Privacy Policy
Curblane ("Curblane," "we," "us") is a fleet-management dashboard for Turo hosts. This policy explains what we collect, why, and your choices. Curblane is an independent product and is not affiliated with, endorsed by, or sponsored by Turo Inc.
What we collect
- Account data: your email address (for login via magic-link) and basic account settings.
- Fleet data you enter or import: the business records you add to run your fleet — vehicles (including VINs and license plates you choose to enter), bookings, guests' first names and trip details, tolls, expenses, parking, loans, payouts, reimbursements, and maintenance logs. You can type these in or import them from Turo files (trip/earnings CSVs, receipts, emails) and toll/parking statements. This is your business data; you own it.
- Import files are parsed in your browser and discarded: when you import a CSV, receipt, or email, the raw file is parsed on your device and only the structured records are kept — the original file (and any payment fragments or third-party identifiers it contains) is discarded right after parsing, not uploaded or stored. We keep guests' first names only, never full names or driver-license IDs.
- Payment data: if you subscribe, billing is handled by Stripe. Curblane never sees or stores your full card number — Stripe processes it. We store only your plan status and a Stripe customer/subscription identifier.
- Usage analytics: if we use product analytics (e.g., PostHog), we collect only behavioral events (which features you open, when you upgrade) and coarse properties (plan, approximate fleet-size bucket) to improve the product. We never send your fleet financial values or identifiers (dollar amounts, VINs, plates) to analytics.
- Local storage / cookies: the app stores data in your browser (
localStorage) so it works offline and loads fast; essential cookies keep you signed in. Analytics may set cookies subject to your consent where required.
How we use it
To provide and sync the dashboard across your devices, authenticate you, process subscriptions, provide support, keep the service secure, and improve the product. We do not sell your personal information, and we do not use your fleet data to advertise to you.
Legal bases (GDPR, where applicable)
Performance of our contract with you (providing the service); our legitimate interest in securing and improving the product; your consent (e.g., non-essential analytics cookies); and compliance with law.
Who we share it with (subprocessors)
We share data only with vendors that run the service, under their own terms:
- Supabase — database + authentication (your account and fleet data, isolated per-account; sends the login-link emails).
- Stripe — subscription billing and card processing.
- Netlify — application hosting.
- PostHog — product analytics (behavioral events only).
If we add a vendor (e.g., an email newsletter provider), we'll update this list. We may disclose information if required by law, or to protect rights, safety, and the integrity of the service. We do not sell data or share it with advertisers.
Data isolation & security
Each host's data is isolated at the database level using row-level security, so one account cannot access another's records. Data is encrypted in transit (HTTPS/TLS). No system is perfectly secure, but we work to protect your information and limit access to what's needed to run the service.
Data retention & deletion
- We keep your data while your account is open.
- On downgrade or cancellation, we retain your data (your account persists; cars beyond the free limit become read-only) so you can resume anytime.
- To delete your account, you can do it yourself in Settings → Delete account: this
permanently erases your account and all of its data — your fleet records, restore points (snapshots),
and any photos you uploaded — and cancels any active subscription, immediately and irreversibly.
A full backup downloads first, and you confirm by typing
DELETE. Prefer we handle it for you? Email hello@curblane.app from your account address and we’ll erase your data within 30 days. Either way, you can export your full data at any time from within the app before deleting.
Your rights
Depending on where you live (e.g., GDPR/EEA, UK, California/CCPA), you may have the right to access, export/port, correct, or delete your data, and to object to or restrict certain processing. You can export your full data from within the app at any time. To exercise other rights, email hello@curblane.app; we'll respond within the timeframe the law requires. We won't discriminate against you for exercising these rights.
International users
Curblane is operated in the United States; if you use it from elsewhere, your data is processed in the US and other countries where our subprocessors operate.
Children
Curblane is a business tool for adults and is not directed to anyone under 18. We don't knowingly collect data from children.
Changes
We may update this policy; we'll post the new effective date here and, for material changes, notify you by email.
Contact
Questions or requests: hello@curblane.app.