PAC-12 – March 10, 2022


Thanks for choosing Curastory which allows creators the opportunity to create, share and monetize videos. We want to give you the best possible experience to ensure that you enjoy our service today, tomorrow and in the future. Your privacy and the security of your personal data is, and will always be, enormously important to us. So, we want to transparently explain how and why we gather, store, share and use your personal data – as well as outline the controls and choices you have around when and how you share your personal data. That is our objective, and this Privacy Policy (the “Policy”) will explain what we mean in further detail below.

About this Policy

This Policy sets out the essential details relating to your personal data relationship with us when you use the Curastory website, web applications, and any other products and services that link to this Policy (collectively, the “Services”).
From time to time, we may develop new or offer additional services. If the introduction of these new or additional services results in any change to the way we collect or process your personal data we will provide you with more information and additional terms or policies. Unless stated otherwise when we introduce these new or additional services, they will be subject to this Policy.

Your rights and your preferences

The General Data Protection Regulation or “GDPR” gives certain rights to individuals in relation to their personal data. As available and except as limited under applicable law, the rights afforded to individuals are:

In addition to the rights above, you always have the following choices regarding promotional communications and notifications:

If you have any questions about your privacy, your rights, or how to exercise them, please see the “How to contact us” section below for information on how to contact us. If you have concerns around our processing of your personal data, we hope you will continue to work with us to resolve them. However, you can also contact and have the right to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen) or your local Data Protection Authority.

Personal data we collect from you

We collect personal data that you provide to us:

Categories of personal data

Description of category

User data

If you are a creator, you will be required to provide certain required personal data to create an account, such as your name and email address. You also have the option to provide us other information about yourself, such as a profile photo, biography and brand sponsorship non-compete information.

Payment and purchase data

Contests, Surveys and Sweepstakes Data when you complete any forms, submit a survey, or participate in a contest, we collect the personal data you provide.

When you use the Services, we collect certain data automatically. Usage Data includes:

Categories of personal data

Description of category

User content

When you create and share content using our Services, we collect any personal data included in that content.

Log data

Information that your browser automatically sends whenever you use the Services. Log Data includes your Internet Protocol (“IP”) address, browser type and settings, the date and time of your request, and how you interacted with the Services.


Information from cookies stored on your device. Please see our Cookie Policy to learn more about how we use cookies.

Device information

Includes type of device you are using, operating system, settings, unique device identifiers, network information and other device-specific information. Information collected may depend on the type of device you use and its settings.

Other usage information

We collect information about how you use our Services, such as the types of videos that you post, the features you use, the actions you take, and the time, frequency and duration of your activities.

Personal data collected from other sources:

Categories of personal data

Description of category

Data from Social Media Services

If you connect to the Services using credentials from social media services such as Facebook or Google (“Social Media Services”), we will have access to certain information from that Social Media Service, such as your name, email address, account and content analytics in accordance with the authorization procedures determined by such Social Media Service.

Data from Social Media Advertising Accounts

If you connect to the Services using credentials from social media services such as Facebook or Google (“Social Media Services”), we will have access to certain information from that Social Media Service, such as your name, email address, advertising metrics, and account and content analytics in accordance with the authorization procedures determined by such Social Media Service.

What we use your personal data for

When you use or interact with the Services, we use a variety of technologies to process the personal data we collect about you for various reasons. We have set out in the table below the reasons why we process your personal data, the associated legal bases we rely upon to legally permit us to process your personal data, and the categories of personal data (identified in Section 4) used for these purposes:

Description of why Curastory processes your personal data (‘processing purpose’)

Legal Basis for the processing purpose

Categories of personal data used by Curastory for the processing purpose

To provide, personalize, and improve our Services, for example, by allowing creators to create and distribute their content and to allow brands to sponsor that content.

To understand how you access and use the Services to ensure technical functionality of the Services, develop new products and services, and analyze your use of the Services, including your interaction with applications, advertising, products, and services that are made available, linked to, or offered through the Services.

To communicate with you for Service-related purposes.

