Privacy Policy

• We collect the minimum needed to run a local marketplace: your account details, listings, messages, and technical logs.
• We do not sell your personal information to third parties.
• With your consent, we use Meta Pixel and Google (GA4 / Ads) to measure the site and, on some platforms, to show you Town Peek ads. You control this at any time via the cookie banner or your account settings.
• You can delete your account and most of your data at any time from your account settings or by writing to us.

• Run the service. Authenticate you, publish your listings, deliver messages, show a personalized feed by city and language.
• Communicate with you. Transactional emails (password reset, confirmation of a subscription), and - only if you enabled them - push, Telegram, or WhatsApp notifications about new messages and matches.
• Keep the marketplace safe. Detect spam, phishing, prohibited listings, account takeovers.
• Improve the product. Aggregate, non-identifying analytics about how features are used.
• Comply with law. Respond to lawful requests, resolve disputes, keep required tax and accounting records.

We do not use your data for behavioral advertising, we do not build profiles about you for third parties, and we do not run cross-site tracking pixels.

We use a small set of well-known vendors (“processors”) to run the platform. Each of them receives only the data they need to perform their function and is bound by their own privacy commitments:

• Vercel - hosting the website and running server code.
• Supabase - database (accounts, listings, messages) and file storage (photos).
• Stripe - payments and subscription management. Card numbers never touch our servers; they are handled directly by Stripe.
• Resend - transactional emails (verification, password reset, new-message alerts).
• Google - optional “Sign in with Google”. We receive your email, name, and profile photo.
• Twilio - SMS delivery for phone verification, when you request it.
• Telegram & WhatsApp (Meta) - notification delivery to the messenger you connected. We send only the message text and a link back into Town Peek.
• OpenAI - automatic translation of your content between Armenian, Russian, and English. The text is sent for translation and is not used to train models.
• Vercel Analytics - anonymous page-view counts (no cookies).
• Google (GA4 / Ads) - website measurement and, if you agree to advertising cookies, conversion tracking for Google Ads. Loaded with Google Consent Mode v2 - nothing is sent until you consent.
• Meta (Facebook / Instagram Pixel) - audience-building and conversion tracking for ads on Facebook and Instagram. Only loaded after you accept advertising cookies.

We may also disclose data when required by a valid legal request (subpoena, court order), when needed to protect the rights or safety of a user or the public, or in connection with a merger, acquisition, or sale of assets - in which case the new owner takes on the same commitments.

We keep cookie usage minimal:

• session - signed session token that keeps you logged in. HTTP-only, lasts 30 days.
• tp_access - records that you redeemed a valid invite code. HTTP-only, lasts 12 months.
• locale and region - remember your preferred language and city.
• tp_consent - records your cookie/analytics/ads choice for 6 months.

If you accept analytics or advertising cookies, we additionally load Google (GA4 / Ads) and Meta Pixel. They set their own first-party cookies (for example _ga, _fbp). You can withdraw consent at any time - the pixels stop firing immediately.

Visitors from the EU/EEA/UK see an opt-in banner: nothing loads until you accept. Visitors from the U.S. (including California) see an opt-out banner: pixels run by default and you can turn them off. We also honor the Global Privacy Control (GPC) signal - if your browser sends it, we treat it as a “no” automatically.

When you enable Web Push in your settings, your browser gives us a subscription endpoint and two encryption keys. We store those only to send you notifications about new messages, matches from your saved searches, or updates from businesses you follow. You can revoke access from your browser settings or by turning the feature off in Town Peek.

When you connect Telegram or WhatsApp, we store the chat identifier that the messenger exposes to bots - nothing else about your account there. We send you the message text and a link back into Town Peek; incoming replies from you are routed to the correct conversation.

Data lifetimes are listed in section 2. In general, we delete or anonymize your account data within 90 days of you closing the account, except for records we are required to retain - for example, tax invoices (7 years), fraud investigation logs (up to 3 years), and evidence of a legal claim (until it is resolved).

Regardless of where you are, you can:

• request a copy of the personal information we hold about you,
• correct information that is inaccurate or incomplete,
• ask us to delete your account and associated data,
• object to specific processing or ask us to restrict it.

California residents (CCPA / CPRA). You have additional rights: the right to know the categories of personal information we collect, the right to delete, the right to correct inaccurate information, and the right to opt out of “sale” or “sharing” of your personal information. Town Peek does not sell your personal information; we also do not share it for cross-context behavioral advertising. You can still exercise the right to know and to delete by writing to support@townpeek.com. We do not discriminate against users who exercise their privacy rights.

European users. Where GDPR applies, our legal basis is (a) performance of a contract for account and marketplace features, (b) legitimate interest for fraud prevention and product improvement, and (c) consent for optional channels (push, Telegram, WhatsApp).

To make any of the requests above, email support@townpeek.com from the address on your account. We respond within 30 days.

Passwords are stored hashed with a modern key-stretching function; they are never returned to you or to us in plain text. Traffic to the site is encrypted with HTTPS. Access to the production database is limited to a small number of maintainers and audit-logged.

No online service can promise perfect security. If we discover a data breach that is likely to affect you, we will notify you and the relevant authorities within the timeframes required by law.

Town Peek is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Town Peek is operated from the United States. If you use the platform from Armenia, the European Union, or elsewhere, your data will be transferred to and stored in the U.S. By using the service you consent to this transfer. Where required, we rely on standard contractual clauses with our vendors.

When we make material changes, we update the “Last updated” date and notify you in the app or by email at least 14 days in advance. Minor clarifications may be published without notice; they will never expand our use of your data retroactively.

Send privacy questions or rights requests to support@townpeek.com. For everything else, our general terms are in the Terms of Service.