Privacy Policy

🌐 Read in your languageChoose language / IdiomaEspañolالعربيةবাংলা中文（简体）中文（繁體）FrançaisDeutschΕλληνικάગુજરાતીKreyòl ayisyenעבריתहिन्दीItaliano日本語한국어فارسیPolskiPortuguêsਪੰਜਾਬੀRomânăРусскийFilipinoதமிழ்తెలుగుไทยTürkçeУкраїнськаاردوTiếng ViệtTranslateMore languages

Google Translate opens in a new tab. Automatic translations may contain errors.

CuraDebt may continue to service certain legacy client relationships established previously, but new consumers using this Site are generally matched with an independent third-party provider or law firm, subject to debt type, state availability, and applicable law. Our role is limited to collecting information, applying basic matching criteria, and facilitating a referral. We do not control a third-party provider’s services after a referral. Services are not available in all states.

California residents: see the California Privacy Notice below for additional rights and disclosures, including how to opt out of the sale or sharing of personal information.

Third-Party Provider Disclaimer

When you are matched with a provider through our service, that provider operates independently from CuraDebt. The provider’s own terms of service, engagement letter or client agreement, and privacy policy govern your relationship with that provider. CuraDebt is not a party to those agreements, does not direct or control the provider’s professional judgment, and does not guarantee or warrant the provider’s services, results, conduct, or data practices. Your decision whether to engage any matched provider is solely your own. To the fullest extent permitted by law, any claims, disputes, damages, or losses arising from your engagement with a matched provider are solely between you and that provider.

All interactions with our company, including calls, may be recorded or monitored for quality assurance and training purposes.

Information We Collect

Information You Provide

• Full name
• Email address
• Phone number
• State of residence
• Total debt amount and types of debt
• Any other information you voluntarily provide

We do not request your Social Security Number. Our matching process does not require it. If you ever choose to provide it voluntarily, we protect it as described in the Social Security Numbers section below.

Verification Services

For non-bankruptcy debt-relief inquiries only, and only when you affirmatively provide the credit authorization presented in the applicable debt-inquiry form, we may perform a soft credit inquiry to verify identity and assess eligibility for matching. No credit inquiry is performed by CuraDebt for bankruptcy evaluation requests. A soft inquiry does not affect your credit score. See Credit Information and FCRA Authorization below.

Automatically Collected

• IP address and approximate geolocation
• Browser type, version, and language
• Operating system and device type
• Pages visited, time spent, and navigation paths
• Referring URL and search terms
• Date and time of access

Consent Verification

Our lead forms on lp.curadebt.com use TrustedForm, a consent-certification service from ActiveProspect, Inc. Our updated forms show a recording notice on the preceding step. TrustedForm starts only after that notice has been displayed and you continue to the next step. It may then record page interactions and information entered before final submission, including clicks, scrolling, keystrokes and contact details, to document the disclosures and your consent. Fields configured for masking are excluded from the consent record. The recording and a certificate are kept as evidence of consent, including for compliance with the Telephone Consumer Protection Act (TCPA). We do not use these recordings for advertising.

Third-Party Sources

We may receive information from advertising partners, analytics providers, and data aggregators, including lead-generation data and information used to verify or supplement the information you provide.

How We Use Your Information

• Match you with providers based on your situation, debt type, and state
• For authorized non-bankruptcy debt-relief inquiries only, verify identity and assess eligibility through soft credit inquiries
• Send administrative confirmations and contact you for quality assurance about your referral
• Process referrals
• Certify and document consent
• Improve our services and Site
• Comply with legal and regulatory obligations
• Detect, prevent, and investigate fraud and security incidents

How We Share Your Information

Network Partners

When you provide consent through an applicable form, the information you submit is shared only with the one matched provider identified in that form disclosure. Information for another service category is shared only if you separately and affirmatively select that category. CuraDebt may or may not receive compensation in connection with a referral. Under the CPRA, certain sharing for matching may constitute a “sale.” California residents may opt out as described in the California Privacy Notice below.

