CurXor Privacy Policy

Updated October 15, 2026: we added a section on our site chat helper (Section 12). On October 15, 2026, we added an explanation of the Google and Meta ad tags on our site, including ads we show to past visitors, and how to opt out.

Effective date: October 2, 2026 Last updated: October 15, 2026

This Privacy Policy explains how CurXor, Inc. ("CurXor," "we," "us") handles personal information when you visit https://curxor.ai (the "Site") or join our waitlist. CurXor, Inc. is a Delaware corporation based in Maryland.

In short: right now the Site is a marketing site with a waitlist. If you sign up, we collect your email address. If you then save a Home on the thank-you page, we also keep the desks you checked and the household counts you entered, with that same email. We also collect basic, aggregated analytics about how the Site is used. We don't sell or rent your email address. We use the Google Ads tag and the Meta Pixel on this website to measure our ads and to show CurXor ads to people who visited the Site (remarketing). Under California and other state laws, this may count as a "sale" or "sharing" of personal information. You can opt out (see Section 4).

1. What we collect

Information you give us

• Email address, when you join the waitlist or sign up for launch updates.
• Desk interests and household counts, if you save a Home on the thank-you page after you join. You may check desks and count adults, kids, and pets. We store those choices with your waitlist email. We don't store first names, surnames, or a free-text description of the household. A count of children is a number you enter. It is not a child's name, and we don't collect it from a child.
• What you send us when you email us: your name, email address, and the content of your message.
• Chat messages, if you use the site chat helper: the messages you type and the helper's replies (see Section 12).

Information collected automatically when you join the waitlist

• Referral and campaign information. When you first land on the Site, it notes the page you arrived on, any ref code, and any UTM campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term). This is kept in your browser's session storage, which is cleared when you close the tab. It is sent to us only if you submit the waitlist form, together with your email, so we know which film or link brought you. After you sign up, the Site also stores a small "waitlist confirmed" flag in session storage, and a short-lived signed token for this tab. The token carries the email you just submitted so a Home seed can be saved to that same signup. It is cleared when you close the tab. It is not a cookie.

Information collected automatically when you browse

• Aggregated analytics. We use the standard versions of Vercel Web Analytics and Vercel Speed Insights to understand page views, performance, and these events: how far down a page visitors scroll (scroll_depth), whether a waitlist sign-up happened (email_subscribe), which page and campaign tags were with that sign-up (signup_source), whether a film was played (film_play), and whether a Home seed was saved (seed_saved). None of these events includes your email address. signup_source can include the landing page, referral code, and UTM tags. film_play includes the film's name only. The seed event can include the desks and household counts you saved, plus the same campaign tags as a signup. Vercel Web Analytics doesn't use cookies. To count unique visitors, Vercel creates a hashed identifier from the request and discards it after 24 hours.
• Ad tags. Most pages on the Site load the Google Ads tag and the Meta Pixel. They collect cookie and browser-storage IDs, the pages you view, the site that linked you here, whether a waitlist signup happened, your IP address, and browser and device details. They send this to Google and Meta. We keep the tags off pages whose web address can include your email address, and we've turned off the Google and Meta features that pick up email addresses and other contact details. If your browser sends Global Privacy Control, neither tag loads.
• Server and security logs. Our hosting provider (Vercel) processes standard technical data such as IP address, browser type, and request times to deliver and protect the Site. If a waitlist sign-up fails, the error log may briefly include the email address that was submitted. Successful sign-ups don't write your email address to these logs.
• Site chat helper. If you open the chat, ElevenLabs keeps a record with each conversation: start time and length, a random visitor ID, the chat version, that it was text-only, the language, which AI model wrote each reply and how long it took, how the chat ended, and when the record will be deleted. The record doesn't include your IP address, browser, device, the page you were on, or your location. ElevenLabs' servers do receive your IP address and browser details when the chat connects, as any website does, and we don't control their server logs. See Section 12.

What we don't collect on the Site today: payment card information (we don't take payments; see Section 6), account passwords (there are no user accounts), first names for a household, or precise location.

2. How we use information

• To send waitlist, product, and launch updates you signed up for, including notice when ordering opens.
• To keep the desk interests and household counts you chose to save with your waitlist email, so unbox can start from them later. Saving them doesn't reserve a unit.
• To understand which pages, films, and links bring people to the Site, and to improve it. To measure our ads and to show CurXor ads to people who visited the Site, on other sites and apps (see Sections 3 and 4).
• To reply to your messages.
• To keep the Site secure, prevent abuse and spam sign-ups, and meet legal obligations.

We don't use your information to make automated decisions that have legal or similarly significant effects on you.

