Privacy Policy

This Privacy Policy describes how TownPop ("TownPop," "we," "us," or "our") handles personal information when you use our websites, mobile experiences, email newsletters, SMS or messaging features (if offered), and related services (collectively, the "Platform"). By using the Platform, you acknowledge this policy. If you do not agree, do not use the Platform.

1. Who is responsible

TownPop (the "Operator") is responsible for the processing described here, unless a feature is clearly provided by a third party (for example, a payment processor). Where this policy refers to "we," it means the Operator. How to reach us is in Section 18 below.

2. Information we collect

Depending on how you use the Platform, we may collect:

• Account and contact data: email address, password or authentication tokens, optional phone number, and display or business contact information you provide when registering, subscribing, requesting a business account, or updating your profile.
• Preferences: geographic zones, interest categories, notification settings, and similar choices you save to personalize your feed, emails, or messages.
• Newsletter and communications data: subscription status, send and engagement events (for example opens or link clicks, when available), and records of consent or unsubscribe requests.
• Advertising and feed measurement: identifiers stored in your browser (such as a locally generated visitor ID), approximate delivery context, and events such as impressions and clicks used for caps, billing, fraud resistance, and aggregate reporting.
• Content and activity: items you save, pin, or interact with while logged in, and engagement signals we log to improve the service.
• Technical data: IP address, device and browser type, general location derived from IP, timestamps, and diagnostic logs for security, debugging, and reliability.
• Payment-related data: if you purchase advertising or paid features, payment card data is typically processed by our payment partners; we receive limited transaction metadata needed to fulfill the order.

We do not require you to provide more than is reasonably necessary for the features you choose. If you decline required fields, some features may be unavailable. We do not knowingly collect sensitive categories of personal information (such as government ID numbers, health data, or precise geolocation beyond what is inherent in IP-based estimates) except where you voluntarily submit them in a field not intended for that purpose—in which case we encourage you not to do so and may delete such information if we become aware of it.

3. How we use information

We use personal information to:

• Provide, operate, secure, and improve the Platform;
• Create and manage accounts, authenticate users, and enforce our Terms of Use;
• Deliver editorial content, personalized feeds, and—where you have signed up—email newsletters and, if enabled, SMS or similar local alerts in line with your preferences and applicable law;
• Send transactional or service messages (account verification, password reset, receipts, legal notices) even if you have opted out of marketing;
• Target and measure advertising, including frequency caps and performance reporting for advertisers;
• Detect, prevent, and respond to abuse, fraud, and security incidents;
• Comply with law, respond to lawful requests, and establish or defend legal claims;
• Aggregate or de-identify data for analytics and product development where permitted.

4. Email, newsletters, and optional SMS

We use your email to operate your account and to send communications you request. Marketing or recurring newsletters are sent based on your choices and, where required, consent. You may opt out of non-transactional email via unsubscribe links or account settings, subject to processing delays.

SMS or messaging features, if offered, use your number only as disclosed at collection, per carrier rules and your opt-in. Message and data rates may apply.

We do not sell your email or phone number to third parties for their independent marketing. We share data with processors under contract, as described below.

5. Cookies, storage, and similar technologies

We and partners may use cookies, local storage, pixels, and similar technologies for session management, preferences, ad measurement, and aggregate analytics. You may control some options via your browser; blocking cookies may limit features.

6. How we share information

We may disclose information:

• Service providers: hosting, email delivery, analytics, payments, support, and security vendors processing data only on our instructions.
• Advertising and measurement partners: as needed to serve, cap, and report on ads, often in aggregate or pseudonymous form.
• Legal and safety: when required by law, regulation, legal process, or governmental request, or to protect rights, safety, and security.
• Business transfers: in a merger, acquisition, financing, or sale of assets, subject to safeguards.
• With your direction: when you ask us to share information.

California & similar U.S. state laws: We do not "sell" personal information for money. We do not "share" personal information for cross-context behavioral advertising as defined under certain state laws, except where we separately disclose practices and offer required opt-outs. If our practices change, we will update this policy and any legally required notices.

7. Retention

We retain information while your account is active, as needed to provide the Platform, and as required to comply with law, resolve disputes, and enforce agreements. Backup and archival systems may retain copies for a limited period. Aggregated or de-identified data may be retained longer.

8. Security

We implement reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. We may verify requests before responding. We will respond within the timeframe required by applicable law (for example, within approximately one month for many GDPR requests, subject to extension where permitted).

U.S. state residents: You may have rights to know categories and specific pieces of personal information collected, to delete, to correct inaccuracies, to opt out of certain sales or sharing, and to limit use of sensitive personal information, where those rights apply. We will not discriminate against you for exercising rights, except as permitted by law.

10. European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, the following applies where GDPR or local equivalents apply:

• Legal bases may include: (i) performance of a contract with you; (ii) our legitimate interests (for example, securing the Platform, measuring ads, analytics), balanced against your rights; (iii) your consent, where required; (iv) legal obligation.
• You may have the right to object to processing based on legitimate interests and to withdraw consent where processing is consent-based, without affecting prior lawful processing.
• You may lodge a complaint with a data protection authority. * Sample: A list of EU supervisory authorities is available via the European Data Protection Board; the UK ICO is at ico.org.uk.

11. Automated decision-making and profiling

We do not use automated decision-making that produces legal or similarly significant effects solely based on automated processing. We may use algorithms and rules to rank, personalize, or filter content and ads; you can adjust many personalization inputs (for example zones and interests) in your settings.

12. Security incidents

If we become aware of a breach of security leading to accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of personal data, we will assess the incident and, where required by applicable law, notify regulators and/or affected individuals within required timeframes. No security program can eliminate all risk.

13. Nevada residents

Nevada residents may submit a verified request directing us not to sell certain covered information. We currently do not sell such information as defined under Nevada law. To inquire, contact us at the email below. * Verify wording with counsel if you engage in any data monetization beyond standard advertising.

14. Children

The Platform is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

15. International transfers

If you access the Platform from outside the country where the Operator is located, your information may be processed in that country or others where we or vendors operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA/UK/Switzerland. * Document your transfer mechanism with counsel.

16. Changes to this policy

We may update this Privacy Policy. We will post the revised version with a new "Last updated" date and, where required, provide additional notice (for example for material changes). Continued use after the effective date constitutes acceptance where permitted by law.

17. Relationship to Terms of Use

Our Terms of Use govern use of the Platform and include additional disclaimers and limitations of liability that help protect the Operator and users' understanding of the service.

18. Contact

For privacy questions, rights requests, or complaints, use the following: