Privacy Policy

1. About this policy

CurbCrush ("CurbCrush", "we", "us" or "our") runs the website and app at curbcrush.app, which turns real-estate listings into short marketing videos (the "Service"). This Privacy Policy applies to information we handle when you visit the site, create an account or use the Service. It is part of our Terms of Service.

CurbCrush is built for real-estate professionals in the United States, and this policy is written with US law in mind. Section 10 describes additional rights for people in the European Union, the United Kingdom and California.

2. Information we collect

Information you give us

• Account details. Your name, email address and password when you sign up. Your password is stored only as a one-way hash; we never store or see it in plain text.
• Brand profile. The details you add to brand your videos: agent name, brokerage, phone number, email, website, brand color, headshot and logo, plus your default voice and template.
• Listings. The listing links you submit, and the listing details you type or that we import: address, price, beds, baths, square footage, lot size, year built, property type, description, features and photos. When you upload photos yourself, we store those too. We also record when you confirmed that you have the rights to use the photos.
• Scripts, captions and posts. Script edits, social captions, the times and platforms you schedule, and your TikTok choices (who can view, comments, Duet, Stitch and your consent).
• Messages to us. If you email us, we keep the conversation and anything you include in it.

Information created when you use CurbCrush

• Your videos. The scripts, voiceover audio, rendered videos and thumbnails we produce for you.
• Social connections. When you connect social accounts, we store the id of your profile with our scheduling provider and a list of the connected accounts (platform, account id, display name and whether the connection is active). We never receive your social media passwords, and the platforms' access tokens are held by our scheduling provider, not by us.
• Post history. The status of each scheduled post, the ids the platforms give the published post, and any error the platform returned.
• Billing records. Your plan, subscription status, billing period dates, Stripe customer and subscription ids, and a history of credits granted, used and returned. Your card details are collected and stored by Stripe; they never reach our servers.
• Sign-in sessions. When you sign in, we record the session along with the IP address and browser (user agent) it came from, so the session works and so we can spot misuse.
• Usage and logs. A record of each listing page we retrieve for you (the site, whether it worked and when), used to apply import limits and manage costs. Our hosting provider also keeps short-term request and error logs, which include IP addresses, the pages requested and technical details of errors.

Information from other people's websites

When you import a listing, we retrieve the page you linked to and keep the listing details and photos on it, plus a trimmed copy of the page's listing data. Listing pages can include the names of the listing agent and brokerage. We use this information only to make your video.

3. How we use your information

We use the information above to:

• create and secure your account, keep you signed in and stop unauthorized access to your videos and files;
• provide the Service: import listings, write scripts, generate voiceovers, render your branded videos and publish the posts you schedule;
• run your subscription, grant and track video credits and handle payments;
• answer your questions, and send you messages about your account, billing or important changes to the Service or our terms;
• keep the Service working and safe: fix bugs, apply usage limits, manage costs, and prevent fraud, abuse and infringement; and
• comply with the law and enforce our Terms of Service.

We process your information because we need it to provide the Service you signed up for, because we have a legitimate interest in keeping the Service secure and working well, because the law requires it, or, where we ask for it, because you have given consent. We do not send marketing newsletters today; if we start, we will let you opt out.

4. How AI processing works

CurbCrush uses third-party AI services to make your videos. Here is exactly what each one gets:

• Script writing (Anthropic's Claude API). We send the listing facts and description, the order of the photos and your agent name. We do not send the photos themselves, your contact details or your account information.
• Voiceover (ElevenLabs). We send the text the voice should read and the voice you picked. The voice samples in the voice picker read a fixed example line and do not contain your information.

These providers process this information to return a result to us, under their commercial API terms. We do not use your content to train AI models ourselves. AI output can be wrong; please review every video before you post it.

5. Who we share information with

We do not sell your personal information, and we do not share it for targeted advertising. We share it only in these situations:

Service providers

We use the following companies to run CurbCrush. They process information on our behalf, only to provide their service to us.

Social platforms you post to

When you schedule a post, your video, thumbnail, caption and settings go to Late and then to the platforms you picked (Instagram, TikTok, YouTube or Facebook). Once published, the post is public or limited according to the platform settings you chose, and the platform's own privacy policy applies to it. Late keeps a copy of the video files used in your posts so they can be published; deleting a video in CurbCrush does not remove copies already sent to Late or posts already published.