3. How we share information

We share personal information with service providers that help us run the Site, and with Google and Meta through our ad tags (see below and Section 4):

We keep waitlist contacts only in Resend. We don't copy them into a separate CRM, spreadsheet, or database. We don't use open or click tracking in our emails.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets. In that case the information stays subject to this Policy or to one with equal protections.

We don't sell personal information for money. Our ad tags (Section 4) send Google and Meta information about your visit so they can measure our ads and show you CurXor ads on other sites and apps. Under California and other state laws, this may be considered a "sale" or "sharing" for cross-context behavioral advertising. You can opt out: turn on Global Privacy Control in your browser (we honor it, and neither tag loads), block or clear cookies and site storage in your browser, or use Google's and Meta's ad settings (Section 4). Questions: hello@curxor.ai.

4. Cookies and similar technologies

The Site uses:

• Our own storage: session storage only: curxor.landing (referral and campaign details), curxor.waitlist.confirmed (the waitlist confirmed flag) and curxor.waitlist.seed (the short-lived signup token) (Section 1). Your browser clears it when you close the tab. The Site sets no cookies of its own.
• Vercel analytics, which doesn't use cookies.
• Site chat helper: stores nothing in your browser. No cookies, local storage, session storage or other browser storage.
• Google Ads tag cookies and storage: the _gcl_au cookie, and _gcl_ls in local storage. If you arrive by clicking one of our Google ads, also the _gcl_aw cookie or a similar _gcl_ cookie.
• Meta Pixel cookies and storage: the _fbp cookie, and lastExternalReferrer and lastExternalReferrerTime in local storage. If you arrive from a link on Facebook or Instagram, also the _fbc cookie and multiFbc in local storage.

Local storage items stay until you clear them. Google and Meta may also set their own cookies on doubleclick.net, google.com and facebook.com.

We use these ad tags to measure our ads and to show CurXor ads to people who visited the Site (remarketing). They apply to this website only. Neither tag loads on this privacy page or on pages you reach from links in our emails (unsubscribe and Home return). Our ad tags don't load when you visit from the European Economic Area (EEA), the UK, or Switzerland, based on the location of your internet connection.

Your choices:

• Google: adssettings.google.com.
• Meta: your ad preferences in Facebook or Instagram.
• Your browser: block or clear cookies and site storage in its settings. The Site will still work, but referral attribution won't.
• Global Privacy Control: we honor it. If your browser sends it, neither ad tag loads. Many browsers need an extension for it: globalprivacycontrol.org.

Questions: hello@curxor.ai.

5. Email choices and unsubscribing

You can unsubscribe from our emails at any time by replying to any email from us or by emailing hello@curxor.ai. Future marketing emails will include an unsubscribe link and our postal address. After you unsubscribe from marketing, we may still send a one-off reply to a message you sent us.

Desk interests and household counts are deleted with the waitlist record. Reply to any CurXor email, or email hello@curxor.ai, to ask for that.

6. No sales yet

CurXor is not selling products or taking payments on the Site right now. Prices shown on the Site describe planned pricing and are not an offer. Joining the waitlist doesn't reserve a unit or charge anything. When ordering opens, we'll update this Policy before we collect any payment or shipping information. We expect payments to be processed by a third-party payment processor (for example, Stripe) under its own privacy policy, and we won't store full card numbers.

7. Data retention

• Waitlist records: kept until you ask us to delete them or until we end the waitlist. Desk interests and household counts are part of that record and are deleted with it. If you unsubscribe, we may keep a minimal record of your email on a suppression list so we don't email you again.
• Emails you send us: kept as long as needed to respond and for ordinary business records.
• Chat records: each chat, including its transcript and the automatic summary, title and quality scores, is deleted within 31 days after the chat ends, or sooner if you ask.
• Hosting and security logs: kept for short periods set by our hosting provider, typically hours to days.
• Analytics: kept in aggregated form for up to our hosting provider's analytics reporting window, which can be up to about 24 months.
• Ad tag cookies and storage: stay in your browser until they expire or you clear them. Google and Meta keep the data they receive under their own policies.

8. Your privacy rights

Wherever you live, you can ask us to:

• Access: tell you what personal information we hold about you and give you a copy;
• Correct: fix inaccurate information;
• Delete: delete your waitlist record and related data, including any desk interests and household counts saved with it;
• Opt out: stop marketing emails (see Section 5).

To make a request, email hello@curxor.ai with the subject "Privacy request" from the email address you signed up with. We'll confirm receipt and respond within 45 days. We may need to verify that you control the email address. You can use an authorized agent, and we may ask for proof of their authority. We won't discriminate against you for exercising your rights.

