Curevora Privacy Policy
Curevora, LLC ("Curevora," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, when we disclose it, the choices available to you, and how to contact us.
This policy applies to Curevora's website, account-based Free QR tools, QR Checkout, Vendor Dashboard, Partner Program activities where applicable, Manual Pay / plugin services, and related communications and support (collectively, the "Services").
Curevora is non-custodial payment-handoff and checkout-assist software. In the current QR Checkout workflow, customers pay vendors directly through Venmo. Curevora does not receive, hold, transmit, escrow, or control those funds.
1. Who This Policy Applies To
This Privacy Policy may apply to:
- Vendors and other users who create Curevora accounts
- Visitors to Curevora websites and applications
- People who scan tracked or minted Curevora QR codes
- People who contact Curevora for support, demonstrations, consultations, or other inquiries
- Applicants and participants in the Curevora Partner Program, where applicable
Account Owner eligibility: The person who creates and owns a Curevora account, accepts the applicable Terms, and assumes responsibility for any paid subscription must be at least 18 years old or otherwise meet the applicable legal age and capacity requirements to enter into the agreement.
This requirement applies to the Account Owner. It does not necessarily mean that every person who may assist with or operate Curevora for the Account Owner's business must be 18 years old. Rules for separate authorized-user accounts or secondary users have not yet been finalized.
2. Information We Collect
The information Curevora collects depends on how you use the Services.
A. Account and Profile Information
Free, Starter, and Pro users create Curevora accounts.
We collect the account information you provide when creating or managing your account, including:
- Name
- Email address
- Account authentication information
As part of account creation, Curevora may also record information relating to your acceptance of Curevora's legal terms and Account Owner eligibility attestation, such as the date and time of acceptance and the applicable legal-document version where supported.
Curevora does not currently collect date of birth, birth month or year, or other formal age-verification information as part of this process. Curevora is also not currently performing formal identity or age verification.
Depending on the Curevora features you use, we may also collect information that you choose to save to your Curevora account or submit through the Services. For example, when you save information from the Free QR generator, Curevora may store your Venmo handle, stand name, product names, prices, and SKUs so that the information can be available for later use or reprinting.
Simply generating a Free QR card does not, by itself, send that generator information to Curevora. Information is transmitted to Curevora when you choose to save it or otherwise submit it through the Services.
The Free plan is a $0 account-based product. Creating a Free account does not require payment information merely because the account has no subscription charge.
B. Subscription and Billing Information
Starter and Pro are paid subscription plans.
Curevora uses Stripe to process Curevora subscription payments. Stripe collects and processes payment and billing information needed to complete those subscription transactions.
Curevora may receive subscription and billing information from Stripe that is needed to manage your Curevora account, such as your plan, subscription status, billing status, transaction identifiers, and related account records.
Curevora subscription billing is separate from the vendor-to-customer Venmo payment workflow. Curevora does not process the payments that customers make to vendors through Venmo.
C. QR Scan and Dashboard Information
Curevora has two different QR paths.
Free/direct QR codes: Free QR codes go directly into the Venmo payment handoff. They do not route through Curevora first for Dashboard scan tracking and do not feed scan/tap activity into the Vendor Dashboard.
Starter and Pro tracked/minted QR codes: Tracked or minted QR codes route through Curevora before the customer is handed to Venmo. When one of these codes is scanned or tapped, Curevora may collect information associated with that interaction, including:
- Date and time of the scan or tap
- The QR card or code involved
- Product or offer context associated with the code
- Selling-location, market, or card context associated with the code
- IP address and regional location information derived from it where used for available Dashboard analytics
Curevora uses this information to provide scan/tap and related Dashboard analytics to the applicable vendor.
Curevora does not currently receive confirmation from Venmo that the customer completed a payment. A tracked scan, tap, or checkout handoff is therefore not proof of a completed payment or sale.
D. Website and App Usage Information
When you visit or use Curevora's website or applications, Curevora and its service providers may automatically collect technical and usage information associated with your visit or use of the Services. This may include information such as your IP address, general device or browser information, pages or features used, approximate or regional location derived from your IP address, and information collected through cookies or similar technologies.
Curevora uses Google Analytics 4 for website analytics and Cloudflare for website delivery, security, and related infrastructure functions.
