This Privacy Policy describes how Cursive ("Cursive", "we", "our", "us"), operator of cursive.world and the PD Tracker browser extension, collects, uses, stores, shares and protects personal data of users of its products and services (collectively, the "Services").
This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
For the purposes of the DPDP Act, Cursive acts as a Data Fiduciary in respect of personal data we collect from you (the Data Principal). Where Cursive provides Services on your behalf to your customers or to other persons (for example, lead capture flows), Cursive may act as a Data Processor, and you act as the Data Fiduciary in respect of such personal data.
Cursive does NOT collect or process:
Under Section 4 of the DPDP Act, Cursive processes personal data on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Provide and operate the Services | Consent (when you sign up) + legitimate use under Sec 7 of the DPDP Act |
| Process payments and issue tax invoices | Performance of contract + legal obligation (GST Act, IT Act) |
| Customer support and dispute resolution | Performance of contract |
| Fraud prevention, security monitoring, abuse detection | Legitimate interest (Sec 7(b) DPDP Act) |
| Service improvement and analytics | Consent + legitimate interest |
| Marketing communications (email, WhatsApp) | Consent (you may opt out at any time) |
| Compliance with law, court orders, regulatory requests | Legal obligation |
We do not sell or rent your personal data. We share it only as follows:
We share personal data with carefully selected service providers who process it on our behalf under written contracts that require confidentiality and security:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, storage, edge functions, RLS-protected hosting | All account, service usage and operation data |
| Razorpay | Payment processing, refunds | Name, email, mobile, transaction amount, billing address (if provided) |
| Resend (or equivalent ESP) | Transactional and marketing email delivery | Email, name, subject + body of message |
| GitHub Pages | Static website hosting (cursive.world frontend) | Public assets only; no personal data |
| Meta (Facebook/Instagram) | Ad analytics via Meta Pixel | Hashed email, hashed mobile, page-view events (only with cookie consent) |
| Google Analytics | Web traffic analytics | IP-anonymised, page-view events (only with cookie consent) |
We may disclose personal data when required by law, court order, summons or other valid legal process; to enforce our Terms of Service; to protect our rights, property or safety, or the rights, property or safety of our users or third parties; or in connection with a corporate transaction such as a merger or acquisition (in which case we will give notice as required by law).
We will share personal data with other parties only with your explicit consent for that specific purpose.
Cursive primarily stores personal data within India. Some of our service providers (such as Meta and Google Analytics) operate globally and may process data on servers located outside India. Such transfers are governed by the recipient's privacy practices and applicable law. Cursive will not transfer personal data to any country to which transfer is restricted by notification of the Central Government under Section 16 of the DPDP Act.
| Data category | Retention period |
|---|---|
| Account data | For the duration of your account + 1 year after account closure, then deleted |
| Tax invoices, payment records | 8 years (statutory requirement under GST and Income Tax laws) |
| PD Tracker product data | For the duration of active subscription / row credit + 30 days, then deleted |
| Server logs, IP logs | 180 days, then automatically purged |
| Marketing-list email | Until you unsubscribe + 90 days for record-keeping |
| Support tickets | 3 years from closure of the ticket |
Cursive implements reasonable security practices and procedures consistent with the IT (RSPP) Rules, 2011 and ISO/IEC 27001 principles, including:
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security.
Under the DPDP Act, you have the following rights:
To exercise any of these rights, write to privacy@cursive.world from the email address registered with your account. We will respond within 30 days (or such period as prescribed by the DPDP Act and its rules).
cursive.world uses cookies and browser localStorage to:
You can control non-essential cookies through your browser settings or our consent banner (where applicable). Disabling strictly necessary cookies will prevent you from logging in.
The Services are not directed to persons under 18 years of age. We do not knowingly collect personal data from any individual under 18. If we discover that we have inadvertently collected personal data from a minor, we will delete it promptly. Parents or guardians who believe their child has provided personal data to us should contact us at privacy@cursive.world.
In accordance with the IT Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the contact details of our Grievance Officer are:
Name: [Grievance Officer Name — to be inserted by Cursive]
Designation: Grievance Officer, Cursive
Email: grievance@cursive.world
Address: [Registered business address — to be inserted by Cursive]
Working hours: Monday to Friday, 10:00 AM – 6:00 PM IST
The Grievance Officer will acknowledge receipt of your grievance within 24 hours and resolve it within 15 days from the date of receipt.
If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India established under Section 18 of the DPDP Act, 2023.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other reasons. The updated Policy will be posted on cursive.world with a new "Last updated" date. For material changes, we will provide a more prominent notice (such as an email notification or a banner on the site). Your continued use of the Services after such update constitutes acceptance of the revised Policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Cursive
Privacy: privacy@cursive.world
Support: support@cursive.world
Website: cursive.world
[Registered business address — to be inserted by Cursive]
© 2026 Cursive. All rights reserved. · Terms · Refund Policy · Home