Privacy Policy
Last updated 9 September 2026
This policy describes the practices Cuura currently implements. It has not yet been reviewed by legal counsel, and it must be before Cuura takes on its first paying client.
Who this covers
This policy covers information Cuura collects about you as a practitioner — the person buying and operating a Cuura site. It does not cover information your own clients give you through your site. For that information you are the health information custodian under PHIPA, and Cuura acts as your service provider.
What we collect
- Details you enter during intake: your name, email address, phone number, practice name, professional bio and design preferences.
- Files you upload during intake: a headshot, and any documents you choose to share so we can extract content from them.
- The address of an existing website, if you give us one, so we can read its public content.
- Payment records from Stripe. Cuura never sees or stores your card number.
- Aggregate, cookie-free site analytics. No cross-site tracking, no advertising identifiers.
Where it is stored
Practitioner and client data is stored in Canadian-hosted infrastructure. We do not transfer personal health information outside Canada.
During Phase 1 the platform's own operational database — the records Cuura staff use to track builds — runs in a United States region. It holds your practitioner details and no client health information. Moving it to a Canadian region is a committed change before the first paying client.
What we do with it
We use your intake content to build and operate your site, and your contact details to reach you about your build and your account. We do not sell your information, share it with advertisers, or use it to train models.
Marketing email is separate and opt-in. You choose it during intake with an unchecked box, and every marketing message carries a one-click unsubscribe. Messages about your build and your account are not marketing and continue regardless.
Retention and deletion
If you cancel, your site stops being hosted. We retain the records required to meet our own legal and tax obligations, and we keep a record of the deletion itself. Ask us and we will export your data and confirm what has been removed.
Contact
Questions about this policy, or a request to access or correct your information: use the contact page or write to hello@cuura.ca.