Privacy Policy

CUTTHWICE OÜ is the data controller for the processing described in this policy.

Registry code: 17093572
Registered address: Tornimäe tn 5, Kesklinna linnaosa, Tallinn, Harju maakond 10145, Estonia
Email: [email protected]

You can use that email address for privacy questions and to exercise your data protection rights. Please use the subject line “Privacy request”.

Depending on how you use KURB, we process the following categories of data:

• Account and identity data: name, email address, account identifier, authentication information, profile details, account status, and subscription tier. Our authentication provider processes login credentials on our behalf.
• Service data: saved filters, favourites, collections, followed brands or sellers, notification preferences, price monitors, token usage, and other settings associated with your account.
• Search and activity data: searches, filters, page and app views, clicks, interactions, referring pages, session and anonymous identifiers, device type, browser or app information, and approximate location derived from an IP address.
• Uploads and Price Intelligence data: images or image links you submit, the crop you select, product attributes such as brand, category, condition, size, colour, country or marketplace, and the resulting appraisal. The current appraisal record stores the submitted product parameters and an appraisal identifier, but is designed not to store the submitted image itself.
• Reviews and communications: ratings, optional review notes, support messages, feedback, and other communications you send us.
• Subscription and transaction data: plan, billing status, trial and renewal information, transaction identifiers, and limited payment-related information provided by our billing providers. Complete payment card details are entered with the payment provider, not KURB.
• Technical, security and diagnostics data: IP address, request and response metadata, timestamps, device and network information, error reports, logs, and information used to detect abuse and protect the Service.
• Notification data: device or push subscription identifiers, notification delivery preferences, and whether a notification was opened or marked as read.

We receive data directly from you, automatically from your device and use of the Service, from service providers such as our account and billing provider, and from publicly accessible resale listings and product pages. Product images displayed by KURB may be loaded from the original seller or marketplace.

• To perform our contract with you: create and secure your account; provide search, collections, alerts, subscriptions and billing; process Price Intelligence requests; provide support; and deliver the features you ask us to use.
• With your consent: run optional analytics and session-measurement tools, send marketing where consent is required, and enable push notifications. You may withdraw consent at any time without affecting earlier lawful processing.
• For our legitimate interests: understand and improve the Service, measure feature performance, prevent fraud and abuse, secure our systems, diagnose errors, protect legal rights, and operate an accurate fashion-search catalogue. We balance these interests against your rights and expectations.
• To comply with legal obligations: maintain records required by tax, accounting and consumer law; respond to lawful requests; and establish, exercise or defend legal claims.

Where we ask for information needed to provide an account, paid plan, appraisal or other requested feature, not providing it may mean we cannot provide that part of the Service.

KURB Price Intelligence uses machine-learning models operated within KURB's backend to analyse a submitted image and product attributes, compare them with fashion-listing data, and estimate price, likely time to sell, market fit and similar listings. An automated fashion-image check may reject an upload that does not appear to contain a fashion item.

These outputs are estimates for information only. They do not determine your legal rights, eligibility for essential services, or another outcome that similarly significantly affects you. You decide whether and how to use an appraisal. You may contact us if you believe an automated result is wrong or want more information about how it was produced.

We do not use submitted appraisal images to train a general-purpose third-party AI model. If that practice changes, we will update this policy and provide any notice or choice required by law before the new use begins.

KURB uses necessary cookies and similar storage for authentication, security, account sessions, preferences and core functionality. These technologies are required to provide the Service you request.

With your consent, KURB also uses Google Analytics, Microsoft Clarity and KURB's own analytics to understand navigation, searches, feature use and performance. Consent-based analytics is not loaded unless the cookie choice stored on your device is “accepted”. You may reject analytics without losing access to the core Service.

You can withdraw your choice using our quick cookie controls, which remove optional analytics cookies and identifiers accessible from this browser. You can also use your browser's site-data controls. Withdrawing consent does not affect processing that occurred before withdrawal.

We disclose data only as needed to the following recipients or recipient categories:

• Clerk: authentication, account management and subscription billing, together with the payment processor used in its checkout.
• Google Analytics and Microsoft Clarity: optional analytics and service-improvement data when you consent.
• OneSignal: web and mobile push-notification delivery and subscription management.
• Sentry: application error monitoring and diagnostics.
• Netlify and infrastructure providers: website hosting, content delivery, databases, search infrastructure, storage, security and technical operations.
• Professional advisers and authorities: where reasonably necessary for legal, audit, insurance or compliance purposes, or where a valid law requires disclosure.
• A buyer or successor: if KURB is involved in a merger, financing, reorganisation or sale, subject to appropriate confidentiality and data-protection safeguards.

When you follow a link to a third-party marketplace, that marketplace processes the data you give it under its own privacy policy. KURB does not control the marketplace's checkout or privacy practices.

CUTTHWICE OÜ is established in Estonia, but some providers and their subprocessors may process data outside the European Economic Area. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary safeguards where appropriate. You may contact us for information about the safeguard relevant to a particular transfer.

We keep personal data only for as long as necessary for the relevant purpose:

• Account and service data is generally kept while your account is active and for the time reasonably needed to complete a verified deletion request, resolve disputes and protect the Service.
• Saved filters, favourites, collections, monitors and notification settings are kept until you remove them or a verified account-deletion request is completed, subject to backup and legal-retention cycles.
• Appraisal metadata, token records and reviews are kept while associated with your account and afterwards only where needed for security, dispute resolution, service integrity or legal compliance.
• Billing and transaction records are kept for the period required by applicable tax, accounting and consumer-protection law.
• Security, diagnostic and analytics records are kept according to configured operational periods and then deleted or aggregated. Provider-specific records may follow the provider's documented retention settings.

Retention may be extended where necessary to investigate abuse, comply with a legal hold, or establish, exercise or defend a legal claim. Backups are isolated from ordinary use and removed on their normal rotation. Data that has been irreversibly anonymised may be kept for statistical purposes.

Subject to the conditions in applicable law, you may:

• request access to and a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict processing;
• receive portable data you provided to us;
• object to processing based on legitimate interests or direct marketing;
• withdraw consent at any time; and
• obtain information about relevant automated processing and contest a result where the GDPR gives you that right.

Use our account-deletion request form to request erasure, or email [email protected] to exercise another right. We may need to verify your identity. We will normally respond within one month, and will tell you if the GDPR permits more time or if a lawful exception applies.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or to the supervisory authority in the EU/EEA country where you live, work, or believe an infringement occurred.

KURB is not directed to children under 13, and they may not create an account. If consent is the legal basis for providing an online service directly to a child, the applicable age of digital consent in the child's country may be higher. In that case, permission from the holder of parental responsibility is required. Contact us if you believe a child has provided data unlawfully.

We use organisational and technical measures designed to protect personal data, including access controls, encrypted network connections, authentication, monitoring and service isolation. No online service can guarantee absolute security. Please protect your account credentials and contact us if you suspect unauthorised access.

We may update this policy to reflect changes to the Service, providers or law. We will post the revised policy with a new effective date and provide additional notice, such as an account or email notice, where a change materially affects how we use personal data.

Privacy questions and requests can be sent to [email protected] or mailed to CUTTHWICE OÜ at Tornimäe tn 5, Kesklinna linnaosa, Tallinn, Harju maakond 10145, Estonia.