This Privacy Policy explains how Curo Coach (trading as Curo Recruitment Intelligence), based in Suriname and operating the platform at curo.coach, collects, uses, and protects personal data. If anything is unclear, contact us at hello@curo.coach.
Legal entity: Curo Coach (trading as Curo Recruitment Intelligence)
Owner: Michael Mc Calman
Location: Suriname
Website: curo.coach
Contact: hello@curo.coach
Curo is a recruitment intelligence platform. Recruiters use it to assess candidates through AI-driven intake interviews and structured reports.
Curo handles two different categories of data, and our role is different for each.
When you, as a recruiter, register and use your Curo account, Curo is the data controller for the personal data we collect about you directly.
When a candidate completes an intake interview, the recruiter who invited them is the data controller. Curo acts as a data processor on the recruiter's behalf. The recruiter decides why and how candidate data is processed. Curo processes that data only as instructed by the recruiter, in accordance with our Terms of Service and applicable law (including the GDPR).
If you are a candidate and want to exercise your rights over your personal data, please contact the recruiter who invited you. If you cannot identify them, contact us at hello@curo.coach and we will help you reach the right party.
When you register and use Curo, we collect:
During an intake session invited by a recruiter, Curo collects:
We do not use tracking cookies, advertising cookies, fingerprinting, or third-party analytics that profile users. We do not collect data about you across other websites.
We use your data to:
We use candidate data only to conduct the AI intake interview, generate the Report for the recruiter who invited the candidate, and make the Report available to that recruiter in their account.
We do not:
Where the GDPR applies, we rely on the following legal bases:
Curo cannot operate without a small number of trusted third parties:
These providers act as sub-processors when handling candidate data, and they are bound by data protection terms consistent with the GDPR. We do not share personal data with any other third parties unless required by law.
Curo is operated from Suriname and uses providers located in the United States and the European Union. When personal data of EU residents is transferred outside the EEA, those transfers are protected by appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms used by our sub-processors.
If you would like more detail about specific transfer mechanisms, contact us at hello@curo.coach.
We retain your account data for as long as your account is active.
Candidate data, intake transcripts, and Reports are retained as long as the inviting recruiter's account is active, or until the recruiter deletes them.
When a recruiter account is closed (by the recruiter or by us), all associated data (including candidate data, transcripts, and Reports) is deleted within 30 days of account closure.
Recruiters can delete individual candidates or entire job openings at any time from within the platform. Deletion is permanent — personal data, intake transcripts, and Reports are immediately and irreversibly removed from our active database.
Encrypted infrastructure backups maintained by our database provider (Supabase) may retain a copy of deleted data for up to 7 days before automatic purge. These backups are encrypted, inaccessible to end users, and are used solely for disaster recovery. They are not consulted in the normal course of operating the platform.
Some records, such as payment receipts and Terms of Service acceptance, may be retained for longer to meet legal and accounting obligations.
No system is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify you and, where required, the relevant supervisory authority without undue delay.
If you are in the European Union, the GDPR gives you the following rights regarding your personal data:
Similar rights may apply under other privacy laws.
How to exercise your rights:
We respond to verified requests without undue delay, and at the latest within one month, as required by the GDPR.
Curo uses an AI system to conduct intake interviews and generate Reports. We want to be clear:
If you are a candidate in the EU and you believe a hiring decision affecting you was made solely by automated means, contact the recruiter who invited you, and you may also contact us at hello@curo.coach.
Curo uses only the cookies needed to make the platform work. Specifically:
We do not use tracking cookies, advertising cookies, third-party analytics cookies that profile users, or cross-site tracking.
Because we only use strictly necessary cookies, no separate cookie consent banner is required under most GDPR interpretations. If this changes, we will update this policy and ask for your consent where required.
Curo is not intended for anyone under 18 years old. We do not knowingly collect personal data from minors. If you believe we have collected data from someone under 18, contact us at hello@curo.coach and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and require you to re-accept the updated terms in the platform before continuing to use it.
The "Last updated" date at the top of this policy always reflects the most recent version.
For questions about this Privacy Policy, or to exercise your rights, contact:
Curo Coach
Email: hello@curo.coach
Website: curo.coach
This Privacy Policy is provided in English. By using Curo, you confirm that you have read and understood it.