Privacy Policy

1. Who We Are

CityVibes ("we," "us," "our") operates the website cityvibes.io and related services. We provide a directory of WhatsApp and Telegram group chats for digital nomads, expats, and travelers, along with AI-generated weekly summaries of public group chat activity.

2. What We Collect

We collect the minimum data necessary to operate the service:

Account information: When you sign up, we collect your phone number (for WhatsApp OTP login) or email address, and your chosen display name.

Usage data: We collect anonymous analytics on page views, group link clicks, and feature usage to improve the product. We do not use third-party tracking pixels or sell this data to advertisers.

Group chat messages: Our AI summary pipeline processes messages from group chats where our bot has been added by a group admin. Summaries are generated automatically and do not include personally identifiable information. We do not store raw messages after summaries are generated.

Payment information: Payments are processed by Stripe. We never see or store your full credit card number.

3. How We Use Your Data

We use your data to operate, improve, and personalize the CityVibes service — including generating AI summaries, delivering content, processing payments, and responding to support requests. We do not sell your personal data to third parties. We do not display ads in our products.

4. AI-Generated Summaries

Our summaries are generated by AI (Google Gemini) from group chat messages. The summaries are designed to capture the general topics and vibes of a group without identifying individual users. Names, phone numbers, and personal details are stripped before summary generation. Summaries expire after 7 days and are automatically deleted.

5. Data Storage & Security

Your data is stored on Supabase (hosted on AWS) and Cloudflare Workers. All connections use HTTPS/TLS encryption. We follow industry-standard security practices to protect your information.

6. Third-Party Services

We use the following third-party services to operate CityVibes:

Supabase (database & auth), Cloudflare (hosting & CDN), Vercel (website hosting), Stripe (payments), Google Gemini (AI summaries), OpenAI (text-to-speech), DeepL (translation), WhatsApp Business API (messaging), Telegram Bot API (messaging).

Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.

7. Cookies

We use essential cookies only (session management, login state). We do not use advertising cookies or cross-site tracking cookies.

8. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us at contact@cityvibes.io. If you are in the EU/EEA, you have additional rights under GDPR including data portability and the right to object to processing.

9. Data Retention

Account data is retained while your account is active. AI summaries expire after 7 days. If you delete your account, we remove your personal data within 30 days. Anonymized usage analytics may be retained indefinitely.

10. Children

CityVibes is not intended for users under 18 years of age. We do not knowingly collect data from minors.

11. Changes

We may update this policy from time to time. Material changes will be communicated via our website. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions about this privacy policy? Email us at contact@cityvibes.io.