Privacy Policy

1. Scope

This policy describes how CurateBook handles personal information when you visit our website, create an account, upload photographs, build or order a photo book, use optional curation features, or contact support. CurateBook is operated by Simply Get Holdings, based in Pasco County, Florida, which is responsible for the personal information described here.

2. Information we handle

• Account and support information: email address, name you provide, authentication records, and messages you send us.
• Project content: photographs, filenames, captions, chapters, crop and focal-point choices, book settings, curator decisions, and generated proofs.
• Photo metadata: available file type, dimensions, orientation, date, device, and location metadata needed to import, organize, or troubleshoot a project.
• Order information: selected product, page count, price, shipping name and address, order status, and transaction references. Stripe processes payment-card information; CurateBook does not intentionally store full card numbers or security codes.
• Technical and security records: information needed for authentication, upload recovery, fraud prevention, service reliability, and security investigation, such as request and device details.

Analytics technology in use is identified in the next section.

3. Analytics and your consent

CurateBook uses Google Analytics 4, provided by Google, and only after you accept it. On your first visit we ask, through an on-page notice, whether you consent to analytics. Until you choose “Accept analytics”, Google’s analytics script is not requested from your browser at all — no code loads, no connection is made to Google, and no page views or events are recorded for your visit.

If you accept, we record which pages are viewed and a small number of product milestones: creating an account, creating a book, starting checkout, and completing a purchase. We do not send your email address, your name, your book titles, your chapter text, your photo filenames, or your photographs to Google. Page addresses are stripped of their query strings before they are sent, so references such as book or order identifiers are not included.

No advertising features are enabled. The Google Consent Mode advertising signals — advertising storage, advertising user data, and ad personalization — are set to denied and are never granted. We do not use Google Signals, remarketing, or advertising audiences, and we do not use analytics data to target advertising to you.

You can change your choice at any time using the “Cookie / analytics preferences” link in the site footer, which reopens the notice so you can accept or decline. Declining stops analytics collection. Analytics is never loaded on our internal administrative tools.

Separately, CurateBook also records anonymous, cookie-free site measurement in its own database, regardless of your Google Analytics choice above — it identifies no one, so no consent choice applies to it. What is recorded: the page path you visited (without any query string), the referring site, a coarse device type (desktop, mobile, or tablet), your country, campaign tags from links you followed (such as utm_source), and a small number of product milestones such as creating an account, creating a book, starting checkout, and completing a purchase. It stores no cookie, no IP address, no email address, no name, and no photo or file names. The key used to group one visitor’s events together is a one-way cryptographic hash that changes every day and is discarded at the end of that day, so it cannot be used to identify or re-identify anyone or to follow a visitor from one day to the next. This measurement is kept for up to 400 days and then permanently deleted on a daily schedule. Like Google Analytics, it is never loaded on our internal administrative or staff tools.

This same measurement also records product-health signals so we can find and fix problems: if a page encounters an error, we record which feature it happened in (for example the AI curator, automatic naming, saving a title, saving a book, or an upload), a general error type (such as a network problem, a timeout, or a server error), and the step in the flow where it happened. We also record whether an AI curator run or a title save succeeded, failed, or partly finished. None of this includes the error’s technical message text, a book title, a photo or file name, or anything else you typed or uploaded — only these fixed, general categories. It is grouped by the same daily-rotating visitor key described above, never by your account, so a staff member reviewing error trends cannot tell which customer hit them.

4. How we use information

We use information to operate accounts; receive and recover uploads; organize, edit, render, print, ship, and support books; process payments; communicate service and order updates; prevent abuse; troubleshoot and secure the service; comply with law; honor valid privacy requests; and send the emails described in “Emails we send.”

5. Emails we send

Service emails. We email you about your account, your orders and shipments, and your projects, including advance notice before an inactive book is deleted (see “Retention and deletion”). These are part of the service and are sent while you have an account.

