Privacy Policy

In the course of serving our customers, Kurv may collect certain personal information. In this Privacy Policy, we explain what information we collect about you and why, how we may share that information, and how we protect and maintain the privacy of that information. It also describes rights you may have under applicable laws.

Types of Information We Collect and Why

Kurv collects personal information from you only to the extent that you agree to provide it. That information includes information we get from you; information about transactions we process for you; and information from other sources like consumer reporting agencies, data resellers, and governmental authorities.

You provide some information directly to us through this website, like who you are, how we can contact you, what you sell, and how much you sell. You also provide information to us indirectly: by accessing this website, for example, you provide us with the IP address of the computer or device you use to connect with us. This information helps us to determine which of our services can be helpful to your business. We also ask for information that allows the money you earn from sales through Kurv to end up in the right bank account. We know this information is sensitive and private. But without this information, we will not be able to serve you.

We use this information only for limited purposes such as:

• Giving you information about our services, and other information you request;
• Processing transactions between you and your customers;
• Providing customer service and support;
• Assessing activity in your account for fraudulent activity; and
• Complying with federal, state, and local laws (including credit reporting laws) and rules of VISA / MasterCard and other card brands.

We will communicate with you regarding these purposes and for others, including marketing. Users may “opt out” of receiving some future communications from Kurv by following the instructions below.

When you use our website, we use cookies and similar technologies to collect certain information, including your Internet Protocol address (IP Address), geolocation of your device, browser type, referring URLs (e.g., the website you visited before coming to our website), domain names associated with your internet service provider, and any other information regarding your interaction with our website. For additional information regarding our use of these technologies, see the “Cookies and Tracking Technologies” section below.

Who We Share With and Why

In general, and except for the situations specifically described below, we do not share any information about you or your business with anyone without your express consent.

We share some personal information with third parties for our everyday business purposes, such as processing transactions and maintaining account(s), fraud monitoring, and responding to court orders and legal investigations, or reporting to credit bureaus. We share such information as needed to process transactions between you and your customers as you and your customer request or authorize, including the authorization, settlement, billing, processing, clearing, transferring, reconciling or collection of amounts charged, debited, or otherwise paid using a debit, credit, or other payment card, check, or account number, or by other payment means. The third parties with whom we share personal information include financial institutions and service providers directly involved in the transactions we process for you, including banks, the card brands, the automated clearing house, and payment gateways, as well as non-affiliated non-financial companies such as security companies and direct marketers. 

Information about you or your business may also be shared in connection with any sale or transfer of all or substantially all of Kurv’s assets or business. In all such situations, we stress the confidential nature of the information being shared.

We may share or make available limited personal information that we collect as you navigate our website (such as mobile device identifiers) with ad tech companies and other online service providers. When we share your personal information in this context, we follow applicable legal requirements, which may require that we provide opt-out rights or other individual rights.

How We Handle Former Customer Information

We are required by federal, state and local laws (including credit reporting laws) and rules of VISA / MasterCard and other card brands to retain information in our files for former customers. We treat the personal information of former customers the same way we treat such information for active customers.

How We Protect Personal Information

Our website has industry-standard security measures in place to protect against unauthorized access to, and loss, misuse, and alteration of the personal information and merchant account data we collect and acquire once you become a customer of Kurv (including sales and transaction information). This current, potential, and former customer information is maintained on Kurv’s internal secure network that can be accessed and reviewed only by utilizing a unique user ID and password. While there is no such thing as “perfect security” on the Internet, we will take all reasonable steps to ensure the security of that information. However, we cannot guarantee the security of information provided over the Internet. 

How Long We Keep Personal Information

We retain your information for as long as needed: (i) to provide our services to you; (ii) fulfill the purposes outlined in this Privacy Policy; and (iii) to comply with our legal obligations, resolve disputes, and enforce any agreements. Criteria we will use to determine how long to retain your personal information include the nature and length of our relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your personal information.

This Website Is Not For Children

Our services and website are not directed at or intended for anyone under the age of 18. We do not knowingly collect or maintain information from children on our website.

How to Contact Us or Opt-Out of Receiving Certain Communications

You may change or modify information about you or your business that you previously provided or “opt out” of receiving communications from us for marketing purposes e-mailing your request to [email protected] or calling us at 1-800-726-2117.

Links to Third-Party Websites

We are not responsible for the practices employed by any websites or services linked to or from our website, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing personal information to third parties, since any personal information disclosed will be handled in accordance with the applicable third party’s privacy policy. 

