Privacy Policy

1. Information We Collect

We collect only the information necessary to operate, secure, moderate and improve the website

• Account Data: email address, username, and securely hashed password
• Listing Content: profile text, photos, reviews, availability information, and other content voluntarily submitted to the website
• Technical Data: IP address, browser type, device information, session cookies, and basic usage logs used for security, fraud prevention, and platform stability
• Payment Metadata: limited non-identifying transaction metadata provided by third-party cryptocurrency payment processers (such as BTC payment confirmations)
• Verification information: providers may voluntarily submit identification documents, selfies or verification media as part of account approval, fraud prevention or authenticity review processes

We never store private keys, wallet credentials, or seed phrases

2. How We Use Information

We use collected data to:

• Manage accounts, authentication, and user sessions
• Display listings, profile content, photos, reviews, and availability information submitted to the website
• Verify profiles, review submissions, and maintain platform integrity
• Process visibility upgrades, subscriptions, or cryptocurrency payment confirmations
• Monitor security, prevent fraud or abuse, and investigate reports, and enforce platform policies
• Improve Website stability, moderation systems, and user experiences

We do not sell, rent, or trade user data

3. Cookies & Tracking

• Session cookies are used to maintain logins, security, and core Website functionality
• Limited analytics or technical logs may be used to improve performance and detect abuse
• We do not use third-party behavioral advertising or cross-site tracking cookies
• Disabling cookies may limit certain Website features or functionality

4. Security Measures

• Passwords are stored using industry-standard hashing and salting practices
• Uploaded photos are automatically stripped of EXIF metadata where applicable
• Verification and payment-related data are encrypted during transmission and storage
• Access to sensitive moderation and verification systems is restricted to authorized personnel only
• Despite reasonable safeguards, no system can be guaranteed 100% secure

5. Identity Verification Data

To support authenticity, fraud prevention, account integrity, and community safety, provider identities are verified privately.

• Verification requires a government-issued passport and a selfie or video for visual comparison.
• Verification files are encrypted during upload, review, and moderation processing.
• Uploaded verification documents are deleted within 48 hours after review, except where temporary retention is legally required.

Biometric & Facial Recognition Clarification

• Verification images are used solely for identity verification, fraud prevention, account integrity, and impersonation detection.
• CityAgent does not use verification information for advertising, marketing, commercial profiling, or public facial-recognition systems.
• We do not create or store biometric identifiers for advertising, profiling, or commercial-use purposes.
• Any anti-fraud references generated during verification are stored as non-reversible security references and cannot reconstruct facial images, passports, selfies, videos, or other verification files.
• No public facial-recognition profiling or automated identity scoring is conducted.

Limited Verification Data Retention

Only limited verification metadata and security references may be retained, including:

• Verification status (approved or denied)
• Verification review date
• Last four digits of an identification number
• Internal fraud-prevention references used to detect duplicate, impersonation attempts, and any previously verified accounts

To help protect platform security and account integrity:

• Non-reversible security hashes or verification references may be stored for fraud prevention, impersonation detection, duplicate-account detection, and future verification consistency checks.
• These references cannot reconstruct original images, passports, selfies, videos, biometric data, or verification files.
• Retained verification metadata and references are stored in encrypted, limited-access form.
• Verification records may be deleted or retained in accordance with platform security, fraud-prevention, moderation, legal-compliance, and retention requirements.
• We do not sell, share, or commercially reuse identification data.

6. Approximate Location Data

(a) City-Level Data (Automatic)

(b) Browser-Based Location (Optional)

If browser-based location services are enabled:

• For clients, approximate location may be accessed temporarily to display nearby listings and improve search relevance
• For providers, generalized location data may be associated with active listings to support radius-based discovery features
• Exact GPS coordinates and street-level locations are never displayed publicly
• We do not publicly expose precise residential or personal address information

7. User Rights & Data Requests

California Privacy Rights

8. Third-Party Services

• Crypto payments are processed through external providers such as BTCPay
• Third-party providers maintain own independent privacy and security practices
• We do not operate as an escrow service, custodian, financial institution, or money transmitter

9. Legal Compliance & Reporting