Legal reasons and business changes

We may disclose information if we believe in good faith that the law, a court order or a valid legal request requires it, or that it is necessary to protect the rights, property or safety of CurbCrush, our users or others, including responding to infringement notices. If CurbCrush is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that deal, and this policy will continue to apply to it.

With your direction

We share information in any other way you ask us to.

6. Cookies and tracking

We use only the cookies the site needs to work:

• Session cookie. Keeps you signed in. It is set when you log in and cleared when you log out or the session expires.
• cc_flash. Carries a one-time confirmation or error message to the next page (for example, "Scheduled post cancelled") and expires after 60 seconds.

We do not use analytics, advertising or social media tracking cookies, pixels or SDKs, and we do not store tracking data in your browser. Because these cookies are essential, there is no cookie banner.

Pages run by other companies that you visit through CurbCrush, such as Stripe's checkout and billing pages and the sign-in pages you use to connect a social account, set their own cookies under their own policies. Our pages also load a typeface from Google Fonts, which means your browser contacts Google's servers.

7. How long we keep information

We keep your information for as long as your account is open and you are using CurbCrush, and delete it as described here:

• Deleting a video. When you delete a video, we delete it from our database, cancel any of its posts that have not gone out yet, and remove its video file, thumbnail and voiceover from storage. If no other video uses the same listing, we also delete the listing details and its photos.
• Disconnecting social accounts. When you disconnect in Settings, we ask Late to disconnect your accounts and delete our record of the connection.
• Closing your account. To close your account, email support@curbcrush.app from the address on your account. We will delete your account, brand profile, listings, videos, posts, connections and credit history, and the files in our storage (photos, headshot, logo, voiceovers and videos), within 30 days of your request.
• Sessions and logs. Session records expire on their own. Request logs kept by our hosting provider are deleted automatically after a short period.

A few exceptions: we keep records of payments and invoices for as long as tax and accounting law requires (Stripe keeps its own records under its policy). We may keep information we need to resolve a dispute, enforce our terms or deal with an infringement claim until it is settled. Our database provider keeps short-term backups for disaster recovery, which roll off on their own schedule. Copies held by Late for published posts, and posts already on social platforms, are not deleted by us; you can remove posts on each platform.

8. Security

We protect your information with industry-standard measures. All traffic to CurbCrush is encrypted with TLS (HTTPS). Passwords are stored as salted one-way hashes. Your photos, videos and brand files are kept in private storage and served only to your signed-in account, or through short-lived signed links. Access to production systems and API keys is limited to the people who need it to run the Service.

No system is perfectly secure, and we cannot guarantee that your information will never be accessed or disclosed without permission. If we learn of a breach that affects your personal information, we will notify you as the law requires. Please use a strong, unique password and tell us right away if you think your account has been compromised.

9. Your choices

• Update your brand profile at any time in Settings. To change the name or email on your account, email us.
• Delete individual videos from the video's page.
• Disconnect your social accounts in Settings, and cancel scheduled posts before they go out.
• Cancel your subscription in Billing.
• Get a copy of your information, correct it or delete your account by emailing support@curbcrush.app. You can also download your finished videos from the app at any time.

We will respond to requests within 30 days. To protect your account, we may need to confirm that the request comes from you, usually by replying from the email address on the account.

10. Privacy rights by region

European Union and United Kingdom. If the GDPR or UK GDPR applies to you, you have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to our processing of it, and to withdraw consent where we rely on consent. CurbCrush is the controller of your account information. Our legal bases are described in section 3. You also have the right to complain to your local data protection authority, though we would appreciate the chance to address your concern first.

California. If you are a California resident, you have the right to know what personal information we collect, use and disclose (described in this policy), to request a copy of it, to have it corrected or deleted, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. You may use an authorized agent to make a request on your behalf.

Other US states. Residents of other states with privacy laws may have similar rights. We honor requests from any user regardless of where you live.

To make any request, email support@curbcrush.app.

11. Children

CurbCrush is a tool for real-estate professionals and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, email us and we will delete it.

12. Where your information is processed

CurbCrush is operated from the United States. Our service providers process information in the United States and in other countries where they or their infrastructure operate; Cloudflare, for example, runs a global network. When information is transferred out of the EU or UK, we rely on our providers' standard safeguards for international transfers, such as the European Commission's Standard Contractual Clauses.

13. Changes to this policy

We will update this policy when our practices change, for example when we add or replace a service provider. When we do, we will change the "Last updated" date above. If a change is material, we will tell you by email or in the app before it takes effect.

14. Contact us

Questions or requests about your privacy? Email us at support@curbcrush.app.