Once shared, the matched provider generally becomes an independent controller of that information under its own privacy policy and agreements. CuraDebt does not own or control the matched provider, is not responsible for the provider’s acts or omissions, and does not control how the provider collects, uses, stores, discloses, or secures information after referral.

Service Providers

We use service providers for hosting, analytics, CRM, email and SMS delivery, identity verification, and consent certification (TrustedForm, described above). Internal engagement tracking and direct session-replay loading on our updated confirmation pages are disabled. Historical records may remain under the applicable retention policy. Consent certification is separate from optional analytics. These providers are contractually limited to using information only to perform services for us.

Advertising and Analytics

We may share information derived from your browsing activity, which may include identifiers such as IP address and device information, with advertising partners for audience targeting and campaign measurement. The California Privacy Notice below identifies the specific categories sold or shared.

Legal and Business Transfers

We may disclose information when required by law, regulation, legal process, or governmental request, and in connection with a merger, acquisition, financing, or sale of assets, with notice where required.

SMS Consent Is Not Shared or Sold

Your mobile opt-in and SMS/text-messaging consent are not shared with third parties or sold for their independent marketing, and are not the basis on which contact information is shared with Network Partners. Consent records are retained only to document compliance and to defend against claims, as described in Data Retention.

How We Screen Network Partners

Drawing on over 25 years of experience in the industry, CuraDebt applies a limited business-level screening process when deciding whether to include a provider in its network. This review may include items such as BBB rating, review volume, issues reflected in reviews, complaint patterns or velocity, meetings or discussions with management, and observations over time. This screening is discretionary, may change without notice, and is not a guarantee, certification, endorsement, or warranty of any provider. You remain solely responsible for deciding whether to engage any provider and for reviewing that provider’s own disclosures, agreements, and policies.

Compensation Disclosure

CuraDebt provides referral services to consumers at no separate charge. CuraDebt may earn revenue through referral, marketing, lead-generation, or other lawful compensation arrangements with some network partners, while other referrals may generate no compensation at all. Any compensation arrangement is between CuraDebt and the provider, not the consumer. CuraDebt’s matching considerations may include your financial situation, debt type, state, provider availability, and applicable legal or compliance restrictions.

Credit Information and FCRA Authorization

Bankruptcy evaluation requests: CuraDebt does not obtain a consumer credit report or perform a soft or hard credit inquiry for bankruptcy evaluation requests. Submitting a bankruptcy evaluation request does not authorize CuraDebt or a matched law firm to obtain a consumer credit report under this Policy. Any separate credit-report request by a law firm is outside this authorization and must be addressed separately with that firm.

This credit authorization applies only to non-bankruptcy debt-relief inquiries. When you submit an applicable debt-inquiry form and affirmatively agree to the credit authorization presented at the point of submission, you provide express written instructions under the federal Fair Credit Reporting Act (FCRA) authorizing CuraDebt and the Network Partners identified in that authorization to obtain a soft inquiry from your consumer credit report or credit profile for the purpose of verifying your identity, assessing eligibility, and matching you with a debt-relief provider, product, or service. Merely visiting this Site, agreeing to this Privacy Policy, or submitting a bankruptcy or other non-debt-relief inquiry does not provide this authorization. A soft inquiry does not affect your credit score. CuraDebt does not perform “hard” credit inquiries; however, certain lenders or providers in the network may perform a hard inquiry to evaluate you for a firm offer of credit.

Consent to Be Contacted (Calls, Texts, and Email)

Separately from any applicable debt-inquiry credit authorization above, when you submit a form you may provide express written consent to receive calls, text messages, and emails from CuraDebt and the Network Partners with whom you are matched, including via automatic telephone dialing systems, artificial or prerecorded voice, and AI-powered contact systems. Message frequency varies (up to 10 messages per month); message and data rates may apply. Consent to be contacted is not required to use our services or to be matched.