In some cases, we offer links to social media platforms that enable you to easily connect with us or share information on social media. Any content you post via these social media pages is subject to the terms of use and privacy policies for those platforms.

International Use

If you are using our services from outside of the United States, please note that our website is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Privacy Policy.

Cookies and Other Tracking Technologies

We and our service providers may use cookies and similar technologies to collect usage and browser information about how you use our website. The technologies we use for this automatic data collection may include cookies and web beacons that permit us to verify system and server integrity and generate statistics around the popularity of certain content. We process the information collected through such technologies, which may include or be combined with personal information, to help operate certain features of our website, to enhance your experience through personalization, and to help us better understand the features of our websites that you and other customers are most interested in.

Website Analytics – We use analytics services that use cookies and other technologies that collect your personal information to assist us with analyzing our website traffic and usage to optimize, maintain, and secure our website and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services: 

• Google Analytics: To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data from sites or apps that use our services.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites. 
• Pixels: We use Meta and LinkedIn pixels to track user activity on our website and improve downstream offerings, including interest-based advertising for our services and those of our partners and service providers.

Interest-Based Advertising – We may also allow or enable third parties to collect personal information to provide their interest-based advertising on behalf of our products and services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you. 

We do not control these third parties’ collection or use of your information for these purposes, or the opt-out options they may individually offer you via their terms, conditions, and privacy policies. If you have any questions about an advertisement or other targeted content, you should contact the applicable provider directly. Examples of the third-party service providers we engage to serve interest-based advertisements include Google, Meta (including Meta Pixels) and LinkedIn (including LinkedIn Pixels). It is in this context that we may provide advertising networks, data analytics providers, social networks, and video sharing platforms with information such as your IP address, device information, Internet and other electronic network activity information, and geolocation information in the last twelve months.

Selling Personal Information – While we do not sell Personal Information in exchange for monetary consideration, we do disclose Personal Information for other benefits that could be deemed a “sale” under various data protection laws because it is sometimes broadly defined to include activities such as the delivery of interest-based advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior.

Cookie Choices – To manage your preferences with respect to these technologies, you can: 

• Change your cookie preferences in our cookie preference tool or customize your browser settings to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable certain cookies, please note that some parts of our Site may not function properly. These settings may be lost and require reconfiguration if you delete your cookies.

• Block the collection and use of your information by online platforms and ad tech companies for the purpose of serving interest-based advertising by visiting the opt out pages of the self-regulatory programs of which those companies are members: National Advertising Initiative and Digital Advertising Alliance. Please note that even if you opt out of interest-based advertising, you may still see “contextual” ads which are based on the context of what you are looking at on the websites and pages you visit. 
• Review and execute any provider-specific instructions to customize your preferences or opt-out of certain processing, including interest-based advertising, by third-party service providers. For example, to opt-out of this type of advertising by Google, customize your ad preferences, or limit Google’s collection or use of your data, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Meta also offers an Ad Preferences center to customize your settings, as well as a Privacy Policy with additional information on how you can exercise your rights. 

California Residents

This section provides additional information regarding our practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (“CCPA”).

Categories of Personal Information We Collect

The CCPA identifies numerous categories of “personal information” including: Identifiers (including without limitation names, addresses, telephone and fax numbers, email addresses, other contact information, and government-issued identification numbers), Customer Records protected against security breaches (including without limitation the identifiers mentioned above and bank, credit and other financial account numbers, social security number, user names and passwords, and health/medical information), Protected Classification information (like race, gender, ethnicity, etc.), Commercial information, Internet/electronic activity, Geolocation, Audio/video data, Professional / Employment related information, Education information, Biometrics, and Inferences from the foregoing.

Business Purposes for Which We Collect Personal Information

The CCPA defines a “business purpose” as the use of personal information for the business’s or a service provider’s operational purposes, or other notified purposes, provided that the use of personal information shall be reasonably necessary and proportionate to achieve the operational purpose for which the personal information was collected or processed or for another operational purpose that is compatible with the context in which the personal information was collected. The following activities are considered “business purposes” under the CCPA: Auditing related to a current interaction with the consumer and concurrent transactions, and auditing compliance with laws and other standards (“Auditing”) (this will also include the underwriting and due diligence we perform before we enter into any agreement with a customer); Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity (“Detection”); Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business (“Performance”); Debugging to identify and repair errors that impair existing intended functionality (“Repairs”); Internal research for technological development and demonstration (“Research”); and Verifying or maintaining the quality or safety of, and improving, upgrading, or enhancing, a service or device that is owned, manufactured by, manufactured for, or controlled by the company (“Maintenance”).

