Last updated 26 October 2026
These terms are an agreement between your business (you) and Thinking Creativity Limited, trading as Curatum.ai, a company registered in England and Wales (company no. 07428091), registered office 34 Lancaster Gate, London, W2 3LP (we, us). By starting a trial or a subscription you accept them on behalf of your business.
Curatum.ai is a service for businesses. It is not for personal or household use, and these terms do not apply to consumers.
Curatum.ai gives your business two tools:
We may improve and change the service over time. If we remove something you rely on, we will tell you in advance where we reasonably can.
We believe in keeping a human in the loop. In practice that means:
Your subscription includes up to 500 email drafts and 2,000 chat replies each calendar month, for every mailbox your business uses. If you regularly go over these, we will contact you to agree a fair way forward before making any change.
You must not use Curatum.ai to:
We work to keep Curatum.ai running and secure, but we do not promise it will always be available or free of errors. We may need to pause it for maintenance or because of problems with our providers.
We may update these terms. For changes that materially affect you, we will email you at least 30 days before they take effect. If you do not agree, you can cancel before then.
This section applies when we process personal data on your behalf in providing Curatum.ai, as required by Article 28 of the UK GDPR. You are the controller and we are the processor.
| Subject matter | Providing the Email Agent and Chat Bot to you. |
|---|---|
| Duration | While your account is active, then until deleted as set out in 14.9. |
| Nature and purpose | Reading, sorting and storing emails; writing reply drafts; answering website chats; learning your tone and knowledge from replies you send; storing and showing this in your account. |
| Types of personal data | Names, email addresses, phone numbers and other contact details; the content of emails and chat messages; any other personal data people include in them. |
| Data subjects | Your customers, enquirers, website visitors, staff and anyone else who emails your connected mailboxes or uses your Chat Bot. |
You must have a lawful basis to give us this data and must tell people how it is used, for example in your privacy policy. Do not use Curatum.ai for data you are not allowed to share with a processor. We provide suggested wording for the Chat Bot.
We process personal data only on your documented instructions. These terms, your settings and your use of the service are your instructions. If the law requires us to process it in another way, we will tell you first unless the law forbids it. We will tell you if we think an instruction breaks data protection law.
Everyone we authorise to process your personal data is bound by a duty of confidentiality, and only accesses it when needed to provide the service or to help you when you ask. Customer details are hidden in our admin tools by default; revealing one needs a recorded reason and is logged.
We take appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption of stored mailbox credentials, separation of each client’s data, restricted database access, masked and logged staff access, and automatic deletion on the schedule in our privacy policy. Our security page describes these in more detail.
You give us general authorisation to use sub-processors. Our current sub-processors are listed on our sub-processors page. We will tell you by email at least 14 days before we add or replace one, so you can object. If you object on reasonable data protection grounds and we cannot resolve it, you may cancel without penalty. We put data protection terms in place with each sub-processor that are at least as protective as these, and we remain responsible for their work.
Where a sub-processor processes personal data outside the UK, we make sure a transfer safeguard recognised by UK law is in place, as described in our privacy policy.
Taking into account what we can reasonably do, we will help you respond to requests from people exercising their data protection rights, and with security, breach notification, data protection impact assessments and consultations with the ICO. If we receive a request directly from one of your customers, we will pass it to you and not respond ourselves unless you ask us to.
We will tell you without undue delay after becoming aware of a personal data breach affecting your data, and give you the information we have so you can meet your own obligations, including any report to the ICO.
When your subscription ends, we delete your personal data within 30 days, unless the law requires us to keep it. If you ask before then, we will give you a copy first. Copies in backups are overwritten within about 35 days.
We will make available the information you reasonably need to show that we meet these obligations, and allow and contribute to audits, including inspections, by you or an auditor you appoint. Audits need reasonable notice, at most once a year unless required by a regulator or after a breach, and must respect the confidentiality of our other clients.
Questions about these terms: hello@curatum.ai.