You may opt out at any time: reply STOP to any text message; click “unsubscribe” in any email; or contact us using the information below.

SMS/Text Message Terms

• Message frequency varies, up to 10 per month.
• Message and data rates may apply.
• Reply STOP to opt out.
• Reply HELP for assistance, or contact us using the information below.
• Consent is not required to use our services.
• Carriers are not liable for delayed or undelivered messages.

Cookies and Tracking

• Strictly Necessary: essential functionality.
• Analytics: visitor behavior insights.
• Marketing: ad delivery and measurement.
• Session Replay and Consent Certification (TrustedForm): a recording of how you complete our forms, kept as evidence of your consent. On our updated forms, recording begins after the preceding recording notice is shown and you continue. It can begin before final submission; contact details entered thereafter may form part of the consent record.
• Consent Verification: certifying voluntary consent.

Cookies We Use

When you choose Reject all or turn a category off in Cookie Settings, we remove the marketing and analytics cookies and browser storage listed above that our site sets (including cd_gclick and cd_lp_visitor_v2). Cookies that other companies set on their own domains (for example google.com or facebook.com) cannot be removed by our site; you can clear them in your browser settings or through those companies.

You can manage your preferences through our cookie consent banner. Non-essential cookies are blocked until you provide consent. On www.curadebt.com, Google Tag Manager, which loads our Google, Meta, and Awin analytics and advertising tags, is not loaded at all until you allow Analytics or Marketing, so those providers receive no request from our pages before you make that choice. TrustedForm is used separately to document consent, with an on-form recording notice before activation; it is not used for advertising analytics. You may also opt out of certain interest-based advertising at networkadvertising.org or aboutads.info/choices.

Aggregate Form Success Reporting

We count form loads and completed submissions for covered forms to improve their usability. These totals do not add a visitor identifier, cookie, fingerprint or record of intermediate answers. Reloads may count again, so the report measures submissions per form load, not unique-person conversion. This counting stops if you reject Analytics or form measurement, or your browser sends GPC. Internal step-by-step counting is currently disabled. Form processing, fraud prevention, security logs and consent certification are separate.

Advertising upload permission on updated forms is recorded separately from form-load totals. A form submission alone does not override a prior advertising rejection or GPC. Where permitted, a disclosed advertising-measurement assent may support a server-side conversion upload. This does not enable advertising cookies that you have not allowed.

Third-Party Tracking Technologies We Use

We use the following third-party advertising, analytics, and measurement technologies on our Site. Each receives certain information (which may include online identifiers, device and browser information, IP address, and information about your interactions with our Site) and may use that information for its own advertising, analytics, and measurement purposes, which may constitute a “sale” or “sharing” under the CPRA. You can opt out as described in Do Not Sell or Share My Personal Information below and through our cookie consent banner.