California residents. We provide this notice voluntarily so you know how the Site handles your information. In the last 12 months we collected these categories of personal information: identifiers (email address, IP address, and cookie and browser-storage IDs from our ad tags), internet or other electronic network activity (site analytics, pages viewed and signup events collected by our ad tags, the name of a film if you press play, and referral/UTM details), the content of your communications with us (including chat messages), and, if you save a Home, the desk interests and household counts you enter. We collect them from you and your browser for the purposes in Section 2, and we disclose them to the service providers in Section 3 for business purposes. Through our ad tags, identifiers and internet activity also go to Google and Meta. We don't sell personal information for money, but this use of ad tags may be considered a "sale" or "sharing" under California and other state laws. We don't collect sensitive personal information as defined under California law. You have the right to know, delete, and correct your information, to opt out of sale or sharing, and to be free from discrimination. To opt out, turn on Global Privacy Control in your browser (we honor it, and neither tag loads), block or clear cookies and site storage in your browser, or use Google's and Meta's ad settings (Section 4).

Other U.S. states. Residents of states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Maryland) may have similar rights, including the right to opt out of targeted advertising and sales. The same opt-outs apply. Where those rights apply, you may appeal a denied request by replying to our decision with the subject "Appeal".

9. Visitors outside the United States

The Site is run from the United States, and information is processed in the U.S. Chat messages are processed and stored in the U.S. by ElevenLabs and, for backup replies, processed by Google. If you're in the European Economic Area, the U.K., or Switzerland, we process your waitlist email based on your consent, which you can withdraw at any time by unsubscribing. We process analytics and security data based on our legitimate interest in running and securing the Site. Our ad tags don't load when you visit from the European Economic Area (EEA), the UK, or Switzerland, based on the location of your internet connection. You can ask us to access, correct, delete, restrict, or move your data, or object to its processing, and you can complain to your local data protection authority.

10. Children

The waitlist is for people 18 and older. The Site isn't directed to children under 13 (or under 16 in the EEA/UK), and we don't knowingly collect personal information from them. A household count may include a number of children. That number is entered by the adult on the waitlist. We don't store a child's name. If you believe a child has given us information, email us and we'll delete it.

11. Security

We use reasonable safeguards for a small company, including HTTPS across the Site and access controls on our service-provider accounts. No method of transmission or storage is completely secure.

12. Site chat helper

Some pages on curxor.ai offer a text chat helper that answers questions about CurXor. It loads only after you click our chat button. ElevenLabs runs the chat for us and stores chats on its servers in the US.

Who writes the replies. Replies normally come from a model that ElevenLabs hosts itself in the US. That model's company never receives your messages. If that model fails or takes too long, a backup model at Google writes the reply. When that happens, your message goes to Google. That backup is the only backup.

What's collected. The messages you type and the helper's replies, plus the conversation record described in Section 1. ElevenLabs' servers receive your IP address and browser details when the chat connects, and we don't control their server logs. We don't ask for your email in the chat. The chat is text only. No audio is recorded.

Your browser. The chat doesn't store anything in your browser. It creates a new random ID each time a page loads. That ID is never stored, and the chat doesn't fingerprint your device.

How it's used. CurXor and the providers named above use chats to run and improve the helper. ElevenLabs also automatically creates a short summary, a title and quality scores (such as whether the chat answered your question and the tone of messages) so we can improve the helper. These are deleted along with the chat. We've turned off the ElevenLabs setting that would let it use chats to improve models for other customers.

Sensitive details. We don't automatically remove personal details from chats. Please don't share sensitive details, such as passwords, payment details, health information or government ID numbers.

How long it's kept. The whole chat, including the transcript, summary, title and quality scores, is deleted within 31 days after the chat ends. If you send us your conversation ID, we'll delete it sooner.

Deleting a chat sooner. When you press "End chat", your conversation ID appears at the bottom of the chat window (it starts with "ID: conv_"). Copy it before you close the window or reload the page, because it disappears then. Email it to hello@curxor.ai. If you don't have it, email us the date and time you chatted and your first message, and we'll try to find it.

Children. The chat helper isn't meant for children under 13.

13. CurXor OS on a box you own

CurXor OS is designed to run on a box you own. Prompts and desk data processed locally on your device aren't sent to CurXor. If you add your own key for a cloud model provider, requests that use it go directly from your device to that provider under its terms, not through CurXor.

The software update channel is off by default at launch. If you turn it on and point it at an update source you choose, it checks a version file and downloads updates. It doesn't upload prompts or agent data.

"Not sent to CurXor" doesn't mean nothing ever leaves your device. If you connect other services, such as mail, social media, or brokerage bridges, outbound activity for that desk is sent to those services under their own terms.

We'll publish a separate product privacy notice before devices ship.

14. Changes to this Policy

We'll post any changes on this page and update the "Last updated" date. If a change is material, for example once we start taking orders, we'll give notice on the Site or by email before it takes effect.

15. Contact

CurXor, Inc. Email: hello@curxor.ai Mail: CurXor, Inc., 14621 Falling Leaf Way, Gaithersburg, MD 20878