Privacy Policy
Version 1.0 · Effective October 1, 2026
Draft for legal review. Highlighted items are still to be supplied.
Curio is operated by RevRocket LLC, a limited liability company registered in Wyoming, United States. This policy explains what personal information we collect through this website, why we collect it, and the choices and rights you have. In this policy, “Curio”, “we” and “us” mean RevRocket LLC.
This policy covers this website and the enquiries you send through it. Personal information that publishers process through Curio’s products, such as information about their readers, is covered by our agreement with that publisher. whether a data processing agreement is offered to customers, and a link to it
Who is responsible for your information
RevRocket LLC is the controller of the personal information described in this policy.
- Address: 312 W. 2nd St #2813, Casper, WY 82601, United States
- Email: [email protected]
- Phone: +1 (510) 859-4555
For legal review: whether operating from Portugal creates an EU establishment, or whether an EU representative under Article 27 GDPR is needed
What we collect
Information you give us through our forms. When you apply on the Start Your App page, request a walkthrough or send us a message, we collect what you enter:
- your name and email address
- your publication or organization name and website
- the plan, product or topic you choose, and your publishing platform if you tell us
- your message
- that you accepted our Terms of Service and this Privacy Policy, and the version you accepted
Information sent automatically with a form. With each submission we record the date and time, your browser’s user-agent string (which identifies the browser and device type) and the page you sent the form from. We also record how you arrived on this visit, if known: any campaign tags in the link you followed (such as utm_source), the name of the website that referred you, and the first page you visited.
Information used to prevent abuse. To stop automated spam, our server keeps a one-way, salted hash of your IP address with the times of your recent submissions, for a short window (ten minutes by default), and then deletes it. The hash is not used to identify you. The forms also contain a hidden field and a timer; neither is linked to you.
Server logs. Our web server records requests, which normally include your IP address, the page requested, the time and your user-agent. server log retention period
We don’t ask for payment details on this website, and we don’t knowingly collect special categories of personal information. Please don’t include them in a message.
Cookies and analytics
This website doesn’t need cookies to work, doesn’t use advertising trackers and doesn’t load third-party embeds. Our fonts and images are served from our own server.
Analytics, only if you agree. The first time you visit, we ask whether you accept analytics. If you click Accept, we use Google Analytics 4 to understand how the website is used: which pages are viewed, how visitors found us (for example a search engine or a campaign link), the type of device and browser, approximate location (city or region), and actions such as clicking a pricing button, using the ROI calculator or sending a form. We don’t send Google the details you type into our forms. Google Analytics sets first-party cookies named _ga and _ga_ followed by an identifier, which last up to two years.
If you click Decline, or don’t choose, Google Analytics isn’t loaded and no analytics cookies are set. Your choice is saved in your browser so we don’t ask again. You can change it at any time with Cookie settings at the bottom of every page; if you withdraw consent, we stop analytics and delete the analytics cookies from this website.
We have turned off Google signals and advertising features in Google Analytics, and we don’t use analytics data for advertising. For legal review: consent wording and banner design under the ePrivacy Directive, Portuguese law (Lei 41/2004) and CNPD guidance; whether US visitors need a different notice
To record how you arrived, your browser keeps the campaign tags, referring website and first page of your visit in its session storage for that browser tab only. It is deleted when you close the tab, and it reaches us only if you submit a form. For legal review: whether this session storage needs consent under the ePrivacy Directive and Portuguese law, or counts as strictly necessary
If we add any other non-essential cookies or trackers, we will update this policy first and ask for your consent where the law requires it.
How we use your information, and our legal bases
Where the EU or UK General Data Protection Regulation applies, we rely on these legal bases:
- To respond to an application or walkthrough request, review your publication and discuss a possible agreement: steps taken at your request before entering into a contract (Article 6(1)(b)).
- To answer other messages and keep a record of our correspondence: our legitimate interest in running our business and responding to people who contact us (Article 6(1)(f)).
- To keep the website and forms secure and prevent spam and abuse: our legitimate interest in protecting our service (Article 6(1)(f)).
- To measure how the website is used with Google Analytics: your consent (Article 6(1)(a)), which you can withdraw at any time through Cookie settings.
- To meet legal obligations, such as tax and accounting rules once you become a customer (Article 6(1)(c)).
We don’t sell your personal information, and we don’t use it for automated decision-making that has legal or similarly significant effects on you.
Marketing communications
We don’t currently send marketing emails. We use the details you send us to reply to your enquiry, and we don’t add you to a mailing list because you filled in a form. If we start sending newsletters or product updates, we will update this policy, ask for your consent where it is required, and include a way to unsubscribe in every message.
Who we share it with
We share personal information only with service providers who process it for us under contract:
- Amazon Web Services, which hosts this website and stores form submissions on a server in its US East (Northern Virginia) region
- Zoho Mail, our email provider, where form submissions are delivered and where we correspond with you
- Google, which provides Google Analytics, only if you accept analytics cookies
For legal review: Google’s data processing terms for Google Analytics (accepted in the Google Analytics account settings) and Google’s role as processor
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of our business, in which case the information would remain protected by this policy.
International transfers
RevRocket LLC is a United States company, and this website is hosted in the United States. If you are in the European Economic Area or the UK, your information is transferred to the United States. Where the country receiving the data doesn’t have an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms, or a provider’s certification under the EU–U.S. Data Privacy Framework. the safeguard relied on for Amazon Web Services, Zoho and Google Analytics, and the Zoho data centre region of your account
How long we keep it
- Enquiries from people who don’t become customers: up to 24 months after our last contact, then deleted, unless you ask us to delete them sooner.
- If you become a customer: for the length of our relationship, and afterwards for as long as tax, accounting and other legal obligations require.
- Abuse-prevention data: deleted shortly after the ten-minute rate-limit window.
- Analytics data (only if you accepted analytics): kept in Google Analytics for 14 months, then deleted automatically.
- Server logs: log retention period
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on consent.
If you are in the EEA or UK, you can also complain to a data protection supervisory authority, for example where you live or work. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD).
Some US states give residents similar rights, such as the right to know, delete or correct personal information and to opt out of its sale or use for targeted advertising. We don’t sell personal information or use it for targeted advertising. For legal review: which US state privacy laws apply to RevRocket LLC
To make a request, email us at [email protected]. We may need to confirm your identity before acting on a request, and we will respond within the time the law requires.
Security
The website is served over HTTPS. Form submissions are stored on our server outside the public web folder and delivered to our mailbox. We limit access to the people who need it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
Children
This website is for publishers and businesses. It isn’t directed at children, and we don’t knowingly collect personal information from anyone under 16.
Changes to this policy
We will update this policy when our practices change and show the version and effective date at the top. If a change is significant, we will make it clear on this page.
Contact
RevRocket LLC, operating Curio
- Address: 312 W. 2nd St #2813, Casper, WY 82601, United States
- Email: [email protected]
- Phone: +1 (510) 859-4555
- Or use our contact page