• Meta Pixel and Meta Conversions API (advertising and conversion measurement, browser and server-side) — only if you allow Marketing, our pages load the Meta Pixel (we use two pixel IDs) and a Meta-provided Conversions API helper script hosted on Amazon Web Services (capi-automation.s3.us-east-2.amazonaws.com). Together they send page-view and event data, browser and device information, and Meta identifiers (such as the _fbp and _fbc cookies) to Meta, including through a Meta-provided service hosted on Amazon Web Services (an *.on.aws address). This happens on page views after you allow Marketing, not only when you submit a form. Meta Privacy Policy
• Google Ads and Google Analytics 4 (advertising and analytics) — Google Privacy Policy
• Session replay and consent-certification tools (TrustedForm and any session-analytics provider we use) — used on pages that contain our forms to record how you interact with the page and the form (see Consent Verification above) and to certify consent. Not used for advertising. Fields configured for masking are excluded; contact details entered after recording starts may be retained as consent evidence.
• Cloudflare (content delivery and security) — Cloudflare delivers, caches, and secures our Site, and therefore processes your IP address and basic request information when you visit. We do not use Cloudflare Web Analytics on our Site.
• Burst Statistics (first-party site analytics) — a self-hosted analytics tool that runs on our own servers and does not share visitor data with third parties. It operates in cookieless mode and does not set identifiers on your device. Because it sets no cookies and sends no data to third parties, it runs for all visitors, including before you make a choice in our cookie banner.
• Awin (affiliate marketing attribution) — used to attribute leads and conversions to affiliate partners via MasterTag and Lantern tracking, including cookies such as AwinChannelCookie and lantern (up to 30 days). Awin Privacy Policy
• ipapi.co (IP-based geolocation) — used to determine your approximate location (city/region level) from your IP address for state-based matching and compliance purposes.
• Google Maps Places (address autocomplete) — used to suggest and format your address as you type on our forms. Google Privacy Policy
• Spinwheel (identity verification and soft credit inquiry) — used only for non-bankruptcy debt-relief inquiries with your affirmative FCRA written instructions, to verify your identity and obtain a summary of your unsecured debt. Spinwheel credit inquiries are not used for bankruptcy evaluation requests. Spinwheel Privacy Policy
• Server-side ad measurement and audience lists (Meta Conversions API, Meta Custom Audiences, Google Ads offline conversions) — after you submit a form, we may send Meta or Google your email address or phone number in hashed form (converted into a coded string before it leaves our systems), the ad click identifier from your visit, and a general status of your inquiry, so we can measure which ads work and include or exclude you from our own ads. Hashing changes the format of the identifier but is not anonymization or transport encryption: the platform can match it to an account it already has. We do not send these uploads if you decline advertising in our cookie banner or your browser sends a Global Privacy Control signal. Meta Privacy Policy · Google Privacy Policy
• Embedded content and site services (the Shopper Approved and Customer Lobby customer-reviews widgets, the BBB accreditation seal, Google Fonts on some of our subdomains, Gravatar profile images, Google review profile photos, YouTube (privacy-enhanced youtube-nocookie.com) and Vimeo videos, the Ringba call-tracking script on some of our older landing pages, the accessiBe accessibility widget, and public code libraries from jsDelivr, cdnjs and jQuery) — these load directly from the provider when you open a page that uses them, so the provider receives your IP address and basic browser information. They are used to display the page and do not set advertising cookies on our sites. On most pages of www.curadebt.com, fonts are served from our own servers rather than from Google.

This list reflects the trackers in use as of the Last Updated date and may change as we add or remove vendors. Where we operate additional advertising pixels (which may include, from time to time, Reddit, TikTok, Nextdoor, or LinkedIn), we will update this list accordingly.

Global Privacy Control

CuraDebt honors Global Privacy Control (GPC) and other Universal Opt-Out Mechanisms as a valid opt-out of the sale or sharing of personal information and of targeted advertising. This applies to all visitors regardless of state. If your browser sends a GPC signal, advertising cookies are turned off automatically, our cookie banner will confirm that your opt-out signal was honored, and the status on our Your Privacy Choices page will reflect it. Learn more at globalprivacycontrol.org. An active GPC signal continues to block advertising measurement; submitting a form does not override GPC or a prior advertising rejection.

Data Retention

We retain personal information only as long as reasonably necessary for the purposes for which it was collected, consistent with applicable legal and regulatory requirements. Our retention periods are:

• Lead and consultation records (name, email, phone, state, debt info): 7 years from collection, for regulatory, tax, and legal compliance.
• Consent verification records (TrustedForm certificates, form interaction data): 7 years, for TCPA defense and regulatory compliance.
• Cookie consent and opt-out records (consent banner choices and opt-out requests, including Global Privacy Control signals): 7 years, in line with our other consent records.
• Soft credit inquiry data: for authorized non-bankruptcy debt-relief inquiries only, 7 years, consistent with financial regulatory requirements. No such credit inquiry data is obtained by CuraDebt for bankruptcy evaluation requests.
• Call recordings: 5 years, for quality assurance and regulatory compliance.
• Short-lived measurement permission data: measurement deduplication hashes expire after 24 hours, and advertising-upload permission receipts expire after 180 days. Their expiry blocks further use; the retention health report identifies eligible expired rows for cleanup. These are separate from retained lead and consent-evidence records.
• Browsing, analytics, and cookie data: 26 months from collection.
• Session replay recordings: 26 months from collection.