E. Communications and Support Information
If you email us, request support, schedule a consultation or demonstration, participate in testing, or otherwise communicate with Curevora, we may collect the information you provide, such as:
- Name
- Email address
- The contents of your message or request
- Support, QA, or appointment information
- Other information you choose to provide
Curevora uses Google Workspace / Gmail for business email and may use Google Calendar for appointment scheduling.
F. Partner Program Information
If you apply to or participate in the Curevora Partner Program, we may collect information reasonably needed to evaluate, establish, administer, and support the Partner relationship. This may include:
- Name and contact information
- Business or organization information
- Partner application and relationship records
- Referral and attribution information
- Training, certification, acknowledgment, and compliance records
- Tax, payout, and related administrative information
- Communications relating to the Partner relationship
Some Partner Program administration may initially be handled manually. As Curevora implements additional Partner Program systems or service providers, this Privacy Policy may be updated when appropriate to reflect material changes in how Partner information is collected or processed.
3. Vendor-to-Customer Venmo Payments
Curevora is non-custodial payment-handoff and checkout-assist software. In the current QR Checkout workflow, customers pay vendors directly through Venmo.
Curevora does not receive, hold, route, transmit, escrow, or control those funds.
For Starter and Pro tracked/minted QR codes, Curevora may collect the scan/tap and related context described in Section 2 before handing the customer to Venmo. This information reflects a scan, tap, or checkout handoff. It does not confirm that the customer completed a Venmo payment.
Curevora does not currently receive a payment-completion signal from Venmo and therefore cannot verify whether a Venmo payment was completed. Curevora does not treat a QR scan, tap, or checkout handoff as a confirmed payment or sale.
When you use Venmo, information collected or processed by Venmo is governed by Venmo's own privacy practices. Curevora does not control Venmo's privacy practices.
4. How We Use Information
Curevora may use the information described in this Privacy Policy to:
- Create, authenticate, maintain, and support Curevora accounts
- Provide and operate the Services
- Create, save, manage, display, and print QR cards and related information where applicable
- Record tracked/minted QR scans and provide applicable scan/tap and Vendor Dashboard analytics
- Manage Curevora plans, subscriptions, billing, and account access
- Provide customer support, onboarding, demonstrations, testing, QA, and troubleshooting
- Communicate with users about their accounts, subscriptions, security, support requests, and the Services
- Provide product education, product updates, Dashboard information, and promotional offers where permitted by applicable law and consistent with our email practices
- Understand how our website and Services are used
- Maintain, secure, monitor, troubleshoot, and improve Curevora
- Detect, investigate, and help prevent fraud, misuse, abuse, or security incidents
- Maintain records reasonably needed for legal, billing, tax, accounting, dispute, compliance, security, and legitimate business purposes
- Administer Curevora Partner Program relationships where applicable
- Comply with applicable law, legal process, and valid governmental or regulatory requests
5. Email Communications
Curevora uses the email address associated with your account to communicate with you about Curevora and the Services.
We may send account and service-related communications, including messages about:
- Account creation, verification, and access
- Security or password-related matters
- Subscription and billing information
- Customer support and service requests
- Important product, policy, or service updates
We may also send product education, Curevora updates, information about the Vendor Dashboard, and promotional offers where permitted by applicable law and consistent with our email practices.
You may unsubscribe from marketing emails at any time by using the unsubscribe option provided in those messages or by contacting us at info@curevora.com.
Unsubscribing from marketing emails does not prevent Curevora from sending account, security, billing, support, or other service-related communications that relate to your Curevora account or use of the Services.
6. How We Disclose Information
Curevora does not sell personal information.
Curevora uses Google Analytics 4 and Google Signals as described in this Privacy Policy. These services include analytics and advertising-related capabilities. Curevora's use of those capabilities and the information processed by Google are described below.
We may disclose personal information in the following circumstances:
A. Service Providers
Curevora uses trusted service providers to help operate and support the Services. These currently include:
- Supabase for account authentication, database, and related application infrastructure
- Cloudflare for hosting, delivery, security, and related website infrastructure
- Google Analytics 4 for website and usage analytics
- Google Workspace / Gmail for business email and communications
- Google Calendar for appointment scheduling
- Stripe for Curevora subscription billing and payment processing
These service providers may receive or process information as reasonably necessary to provide their services to Curevora. Their handling of information is also subject to their applicable terms and privacy practices.
