may disclose information if required by law or legal process, to protect the rights, safety, or property of users or the company, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to it and we will notify you of any successor).

Curio uses three kinds of cookies and similar technologies:

• Essential — keep you signed in and make the Service work. These always run.
• Analytics (including Google Analytics) — help us understand how the product is used so we can improve it.
• Advertising — measure whether our marketing works and help us reach people looking for a service like Curio.

Where the law requires consent (for example in the EEA and UK), non-essential cookies run only after you agree, and you can change your choices at any time through the cookie controls. Everywhere, you can opt out of advertising-related sharing: we honor the Global Privacy Control browser signal as an opt-out, you can block or clear cookies in your browser, or you can email privacy@curiojobs.com (see Section 6).

• While your account is active, we keep your profile, matches, and history so the Service works.
• When you delete your account(Settings → Delete my account), we cancel any active subscription, delete your Stripe customer record, delete your uploaded resume files, and delete your profile, matches, feedback, digests, and search configuration. Internal cost/audit logs are retained but permanently disassociated from you.
• Consent records (that you accepted the Terms, and which version) and billing records are retained as long as needed to comply with law and defend legal claims.

• Access, correction, deletion. You can view and edit your profile and preferences in Settings, and delete your account entirely there. You can also email privacy@curiojobs.comto exercise access, correction, deletion, or portability rights and we will respond within the timeframe the law where you live requires (generally 30–45 days).
• Email. Every digest includes a one-click unsubscribe (and you can toggle digests off in Settings). Transactional emails, like sign-in links, are sent only when you request them.
• LinkedIn import is optional. You can always paste or upload a resume instead.
• Opt out of targeted advertising (“Do Not Sell or Share”). Use the cookie controls where shown, turn on the Global Privacy Control signal in your browser (we honor it as an opt-out of sharing), or email privacy@curiojobs.comwith the subject “Do Not Sell or Share.”

US state privacy rights.Depending on where you live (for example California, Virginia, Colorado, Connecticut, or Texas), you may have statutory rights to know, access, correct, delete, and port your personal information, and to opt out of sales, sharing, targeted advertising, and profiling. Curio honors these requests for all users regardless of state; the advertising-related “sharing” described in Section 3 is the only processing subject to an opt-out, and the bullet above tells you how. We will not discriminate against you for exercising any right. You may use an authorized agent by providing signed permission; we verify requests via your account email. If we deny a request you may appeal by replying to our decision, and California residents may also contact the California Privacy Protection Agency.

Outside the US. Curio serves job seekers globally, including in the EEA and UK, and is operated from the United States — your information is processed there. If the GDPR or UK GDPR applies to you: our legal bases are performance of our contract with you (providing the matching service you signed up for), your consent where we ask for it (which you may withdraw at any time), and our legitimate interests in securing and improving the Service. You have the rights described above, plus the right to lodge a complaint with your local supervisory authority. Where our service providers process EEA/UK data outside those regions, our agreements with them incorporate appropriate safeguards such as standard contractual clauses. Exercise any of these rights by emailing privacy@curiojobs.com.

We protect your data with encryption in transit, row-level access controls in our database, scoped service credentials, and audit logging of administrative account-impersonation sessions. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as required by law.

The Service is for adults seeking employment and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact privacy@curiojobs.com and we will delete it.

If we make material changes, we will notify you by email or in-product notice before they take effect and update the version and effective date above. Earlier versions are available on request.

Ventana Global LLC dba Curio · privacy requests: privacy@curiojobs.com · general support: support@curiojobs.com. See also our Terms of Service.