Privacy Policy

1. Who We Are

Mira Labs LLC (“we,” “us,” “our”) operates Curo.you, a research-peptide storefront. References to “Curo” or “Curo.you” throughout this policy mean the website at curo.you and any related services we provide.

2. Information We Collect

Account information. When you register, Clerk (our authentication provider) collects your name and email address.

Order information. When you place an order, we collect your phone number and shipping address so we can process and deliver it.

Cart data. Items you add to your cart are stored in your browser only and are not transmitted to us until you submit an order.

Usage and device data. We automatically collect information about how you interact with the site — pages visited, time on page, browser type, IP address, and similar technical data — through Vercel Analytics and Google Analytics (loaded via Google Tag Manager). We and our advertising partners (such as Google and Meta) also use cookies and similar technologies to understand your interests and show you relevant ads on other sites (see Sections 4 and 5).

Payment information. We do not collect or store payment card details. Payments are handled directly by a PCI-DSS-compliant third-party payment processor. Their privacy policy governs any payment data you provide to them.

3. How We Use Your Information

We use your personal information to:

• Fulfill and ship your orders, and send order confirmations and shipping updates by email and SMS.
• Authenticate your account and protect against fraud and unauthorized access.
• Respond to your questions and support requests.
• Understand how visitors use the site (analytics) so we can improve it.
• Comply with legal obligations and enforce our terms.
• Show you relevant ads on other websites and platforms, and measure their performance (advertising and remarketing).

We share certain online identifiers with advertising partners (such as Google and Meta) for the remarketing described above. We do not exchange your personal information for money. Under California law, this advertising activity may be considered a “sale” or “sharing” — see Section 8 for your choices.

4. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential/session cookies — required for the site to function, including secure login via Clerk.
• Analytics cookies — Vercel Analytics and Google Analytics (via Google Tag Manager) collect usage data that helps us improve the site.
• Advertising cookies — we and our advertising partners (such as Google and Meta) use cookies, pixels, and similar technologies to understand your interests, show you relevant ads on other websites and platforms (remarketing), and measure ad performance.

We do not currently display an on-site cookie consent banner. You can control cookies through your browser settings (which may affect site functionality), opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and manage interest-based ads through Google Ads Settings, Meta ad preferences, and the opt-out tools at the Digital Advertising Alliance and Network Advertising Initiative.

5. How We Share Your Information

We share your personal information only as follows:

• Service providers. We share data with vendors that help us operate Curo.you: Clerk (authentication), Resend (transactional email), Omnisend (email and SMS messaging), Vercel (hosting and analytics), and Google (analytics via GTM). Each vendor is bound to use your data only for the services they perform for us.
• Advertising partners. We share online identifiers and activity data with advertising platforms (such as Google and Meta) to show you relevant ads on other sites and measure their performance (remarketing).
• Payment processor. Your order information (name, shipping address, email) is shared with our PCI-DSS-compliant payment processor to complete your transaction.
• Legal requirements. We may disclose your information when required by law, court order, or government authority, or when we reasonably believe disclosure is necessary to protect rights, property, or safety.
• Business transfers. If Mira Labs LLC is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We do not sell your personal information for money. However, our use of analytics and advertising partners (such as Google and Meta) involves sharing online identifiers for cross-context behavioral advertising, which is treated as a “sale” or “sharing” under California law (CCPA/CPRA). This advertising sharing does not include SMS opt-in data or phone numbers. You can opt out — see Section 8 for your California rights.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes in this policy — including completing transactions, meeting legal obligations, resolving disputes, and enforcing our agreements. Usage and analytics data is generally retained for shorter periods unless a longer retention is legally required.

You may request deletion of your account and associated personal data at any time (see Section 8).

7. Security

We use commercially reasonable technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your information may be processed on servers located outside your state or country. By using Curo.you you consent to that transfer, subject to the protections described in this policy.

8. Your Privacy Rights

All users

You may request to access, correct, or delete the personal information we hold about you at any time. Send requests to info@curo.you. We will respond within a reasonable timeframe (no more than 45 days for verified requests).

California residents (CCPA/CPRA)

If you are a California resident you have the following rights:

• Know / Access — request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it was used or shared.
• Correct — request correction of inaccurate personal information.
• Delete — request deletion of your personal information, subject to exceptions for legal obligations and legitimate business needs.
• Opt out of sale/sharing — we do not sell personal information for money, but we do share online identifiers with advertising partners (such as Google and Meta) for cross-context behavioral advertising. You may opt out by emailing info@curo.you and by using the browser and ad-network controls listed in Section 4 (Google Ads Settings, Meta ad preferences, and the DAA/NAI opt-out tools).
• Limit sensitive data use — we use account login credentials (sensitive personal information) only to authenticate you, which is their expected purpose.
• No discrimination — we will not deny you goods or services, or charge different prices, because you exercised any of these rights.

To submit a request, contact us at info@curo.you. We may ask you to verify your identity before responding. Only you, or a person you authorize, may make a request on your behalf.

9. Children’s Privacy

Curo.you is not directed to anyone under the age of 21. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at info@curo.you and we will take steps to delete it.

10. SMS and Marketing Communications

We use phone numbers to send order-related text messages such as confirmations, payment instructions, and shipping updates. If you separately opt in to SMS marketing, we may also use your phone number to send recurring automated marketing and promotional text messages, including offers and restock alerts. Consent to marketing texts is not a condition of purchase. Message frequency varies, and standard message and data rates may apply.

You may opt out of SMS marketing at any time by replying STOP to any marketing text we send, or reply HELP for help. We do not sell SMS opt-in data or phone numbers, and we do not share SMS opt-in data or phone numbers with third parties for their own marketing purposes.

If you have subscribed to marketing emails, you may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@curo.you.

11. Links to Third-Party Sites

Our site may link to third-party websites we do not operate. We are not responsible for their privacy practices. We encourage you to review the privacy policy of every site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. For material changes, we will notify you by email or a prominent notice on the site prior to the change taking effect. Continued use of Curo.you after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For questions, data requests, or privacy concerns:

Mira Labs LLC — Curo.you
410 Peachtree Parkway, Suite 4245
Cumming, GA 30041, USA
Phone: (943) 300-5010
Email: info@curo.you