B. Contractors and Professional Advisors
Curevora may disclose information to contractors, developers, accountants, attorneys, consultants, and other professional advisors when reasonably necessary to operate, develop, secure, support, or advise Curevora.
C. Legal, Security, and Safety Reasons
Curevora may disclose information when we reasonably believe it is necessary to:
- Comply with applicable law, regulation, court order, subpoena, or other lawful process
- Respond to valid governmental or regulatory requests
- Protect Curevora, our users, or others from fraud, abuse, security threats, or unlawful activity
- Investigate or enforce our agreements, policies, or legal rights
- Establish, exercise, or defend legal claims
D. Business Transactions
If Curevora is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be disclosed as reasonably necessary to evaluate or complete that transaction, subject to applicable law.
E. At Your Direction
Curevora may disclose information when you request, direct, or authorize us to do so.
7. Cookies, Google Analytics, and Similar Technologies
Curevora and our service providers may use cookies and similar technologies to operate, secure, understand, and improve the Services.
These technologies may support account authentication, security, website functionality, measurement, analytics, performance, and other features described in this Privacy Policy.
Google Analytics and Google Signals
Curevora uses Google Analytics 4 to understand how visitors interact with Curevora's website and Services. Google Analytics may collect information such as browser or device information, website activity, cookies or similar identifiers, and information used to provide general geographic and usage insights.
Curevora has enabled Google Signals. Google states that, beginning June 15, 2026, the Google Signals setting controls the association of Google Analytics-sourced data with signed-in Google user information for behavioral reporting. Where available, this can enrich aggregated demographic and interest reporting for eligible signed-in users.
Google Analytics and linked Google advertising services may also use cookies or other identifiers depending on Curevora's configuration and users' applicable consent choices. Google states that Consent Mode and applicable Google Ads settings control the collection and use of Google Ads cookies and identifiers from Google Analytics tags. These capabilities can support functions such as audience measurement, advertising personalization, and remarketing when configured and permitted.
Enabling Google Signals does not necessarily mean Curevora is actively using every available Google advertising or remarketing feature. Curevora will describe its actual advertising practices accurately and will update this Privacy Policy when appropriate if those practices materially change.
Your Choices
You can control or delete certain cookies through your browser settings. You can also manage Google's advertising-personalization settings through your Google account and use Google's available Analytics opt-out tools.
Blocking or disabling technologies needed for authentication, security, or account functionality may cause some parts of Curevora not to work properly.
8. Data Retention and Account Deletion
Curevora retains personal information for as long as reasonably necessary to provide and support the Services and for legitimate business, legal, security, billing, tax, accounting, dispute, and compliance purposes.
Retention periods may vary depending on the type of information, why it was collected, how it is used, and whether Curevora has an ongoing legal or business reason to retain it.
Canceling a subscription is not the same as deleting a Curevora account. If you cancel a Starter or Pro subscription, paid Dashboard access continues through the end of the applicable paid billing period and then ends. Ordinary subscription cancellation does not itself delete your Curevora account, QR codes, or historical account data.
You may request deletion of your Curevora account by contacting info@curevora.com.
After verifying an applicable account-deletion request, Curevora will delete or de-identify personal information associated with the account, subject to information that Curevora is required or permitted to retain for legitimate legal, tax, accounting, billing, security, fraud-prevention, dispute, compliance, enforcement, or business-record purposes.
Curevora may retain limited records when needed to document matters such as legal-document acceptance, Account Owner eligibility attestations, billing or transaction history, privacy requests, marketing-email opt-outs, disputes, or compliance obligations.
9. Your Choices and Privacy Rights
Curevora provides several ways for you to manage information and communications associated with your use of the Services.
Account Information
You may contact Curevora to request access to or correction of applicable personal information associated with your Curevora account.
Account Deletion
You may request deletion of your Curevora account by contacting info@curevora.com. Account deletion is different from canceling a paid subscription and is subject to the retention provisions described in Section 8.
Marketing Emails
You may unsubscribe from Curevora marketing emails at any time by using the unsubscribe option included in those messages or by contacting info@curevora.com.
Unsubscribing from marketing emails does not prevent Curevora from sending account, security, billing, support, or other service-related communications.