Reminders about unfinished books. If you start a book and have not ordered, we may send up to three reminders, about 2, 7, and 21 days after your last activity. Reminders stop when you place an order. Every reminder includes an unsubscribe link that opens Email preferences in your CurateBook account — no sign-in is needed to unsubscribe — and you can change this at any time under Account › Email preferences. Unsubscribing stops reminders but not service emails. Reminders are sent from donotreply@curatebook.com; for help, write to support@curatebook.com.

We do not share your email address with advertisers, and we do not sell or rent our email list.

7. Optional AI features

Some features may offer optional analysis by an external AI provider. Depending on the feature, the data sent may include photo pixels or project context such as dates, places, photo counts, and sample filenames. Automatic naming and AI photo curation use Anthropic; the AI Enhancer uses Replicate. Before any photo is sent for an optional feature, its consent screen describes the feature and the data it sends, and asks for your agreement. Standard upload and local scoring do not by themselves authorize an optional external AI transfer.

Automatic naming (book title and chapter introductions) uses project context only — chapter dates, place names, photo counts, and up to three sample filenames per chapter — and never photo pixels. The naming notice is accepted with the Terms at account creation and is recorded with its version and date. Photo analysis features remain separately consented per book.

AI Enhancer. If you choose Enhance on a photo, that one photo is sent to Replicate, our image-enhancement service, which sharpens and upscales it and returns the enhanced copy. We send only the photo, not your name, email address, captions, or location. We keep your original; the enhanced copy is stored with your project, and you can switch back to the original at any time. The Enhance screen asks for your agreement before the first photo in each book is sent, and we record that agreement with its date. Each book includes 10 free enhancements.

We do not make promises about an AI provider’s own model-training or data-retention practices beyond what that provider’s terms state. You may decline optional AI and continue using the standard book-building tools.

8. Service providers and disclosure

We disclose only the information reasonably needed for hosting and storage, authentication, payments, optional AI requested by the customer, printing, shipping, email delivery, support, security, or legal compliance. Current categories include Supabase for application services, Vercel for web hosting, Stripe for payment processing, Anthropic for automatic naming and the optional AI curator, Replicate for the optional AI Enhancer, Resend for email delivery, Google for analytics where you have accepted it, and production and delivery providers used for an order.

CurateBook does not sell customer photographs or personal information, and does not use them for targeted advertising.

9. Retention and deletion

We keep information only for as long as reasonably needed for the purpose described, including active projects, order fulfillment, customer-requested recovery or reprints, security, legal obligations, and dispute resolution. Different records have different periods. Deletion may require coordinated removal from storage, databases, backups, and providers and may be limited by legal or order-record obligations.

Inactive books. A book that has never been ordered and has had no activity for 90 days is deleted together with its uploaded photographs. Opening, editing, or uploading to a book counts as activity and restarts the 90 days. We email you twice before deletion, about 14 days and about 3 days ahead. After deletion, a book can be restored for 72 hours on request to support@curatebook.com; after that it is permanently erased from our active systems, and copies in backups expire on our normal backup schedule.

Ordered books. Books you have ordered are not deleted for inactivity. We keep order records as long as needed for fulfillment, reprints, accounting, and legal obligations.

Except where this policy states a specific period, we do not promise automatic or immediate deletion within a fixed number of days.

10. Your choices and requests

You may ask to access, correct, export, or delete personal information, or withdraw optional AI consent for future processing, by emailing support@curatebook.com. We may need to verify your identity and may retain information where required or permitted by law. Applicable rights and appeal procedures depend on where you live and will be honored as required.

11. Security

We use technical and organizational safeguards intended to protect customer information, including access controls and protected network transmission. No online service can guarantee absolute security. Contact support@curatebook.com if you believe an account or project has been compromised.

12. Children

CurateBook is not directed to children under 13, and a child may not create an account or place an order. Adults uploading photographs of children are responsible for having the rights and permissions needed to use those photographs.

13. Changes and contact

This policy is version 1.2, effective October 3, 2026. Material changes will be presented through an appropriate notice, and any new consent required by law or the service will be requested separately. Questions or privacy requests may be sent to support@curatebook.com.

CurateBook is operated by Simply Get Holdings · Pasco County, Florida