Privacy Policy

Effective Date: January 1, 2025

ChangeCurve and its affiliated entities (“ChangeCurve,” “we,” or “us”) are dedicated to safeguarding the privacy of users who interact with our website at www.ChangeCurve.com or any other website operated by ChangeCurve (collectively referred to as the “Site”). This commitment extends to users of our online products, including our web-based change adoption platform (the “ChangeCurve System™”) and the mobile version of the platform (the “ChangeCurve Mobile™”). Together, the ChangeCurve System™ and ChangeCurve Mobile™ are referred to as the “Services,” and they are provided to all our customers (“Customers”).

This Privacy Policy outlines the types of information we collect and how we process, use, safeguard, and disclose that information. It also describes your rights regarding the data we collect in various contexts, such as when you:

1. Visit our Site, inquire about our Services, request a demo, or contact us (“Site Users”).
2. Set up and manage an account on behalf of a Customer using our Services (“Authorized Representatives”).
3. Use our Services as an end user, such as an employee of a Customer or a user of a Customer’s platform or mobile app where the Services are deployed (“End Users”).

Depending on your role, this Privacy Policy applies differently and provides details on how we handle your data. It also explains your rights in managing the information we collect and retain about you.

If the General Data Protection Regulation (GDPR) or the UK GDPR applies to our data processing, ChangeCurve Ltd., ChangeCurve UK Limited, or ChangeCurve Inc. act as the data controller (“Controller”), unless otherwise noted.

For California residents, additional terms may apply.

Please review this Privacy Policy carefully to understand how we collect, process, and protect your personal information, as well as your rights. This Privacy Policy supplements any other privacy-related notices provided and is not intended to override them. If you disagree with any part of this Privacy Policy, you should not use our Services or provide us with your information.

Navigating This Privacy Policy

To gain a full understanding of our privacy practices, you’ll need to review the relevant sections based on your use of our Site or Services, as outlined below:

Using ChangeCurve Services: If you are an Authorized Representative or End User of a Customer, see [here](#) for information about privacy practices related to our Services.
Using ChangeCurve Site: If you are a Site User, see [here](#) for details about privacy practices related to our Site.

A. Your Rights

Depending on your location (e.g., Europe, the UK, or California), you may have legal rights regarding your personal data. These rights may include access, correction, data portability, restriction, deletion, objection to processing, or withdrawal of consent (where applicable).

Note that these rights may be limited by law and are not always applicable. For instance, where fulfilling a request could affect others’ rights, violate legal obligations, or compromise intellectual property, we may decline the request.

To exercise your rights, please contact ChangeCurve using the details provided below, or submit a request using this form. Verification of your identity may be required to process your request.

If you believe your data rights have been violated, you may contact our Privacy team at privacy@changecurve.ai or file a complaint with the appropriate data protection authority.

B. Data Retention

ChangeCurve retains personal data as necessary to provide our Services and comply with legal obligations. Personal data related to Site Users is typically kept for no more than seven years, primarily for backup and legal purposes.

In some cases, data may be retained beyond these periods in anonymized or aggregated formats for legitimate business purposes.

C. Minors

Our Site and Services are not designed for children, and we do not knowingly collect data from individuals under the age of majority in their jurisdiction. If a parent or guardian provides consent where permitted, children may access the Services. If we learn of unauthorized data collection involving minors, we will delete the data promptly. To report such instances, contact privacy@changecurve.ai.

D. Information Security

We prioritize the security of your information and employ a combination of technological, physical, and procedural safeguards to protect it. However, no system is completely secure, and data transmission over the internet carries inherent risks.

For details about our security practices, see here.

E. International Data Transfers

As a global organization, ChangeCurve processes and stores data in locations outside the European Economic Area (EEA) and the UK. Transfers of personal data are conducted under appropriate legal safeguards, such as the Standard Contractual Clauses issued by the European Commission or equivalent UK agreements.

ChangeCurve complies with the EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. DPF, and Swiss-U.S. Data Privacy Framework. Learn more about our certifications at [dataprivacyframework.gov](https://www.dataprivacyframework.gov/).

F. Policy Updates

This Privacy Policy may be updated periodically. Material changes will be communicated through our Site or Services, and updates will take effect seven days after notice is provided. Your continued use of our Services constitutes acceptance of these changes.

G. Contact Information

For questions, concerns, or requests related to this Privacy Policy, please contact us:

Email: privacy@changecurve.ai

Contact Information:

You may reach out to our Privacy team at privacy@changecurve.ai.