#Privacy PolicyCopy page

This policy explains what personal information curl.md collects, how we use it, when we share it, and the choices you have.

#1. Overview

This Privacy Policy describes how weth, LLC, which operates curl.md (“weth, LLC,” “curl.md,” “we,” “us,” or “our”), collects, uses, stores, and shares personal information when you use the website, dashboard, API, CLI, SDK, plugins, docs, billing flows, and related services (collectively, the “Services”).

By using the Services, you agree to the collection and use of information as described in this policy and our Terms of Use.

#2. Information we collect

We collect information in a few different ways depending on how you use curl.md.

Information you provide or authorize us to receive may include:

• account details such as email address, login, display name, and avatar
• organization and team membership information
• support or contact messages you send us
• billing and purchase information connected to prepaid credits

Authentication and security information may include:

• signed browser session cookies and OAuth state cookies
• session identifiers, device auth codes, refresh token hashes, and access token hashes
• API key metadata such as key prefix, name, and last-used timestamps

Request and usage information may include:

• URLs you ask curl.md to fetch
• optional objectives, keywords, mode selections, and agent headers
• request hostname, path, user agent, timestamps, and cache/billing metadata
• token-count and usage records associated with your account, organization, or API key

Billing-related information may include:

• Stripe customer identifiers and default payment method references
• credit balances and transaction history
• limited payment method details made available by Stripe, such as card brand, last four digits, and expiration month/year, for display in the dashboard

We also collect certain technical data automatically, such as:

• IP address and network request metadata
• browser, device, and operating system information
• referrer and website analytics data
• logs, diagnostics, abuse-prevention, and security signals

We do not knowingly collect sensitive personal information through the normal use of the Services.

#3. How we use information

We use personal information to:

• create and manage accounts, logins, organizations, and API access
• provide the core curl.md product, including URL fetching and markdown delivery
• process payments, manage prepaid credits, and keep billing records
• protect the Services, prevent fraud and abuse, and enforce limits and policies
• debug issues, monitor performance, and improve the Services
• respond to support requests and communicate about product or account matters
• comply with legal obligations and defend legal claims

#4. Legal bases for processing

Depending on where you are located, we may rely on one or more of the following legal bases to process your personal information:

• performance of a contract with you
• our legitimate interests in operating, securing, and improving the Services
• compliance with legal obligations
• your consent, where consent is required by applicable law

#5. When we share information

We may share personal information in the following situations:

• with service providers and infrastructure partners that help us operate curl.md, such as hosting, database, logging, analytics, authentication, and billing vendors
• with GitHub when you use GitHub-based sign-in flows
• with Stripe when you purchase credits or manage payment methods
• with destination websites you ask curl.md to fetch, because those sites receive a request from curl.md infrastructure
• to comply with law, enforce our terms, or protect rights, safety, or property
• as part of a merger, financing, acquisition, or sale of assets

We do not sell your personal information or share it for cross-context behavioral advertising.

#6. Third-party services and processors

The Services depend on third-party providers, which may process information on our behalf.

• GitHub for OAuth sign-in and account identity information
• Stripe for payment processing and payment method management
• Cloudflare and related infrastructure for hosting and service delivery
• Fathom for website analytics

These providers operate under their own terms and privacy policies. We encourage you to review them when relevant to your use of the Services.

#7. Cookies and analytics

curl.md uses cookies and similar technologies for authentication, security, and basic website analytics.

• authentication cookies help us keep you signed in and secure browser-based sessions
• OAuth state cookies help protect sign-in flows against forgery and replay
• analytics tooling helps us understand aggregate usage of the website

At this time, we do not guarantee that the Services respond to browser do-not-track signals.

#8. How long we keep information

We keep personal information for as long as reasonably necessary to operate the Services, maintain security, provide billing and account functionality, comply with law, resolve disputes, and enforce our agreements.

Retention periods may vary by data type. For example, account and billing records may be kept longer than transient operational logs. When we no longer need information, we delete it, anonymize it, or securely isolate it until deletion is practical.

#9. How we protect information

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no system is perfectly secure, and we cannot guarantee absolute security.

#10. Children and minors

The Services are not intended for children under 18, and we do not knowingly collect personal information from children under 18.

#11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing.

You may also be able to withdraw consent where processing is based on consent. These rights can be limited by applicable law.

#12. How to exercise your rights

To ask about, review, correct, or delete personal information we hold about you, contact dev@curl.md. We may need to verify your identity before fulfilling certain requests.

#13. Updates to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the “Last updated” date above.

#14. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact dev@curl.md.