To process your payment to prevent or detect fraud including fraudulent payments and fraudulent use of the Services.

To communicate with you, either directly or through one of our partners, for marketing, research, participation in contests, surveys and sweepstakes, promotional purposes, via emails, notifications, or other messages, consistent with any permissions you may have communicated to us.

To comply with legal obligations and legal process, respond to requests from public and government authorities including public and government authorities outside your country of residence; enforce our Terms of Use; and to protect our rights, privacy, safety or property of others.

Sharing your personal data

We may share or disclose your personal data under the following circumstances, or as otherwise described in this Policy:

We also share personal data with partners that provide analytics services and serve advertisements on our behalf across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity.

For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” or “Opt Out of Ads Personalization” on Android) that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes.

Data retention and deletion

We keep your personal data only as long as necessary to provide you with the Services and for legitimate and essential business purposes, such as maintaining the performance of the Services, making data-driven business decisions about new features and offerings, complying with our legal obligations, and resolving disputes. We keep some of your personal data, such as your user data and user content, for as long as you are a user of the Services.

If you have elected to receive marketing communications from us, we retain information required to send these communications until you opt out of receiving these communications in accordance with our policies.


The Services use cookies to operate and administer the Services, gather usage data, and make it easier for you to use the Services during future visits.

What Are Cookies? A “cookie” is a piece of information sent to your browser by a website you visit. By choosing to use our Services after having been notified of our use of cookies in the ways described in this Policy, and, in applicable jurisdictions, through notice and unambiguous acknowledgement of your consent, you agree to such use.

Some cookies expire after a certain amount of time, or upon logging out (session cookies), others remain on your computer or terminal device for a longer period (persistent cookies). Our Services use first party cookies (cookies set directly by Curastory) as well as third party cookies, as described below. For more details on cookies please visit All About Cookies.

Type of Cookies Used. The Services use the following technologies:

Transfer to other countries

Curastory, Inc. is based in the United States and we process and store personal data in the United States and other countries. Therefore, we and our service providers may transfer your personal data to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.

If you are accessing our Services from the EU/EEA or other regions, please note that your personal data will be transmitted to our servers in the United States and the data may be transmitted to our service providers supporting our business operations (described above). In such instances we will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organizational measures are in place such as the Standard Contractual Clauses approved by the EU Commission.


We keep your pPlease note that this Policy only applies to the Services. When using the Services, you may find links to other websites not operated or controlled by us (“Third Party Sites”), including the Social Media Services. The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Policy. By providing these links we do not imply that we endorse or have reviewed these Third Party Sites. Please contact any Third Party Sites directly for information on their privacy practices and policies.

Keeping your personal data safe

We are committed to protecting our users’ personal data. We implement appropriate technical and organizational measures to help protect the security of your personal data; however, please note that no system is ever completely secure. We have implemented various policies including pseudonymisation, encryption, access, and retention policies to guard against unauthorised access and unnecessary retention of personal data in our systems.


The Services are not directed to children under the age of 13 years. The Services are also not offered to children whose age makes it illegal to process their personal data or requires parental consent for the processing of their personal data under the GDPR or other local law.

We do not knowingly collect personal data from children under 13 years or under the applicable age limit (the “Age Limit”). If you are under the Age Limit, please do not use the Services, and do not provide any personal data to us.
If you are a parent of a child under the Age Limit and become aware that your child has provided personal data to us, please contact us, and you may request exercise of your applicable rights detailed in the ‘Your rights and your preferences: Giving you choice and control’ Section 3 of this Policy.

If we learn that we have collected the personal data of a child under the age of 13 years, we will take reasonable steps to delete the personal data. This may require us to delete the Curastory account for that child.

Changes to this policy

We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in case of material changes, we will provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

How to contact us

Thank you for reading our Policy. If you have any questions about this Policy, please contact our Head of Public Policy by emailing or by writing to your relevant data controller at the address below.

Curastory, Inc.
223 Bedford Avenue PMB #774
Brooklyn, NY 11211