Categories of Third Parties to Which Personal Information May be Disclosed

The types of entities to which information can be disclosed under the CCPA do not collect personal information directly from consumers, and include without limitation advertising networks (“Ad Networks”), internet service providers (“ISP”), data analytics providers (“Analytics Providers”), government entities (“Government”), operating systems and platforms (“Platforms”), social networks (“Social Networks”), and consumer data resellers (“Resellers”).

Personal Information Collected over the Last Twelve (12) Months

The following table identifies the categories of personal information we have collected over the last twelve (12) months, the sources of that information, our business purposes for collecting the information, and the types of third parties to which we disclosed such information:

Category	Source	Business Purpose	Third Parties
Identifiers such as:Names, addresses, telephone and fax numbers, email addresses, other contact information, government-issued identification numbers	ConsumerGovernment entitiesConsumer data resellers	* Auditing* Detection* Performance* Research* Maintenance	* ISP* Analytics Providers* Government* Platforms
Customer Records such as:Identifiers, bank, credit, and other financial account numbers, social security numbers, and user names and passwords	ConsumerGovernment entitiesConsumer data resellers	* Auditing* Detection* Performance* Research* Maintenance	* ISP* Analytics Providers* Government* Platforms
Commercial Information such as:Past and current businesses, banks, financial institutions, processors, and payment gateways	ConsumerGovernment entitiesConsumer data resellers	* Auditing* Detection* Performance* Research* Maintenance	* ISP* Analytics Providers* Government* Platforms
Internet/electronic activity such as:Reports and data from service providers on sales and sales-related activities	ConsumerGovernment entitiesConsumer data resellers	* Auditing* Detection* Performance* Research* Maintenance	* ISP* Analytics Providers* Government* Platforms
Professional/Employment	ConsumerGovernment entitiesConsumer data resellers	* Auditing* Detection* Performance* Research* Maintenance	* ISP* Analytics Providers* Government* Platforms

Exercising Your Privacy Rights

Depending on where you live, and subject to applicable exceptions, you may have certain rights with respect to your personal information under applicable data protection laws:

• Access – The right to request access to and obtain a copy of any personal information we may have about you.
• Deletion – The right to delete your personal information that we have collected or obtained, subject to certain exceptions.
• Correction – The right to request that we correct any inaccuracies in your personal information, subject to certain exceptions.
• Opt Out of Certain Processing – The right to: (a) opt out of the processing of your personal information for purposes of targeted or cross-context behavioral advertising, (b) opt out of the sale of your personal information, and (c) limit the use of your sensitive Personal Information (if applicable). We do not collect or process sensitive Personal Information outside of purposes permitted by law (such as section 7027(m) under the California Consumer Privacy Act Regulations), so we do not offer the option to limit its use.
• Objection/Restriction of Processing – The right to object or restrict us from processing your personal information in certain circumstances.
• Withdraw Consent – The right to withdraw your consent where we are relying on your consent to process your personal information.
• Automated Decision-Making – The right to know when you are subject to automated decision-making, the Personal Information used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right, depending on your location, to consent or opt out of (a) this automated decision-making or (b) any profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile you or other individuals in a manner that would result in legal or similarly significant effects, or engage in automated decision-making, so we do not offer an opt out of such activity.
• Lodge a Complaint – The right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

To exercise any of the privacy rights afforded to you under applicable data protection laws, please e-mail us at [email protected]. You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Privacy Policy. However, should you withdraw your consent or object to processing of your personal information, or if you choose not to provide certain personal information, we may be unable to provide some, or all, of our services to you. 

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your personal information. We may need to verify your identity before fulfilling certain requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making certain requests on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

Changes to this Privacy Policy

Please note that we may modify or update this Privacy Policy from time to time, so please review it periodically. If we make material changes to how we treat personal information, we will notify you according to applicable law. Unless otherwise indicated, any changes to this Privacy Policy will apply immediately upon posting to our website. You are responsible for periodically visiting our website and this Privacy Policy to check for any changes. 

Contact Us

If you have any questions about our practices or this Privacy Policy, please contact us at [email protected]. Individuals with inquiries can also contact our Data Protection Officer at [email protected].