Privacy Policy
Last updated: 10 August 2026 · Applies to the Cur8 platform and website.
Who we are
Cur8 is an AI Chief Marketing Officer platform operated by SapienOne (“we”, “us”). Questions or requests about this policy: privacy@cur8.dev.
Two roles, two kinds of data
For your account (name, email, login, workspace content) we are the data controller. For the contacts your workspace holds. Leads, investors, customers you import or source. We act as a processor on your behalf: you decide who is contacted and you carry the lawful basis for contacting them. We provide the controls (consent-aware sending, one-click unsubscribe, permanent suppression, blackout windows, audit logs) to help you meet those obligations.
What we collect on this website
The marketing site sets no third-party trackers. Our application and customer sites that install our measurement snippet collect: pages viewed, time on page, scroll depth, and clicks. IP addresses are hashed at ingest and never stored raw; location is kept at country/region level only. The snippet sets one first-party cookie (a random visitor id). We do not fingerprint devices.
Email measurement
Emails sent through Cur8 may include an open pixel and rewritten links so the sender can see engagement. Every commercial email carries a working one-click unsubscribe; unsubscribed addresses are added to a permanent suppression list that the platform enforces on every future send.
AI processing
Workspace content (documents you upload, messages, lead data) may be processed by large-language-model providers via API to generate drafts and analysis. Content generation is grounded in your own material; we instruct models not to invent claims. We do not use your workspace content to train models.
Subprocessors
Infrastructure and services we rely on: Amazon Web Services (hosting, ap-south-1), Anthropic and other model providers via OpenRouter (AI processing), Brevo / Mailchimp Transactional / Resend (email delivery), Microsoft 365 (when you connect it), Apollo (when you connect it), ZeroBounce (email verification, when you connect it), Unipile (LinkedIn connectivity), Langfuse (AI observability). Each receives only what its function requires.
Retention & deletion
Workspace data persists while your account is active. On verified request to privacy@cur8.dev we delete your account and workspace data within 30 days, except suppression lists (kept so opted-out people stay opted out) and records we must retain by law.
Your rights
Depending on your jurisdiction you may have rights of access, correction, deletion, and portability. Contacts who received email via Cur8 can use the unsubscribe link in any message; site visitors can decline tracking via the customer site’s consent banner, and we honor Global Privacy Control.
Changes
We will post updates here with a new “last updated” date; material changes will be announced to account holders by email.