Privacy Policy
Last updated: January 2025
1. Introduction
RedCurate ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Reddit digest service ("Service").
By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address when you create an account
- Preferences: Subreddits you choose to follow, digest frequency, and delivery time preferences
- Keywords: Keywords and search terms you set up for monitoring (Premium users)
- Communications: Information you provide when you contact us for support
2.2 Information Collected Automatically
- Usage Data: How you interact with our Service (pages viewed, features used)
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
2.3 Payment Information
Payments are processed by Polar.sh. We do not collect, store, or have access to your complete payment card information. Polar.sh handles all payment processing in accordance with PCI-DSS standards. We only receive confirmation of successful payments and basic subscription status.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Deliver personalized Reddit digests to your email
- Send keyword monitoring alerts (Premium feature)
- Process transactions and send related information
- Respond to your comments, questions, and support requests
- Send administrative information (service updates, security alerts)
- Improve and optimize our Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
3.1 Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), our legal basis for processing your information includes:
- Contract: Processing necessary to provide the Service you requested
- Legitimate Interests: Improving our Service, preventing fraud, and marketing (where permitted)
- Consent: Where you have given explicit consent
- Legal Obligation: Compliance with applicable laws
4. Reddit Data Handling
Reddit Content Disclosure
RedCurate accesses publicly available Reddit content through Reddit's API. We are not affiliated with, endorsed by, or sponsored by Reddit, Inc.
4.1 What We Access
- Public Content Only: We only access publicly available Reddit posts and comments. We do not access private subreddits, direct messages, or any private user data.
- No Authentication: We do not require or access your Reddit login credentials. We do not connect to your Reddit account.
4.2 How We Process Reddit Content
- AI Summarization: We use artificial intelligence to analyze and summarize Reddit posts. This processing is automated.
- No User Identification: We do not attempt to identify, track, or build profiles of Reddit users. We do not correlate Reddit usernames with real identities.
- No Sensitive Data Inference: We do not derive or infer sensitive personal information (health status, political opinions, sexual orientation, etc.) from Reddit content.
- Deletion Compliance: When content is deleted from Reddit, we do not retain or redistribute it.
4.3 Reddit Data Storage
We temporarily cache Reddit content for processing purposes. Digests are generated and sent to users, after which the raw Reddit content is not permanently stored. Only metadata about what posts were included in your digests may be retained to improve service quality and prevent duplicate content.
5. Third-Party Services
We use the following third-party services to operate our Service:
| Service | Purpose | Data Shared |
|---|---|---|
| Polar.sh | Payment processing | Email, payment info (handled by Polar.sh) |
| Resend | Email delivery | Email address, digest content |
| AI Providers (Anthropic, OpenAI, Google) | Content summarization | Reddit post content for processing |
| Neon (Database) | Data storage | Account and preference data |
| Vercel | Hosting and analytics | Usage data, IP addresses |
Each third-party service has its own privacy policy. We encourage you to review their policies. We only share the minimum data necessary for each service to function.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls limiting who can access personal data
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide the Service to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).
8. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate personal data
- Deletion: Request deletion of your account and personal data
- Export: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications (you can still receive service-related emails)
- Restriction: Request restriction of processing in certain circumstances
- Object: Object to processing based on legitimate interests
To exercise any of these rights, please contact us at hello@redcurate.com. We will respond to your request within 30 days.
9. What We Do Not Do
- We do not sell your personal data to third parties for marketing or any other purposes
- We do not display ads or use your data for advertising purposes
- We do not share your email with marketers or advertisers
- We do not access your Reddit account or require Reddit login credentials
- We do not track you across websites or use invasive tracking technologies
- We do not sell Reddit data to any third party
10. Cookies and Similar Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for the Service to function (authentication, security)
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how users interact with our Service
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
11. Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@redcurate.com. We will take steps to delete such information.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of what personal information we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise your CCPA rights, contact us at hello@redcurate.com.
13. International Users
Our Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
By using our Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.
For users in the European Economic Area (EEA), we rely on appropriate safeguards for international data transfers, including standard contractual clauses where applicable.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
RedCurate
Email: hello@redcurate.com
We will respond to your inquiry within 30 days.