Information is securely deleted or de-identified after the applicable retention period expires unless a longer period is required by law or an active legal hold.

Security & Incident Response

We maintain industry-standard technical, administrative, and physical safeguards designed to protect your information, including TLS/SSL encryption in transit, access controls, and employee training. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You can help protect your information by using strong, unique passwords and logging out of any account after use.

We maintain an incident response process designed to identify, contain, and address security incidents. In the event of a data breach affecting your personal information, we will notify affected individuals and applicable regulators as required by, and within the timeframes set by, applicable state and federal breach-notification laws.

Social Security Numbers

We do not request Social Security Numbers as part of our matching process. To the extent we ever come into possession of a Social Security Number, it is our policy to protect its confidentiality through physical, electronic, and procedural safeguards, to limit access to personnel who need it to perform their job functions, and not to disclose it to third parties except where required or permitted by law.

Children’s Privacy

Our Site is not directed to, and we do not knowingly collect information from, anyone under 18. If we learn that we have collected information from someone under 18, we will promptly delete it.

Third-Party Links

Matched providers and other linked third-party websites have their own privacy policies and data practices. We are not responsible for their content or practices.

Visiting Our Site From Outside the United States

Our Site is intended to provide services within the United States and is governed by U.S. law. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Site, you consent to that transfer and processing, and you understand that U.S. law may differ from the laws of your jurisdiction.

California “Shine the Light” Rights

Under California Civil Code §1798.83, California residents may request, once per year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for those third parties’ direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of those third parties. To make a request, email [email protected] with the subject line “Shine the Light Request,” or call 1-877-850-3328 ext. 888 and leave a voicemail with the information described in Contact Us.

Information Governed by Other Privacy Laws

Some information we handle is governed by sector-specific federal and state privacy laws and may be exempt from certain provisions of state consumer-privacy laws. This includes information subject to the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act. Where those laws apply, they govern the relevant information.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted, and we will revise the Last Updated date above. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Report a Privacy Concern

If you believe any part of our Site collects or shares information in a way that does not match this Privacy Policy or your cookie choices, please tell us so we can fix it. Email [email protected] with the subject line “Privacy Concern” and include the page address, the date and time, and what you observed. We review every report and correct confirmed issues promptly. This channel is separate from the Notice of Dispute process described in our Terms of Service.

Contact Us

The primary way to reach us, including for privacy requests, is by email. You may also call our toll-free number as a secondary method; if no one is available, please leave a voicemail with the information listed below so we can verify your request and respond by email.

If you reach our voicemail, please leave: (1) your full name; (2) a call-back number and the email address you would like us to respond to; and (3) a brief description of your request (for example, “opt out of sale/sharing,” “delete my information,” or “Arbitration Opt-Out”). We will follow up by email to the address you provide and may need to verify your identity before acting on certain requests.

California Privacy Notice (CCPA/CPRA)

This California Privacy Notice supplements the Privacy Policy above and applies solely to California residents, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). Terms defined in the CCPA have the same meaning when used here. This Notice does not apply to information exempt from the CCPA, including information governed by the GLBA, FCRA, FIPA, or the Driver’s Privacy Protection Act, publicly available information, or de-identified or aggregated information.

Categories of Personal Information We Collect, Disclose, and Sell or Share

Over the preceding 12 months, we have collected the following categories of personal information. For each category, the table shows the sources, the business or commercial purpose, the categories of third parties to whom we disclose it, and whether we “sell” or “share” it as those terms are defined under the CCPA.

