Curabix Privacy Policy

Scope of this Privacy Policy

This policy applies to personal information Curabix handles through the public website, accounts, profiles, healthcare job applications, employer workflows, contact forms, and related support interactions.

An employer may separately decide how it handles candidate information for its own recruitment. External identity providers, professional regulators, payment services, education providers, and linked websites have their own responsibilities and notices. Review those notices before providing information directly to them.

This page explains the main information categories used by Curabix. Retention, processing locations, service providers, legal bases, international transfers, and privacy rights can differ by purpose and jurisdiction. Contact Curabix if you need information about a specific use of your information.

Information you provide

Curabix may receive information you enter for an account, profile, application, job, contact message, support request, or other platform task.

Provide accurate information and avoid unnecessary sensitive content. Do not place passwords, one-time codes, payment credentials, patient records, or unrelated identity documents into a public profile, CV, subject, or free-text field.

• ✓ Account and contact details such as name, email address, phone number, and authentication identifiers.
• ✓ Professional profile details such as work history, education, skills, registration status, preferences, and uploaded documents.
• ✓ Job application information and communication connected to a vacancy.
• ✓ Employer, recruiter, organization, vacancy, and hiring-workflow information.
• ✓ Contact-form fields: name, email, optional phone, subject, and message.
• ✓ Feedback, issue reports, and information provided in follow-up communication.

Information created through use of the service

Curabix may process technical and activity information needed to deliver, protect, troubleshoot, and understand the service.

Examples can include request time, page or feature used, device and browser characteristics, IP address handled by servers or service providers, authentication and security events, error information, job and application state, and communication delivery status. The information retained depends on the feature, security need, and applicable requirements.

After a user accepts optional analytics, Curabix can load Microsoft Clarity and Google Tag Manager. Curabix suppresses optional analytics on URLs containing common authentication or authorization values. Those services may receive online identifiers and usage events according to the configured tags and their own processing terms.

Cookies and similar storage

Curabix uses essential technologies for authentication and request security, and uses optional analytics only after a consent choice.

The API authentication flow uses credentials sent with requests and anti-forgery protection associated with cookies. Essential technologies support sign-in, session continuity, and security and may be necessary for account features. A consent preference can be stored in the browser so the site remembers whether optional analytics was accepted or declined.

Optional analytics scripts should not load before acceptance. Declining optional analytics should not block public content or essential account functions. Browser settings can remove or block storage, but strict blocking may affect sign-in or saved preferences.

Why Curabix may use information

Curabix may use personal information to provide requested features, secure the service, communicate, improve supported experiences, and meet legitimate legal or operational obligations.

The applicable legal basis depends on the information, purpose, relationship and jurisdiction. Contact Curabix with a specific privacy question when the published explanation does not address your circumstances.

• ✓ Create, authenticate, maintain, and protect accounts.
• ✓ Display profiles and process applications according to the user’s actions and platform design.
• ✓ Let authorized employers publish roles and manage recruitment workflows.
• ✓ Deliver contact messages, support, issue review, and service communication.
• ✓ Detect, prevent, investigate, and respond to fraud, abuse, security, and policy concerns.
• ✓ Maintain, troubleshoot, measure, and improve the platform, including consented analytics.
• ✓ Comply with enforceable obligations, preserve rights, and resolve disputes where applicable.

When information may be shared

Information may be shared with the recipient chosen by the user, service providers supporting Curabix, and parties required for security, legal obligations, or a business transition, subject to appropriate limits.

When a job seeker applies, relevant application information may be made available to the employer or authorized recruitment users connected to that vacancy. A contact message is made available to staff or providers supporting the contact process. Authentication and infrastructure providers process information needed to deliver their functions.

Curabix uses Firebase services and its own application services, and may load Microsoft Clarity and Google Tag Manager after consent. The current Cookie Policy explains optional browser technologies and how users can change their choice.

Curabix may disclose information when required by a valid legal process or when reasonably necessary to protect users, rights, safety, or service integrity, subject to applicable law. It should not sell or disclose personal information merely because a vague policy statement could be read to permit it.

Retention and deletion

Curabix keeps information only as long as needed for its stated purpose, security, disputes, legal obligations, and documented operational requirements.

Different records may need different periods: active account data, application records, employer recruitment data, contact messages, security logs, backups and consent records do not necessarily follow one schedule. Contact Curabix for the retention information relevant to a specific request.

A user may ask about deletion through the contact route. Curabix may need to verify the requester and may retain limited information when required for security, legal claims, regulatory obligations, fraud prevention, or another lawful reason. Deleting an account may not automatically delete information independently retained by an employer that received an application.

Your privacy choices and requests

Depending on the relationship and applicable law, users may be able to request access, correction, deletion, restriction, objection, portability, consent withdrawal, or information about processing.

Use the contact form with “Privacy request” in the subject and describe the request and account email. Do not send a password, one-time code, or full identity document initially. Curabix may ask for proportionate verification through a safer channel before acting.

Withdrawing optional analytics consent should stop future optional analytics loading on that browser. It does not undo processing already performed, remove essential technologies, or delete records held for other valid purposes. Browser controls can also remove stored choices.

Rights and exceptions vary. This page does not claim that every named right applies in every country or circumstance. Users may also have a right to contact an appropriate data-protection authority where applicable.

Security and safer use

Curabix uses technical and organizational measures intended to protect information, but no website, transmission, or storage system can guarantee absolute security.

Curabix uses cookie-based authentication, anti-forgery support, sensitive-URL analytics suppression, and access controls. Security measures are maintained as the service changes, but no internet service can promise perfect security.

Users should protect credentials, verify domains and recipients, limit document sharing, keep devices updated, and report suspected compromise. Curabix will not ask for an existing password or one-time code through a support message.

International processing and age-related concerns

Online services and their providers may process information across borders, and privacy rights can differ by location and circumstance.

Viewing a country page or international vacancy does not by itself determine which privacy rules apply to Curabix, an employer, a service provider, or a professional regulator. Contact Curabix with a specific question about the processing connected to your account or request.

Curabix is intended for employment-related use. A person who cannot legally provide the information or agree to the relevant service terms should not create an account or submit personal information without appropriate authorization. A parent or guardian with a concern may contact Curabix without initially sending identity documents.

Changes and contact

Curabix may update this policy when the service, providers, or legal requirements change and should publish a new update date for material revisions.

Review this page periodically. When law or the nature of processing requires another form of notice or consent, Curabix will use an appropriate channel in addition to updating this page.

Use the Contact page for privacy questions and requests. Use Report an Issue for a suspected exposure, account compromise, or unsafe data request. Contact an appropriate local authority when the matter is urgent or outside Curabix control.