Google Analytics and Advertising Choices
Curevora uses Google Analytics 4, Google Signals, and related Google Analytics Advertising Features as described in Section 7.
Google provides controls that allow users to manage certain advertising-personalization settings through their Google account. Google also provides tools that may allow users to limit or prevent their website activity from being made available to Google Analytics.
You may also control or delete certain cookies through your browser settings. Blocking technologies needed for authentication, security, or account functionality may cause portions of Curevora not to work properly.
Additional Privacy Rights
Depending on where you live and which privacy laws apply to Curevora, you may have additional rights regarding your personal information. These may include rights to request access to, correction or deletion of, or a copy of certain personal information, or to opt out of certain uses of personal information.
To submit an applicable privacy request, contact:
info@curevora.com
Curevora may take reasonable steps to verify that the person making a request is the Account Owner or is otherwise authorized to make the request before providing, changing, or deleting account information.
Curevora will respond to applicable privacy requests as required by applicable law.
10. Security
Curevora uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure.
Curevora also relies on third-party service providers for portions of its technology and business infrastructure, as described in this Privacy Policy. We take reasonable steps to use service providers appropriate for the Services they provide.
No website, application, network, database, transmission method, or storage system can be guaranteed to be completely secure. While Curevora works to protect the information in its care, we cannot guarantee that unauthorized access, security incidents, or other events will never occur.
You are responsible for maintaining the confidentiality of your Curevora account credentials and for taking reasonable steps to protect access to your account.
If you believe your Curevora account or information may have been accessed or used without authorization, please contact us at info@curevora.com.
11. Account Owner Eligibility and Minors
The person who creates and owns a Curevora account, accepts the applicable Terms, and assumes responsibility for any paid subscription (the "Account Owner") must be at least 18 years old or otherwise meet the applicable legal age and capacity requirements to enter into the agreement.
As part of account creation, the Account Owner must attest that they meet Curevora's applicable age and legal-capacity requirements and have authority to accept the applicable Terms. Curevora may record information relating to that attestation and acceptance, such as the date and time of acceptance and the applicable legal-document version where supported.
Curevora does not currently collect date of birth, birth month or year, or other formal age-verification information as part of this process. Curevora is also not currently performing formal identity or age verification.
The Account Owner eligibility requirement applies to the person who owns the Curevora account and accepts the contractual and billing responsibility. It does not necessarily mean that every person who may assist with or operate Curevora for the Account Owner's business must be at least 18 years old.
Curevora is not directed to children under 13. If you believe Curevora has collected personal information from a child under 13 in circumstances that should be reviewed, please contact us at info@curevora.com.
12. Third-Party Services and Links
Curevora uses third-party service providers to help operate and support the Services. These providers are described elsewhere in this Privacy Policy, including in Sections 6 and 7.
Curevora may also link, redirect, or connect you to third-party websites, applications, or services that operate under their own terms and privacy practices.
For example, the current Curevora QR Checkout workflow may hand a customer from Curevora to Venmo to complete a payment directly with the vendor. Information that Venmo collects or processes through the Venmo service is governed by Venmo's own privacy practices.
Similarly, when a third party collects information directly from you through a service it provides, that third party's applicable privacy policy and terms govern its handling of that information.
Curevora does not control the independent privacy, security, content, or availability practices of third-party services. We encourage you to review the privacy policies and terms of third-party services you choose to use.
References to or use of third-party products, services, names, or trademarks do not by themselves mean that Curevora is endorsed by, sponsored by, or formally partnered with those third parties.
13. Changes to This Privacy Policy
Curevora may update this Privacy Policy from time to time as our Services, technology, business practices, or legal requirements change.
When we update this Privacy Policy, we will post the revised version and update the Last Updated date at the top of the policy.
If we make a material change to how we collect, use, or disclose personal information, Curevora may provide additional notice through the Services, by email, or by another appropriate method when required or appropriate.
Any updated Privacy Policy will apply as described in the revised policy and subject to applicable law.
14. Contact Curevora
If you have questions about this Privacy Policy, want to make a privacy request, request correction or deletion of applicable account information, or report a privacy or security concern, please contact:
Curevora, LLC
165 E 900 N, #184
Spanish Fork, UT 84660
United States
Email: info@curevora.com