We do not collect a Social Security Number. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Sensitive Personal Information

The only information we handle that may be considered “sensitive personal information” under the CCPA is soft credit inquiry data collected only for authorized non-bankruptcy debt-relief inquiries to verify your identity and assess eligibility, much of which is exempt from the CCPA under the FCRA and GLBA. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA, such as providing the service you requested, and we do not use it to infer characteristics about you. Because we use this information only as reasonably necessary to provide the matching service you requested, it may fall within the service-necessity exception and may not be subject to the right to limit in that use case.

Your California Privacy Rights

Subject to certain exceptions, California residents have the following rights:

• Right to Know / Access: request the categories and specific pieces of personal information we collected, the sources, the purposes, the categories of third parties to whom we disclosed it, and the categories we sold or shared, for the preceding 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: direct us to stop selling or sharing your personal information, including for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: to the extent required by applicable law, direct us to limit use and disclosure of sensitive personal information (subject to the service-necessity exception described above).
• Right to Non-Discrimination: we will not discriminate against you for exercising your rights.
• Right to Appeal: if we deny all or part of your request, you may appeal within 60 days by replying to our decision email or writing to [email protected] with “Appeal” in the subject line. We will respond to an appeal within 45 days (60 days where state law allows). If we deny your appeal, you may contact your state attorney general; we will include the link in our appeal response.

Do Not Sell or Share My Personal Information

To opt out of the sale or sharing of your personal information, email [email protected], use the “Your Privacy Choices” link in our website footer, enable a Global Privacy Control signal in your browser (which we honor as a valid opt-out), or call 1-877-850-3328 ext. 888 and leave a voicemail with the information described in How to Submit a Request. Your opt-out through a browser signal applies to that browser or device.

How to Submit a Request

You may submit a privacy request by emailing [email protected] (our primary method), through the “Your Privacy Choices” page linked in our footer, or by calling 1-877-850-3328 ext. 888 as a secondary method. If you reach our voicemail, please leave (1) your full name, (2) a call-back number and the email address you would like us to respond to, and (3) a brief description of your request, and we will follow up by email. These rights apply only to data held by CuraDebt; for data held by a matched provider, contact that provider directly.

We will confirm receipt of your request within 10 business days and respond within 45 days. Where permitted, we may extend the response period by a further 45 days and will tell you why. Residents of Oregon and Minnesota may also request a list of the specific third parties to which we have disclosed their personal data.

Identity Verification

To process a request to know, access, delete, or correct, we must verify your identity. We may ask you to provide identifiers we can match against information we previously collected, to confirm your request using the email address or phone number associated with it, or to provide a declaration under penalty of perjury where permitted by law. We may decline a request we cannot reasonably verify.

Authorized Agents

You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization (such as a valid power of attorney) and may require you to verify your own identity directly with us.

Financial Incentives

We do not offer financial incentives or price or service differences in exchange for the collection, sale, or sharing of personal information.

California Registrations

CuraDebt is registered with the California Department of Financial Protection and Innovation (DFPI) under the CCFPL, registration number 01-CCFPL-1684981-3480786.

Other State Privacy Rights

Virginia: residents may access, correct, delete, and obtain a portable copy of personal data, and opt out of targeted advertising and sale. Appeals may be directed to us using the contact information above. CuraDebt is licensed by the Virginia State Corporation Commission as a debt settlement provider, License No. DSP-13.

Colorado, Connecticut, Texas, Oregon, and others: residents of CO, CT, DE, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, and UT have rights under their respective state privacy laws. CuraDebt honors GPC and Universal Opt-Out Mechanisms. Contact us to exercise your rights.

Nevada: residents may opt out of certain sales of covered information by emailing [email protected] with the subject line “Nevada Opt-Out.”

Back to top ↑