Privacy Policy

Last updated: September 11, 2026

OneTownCity ("we", "us", "OneTownCity") operates this local discovery platform (the "Service"), available on the web and as an Android app. This policy explains what information we collect, how we use it, and the choices you have — including how to delete your account and data.

Information We Collect

Account information: when you sign in with Google, we receive your name, email address, and profile photo. We create a OneTownCity profile linked to that identity. If you choose to add a phone number, address, city, state, or pincode to your profile, we store what you provide.

Location information: the Android app requests location permission (precise or approximate) to detect your city and show nearby listings. You can decline this permission and select your city manually instead.

Content you submit: listings (businesses, properties, jobs, events, and other categories), photos and videos in listing galleries, your profile photo, comments, reviews, favorites, and reports you file against content.

Authentication data: a unique identifier from our authentication provider (Supabase, see below) and a session/access token used to keep you signed in. On Android, this token is stored using Android's encrypted storage APIs.

Basic technical data: we record IP address and device/browser information for sign-in events and security logs (for example, to detect repeated failed sign-in attempts), and standard web server logs.

Push notification data: if you turn on browser notifications, we store the subscription endpoint and encryption keys your browser generates for that purpose (via the Web Push standard) so we can deliver notifications to that device. We don't use this to track you across sites — it's used only to send you the notifications you opted into, through your browser's own push service (e.g. Google's for Chrome, Mozilla's for Firefox).

Cookies

We use only strictly necessary cookies — a session cookie that keeps you signed in and a CSRF cookie that protects forms from cross-site attacks. We don't use advertising, analytics, or cross-site tracking cookies.

Emails We Send

We send transactional, service-related emails only — for example, confirming an action you took or notifying you about your listing or account. We don't send marketing or promotional email, and we don't share your email address with anyone for their own marketing purposes.

How We Use Your Information

To operate the directory (show listings, search, and city-based browsing), manage your submissions and favorites, show your reviews and comments alongside listings, send service-related notifications (such as when your listing is approved), moderate content, and keep the platform secure (for example, detecting abusive sign-in attempts).

Authentication & Third-Party Infrastructure

Sign-in is handled by Supabase, our authentication and infrastructure provider — we never see or store your Google password. Supabase also hosts our database and the photos/videos you upload. Supabase acts as an infrastructure provider for OneTownCity; we don't share your personal information with them for their own marketing or advertising purposes.

User-Generated Content

Listings, reviews, comments, and photos you submit as part of using the Service are public and visible to other visitors, by design — that's how the directory works. Your private actions (favorites, notification settings) are visible only to you.

What We Don't Do

We don't sell your personal data to third parties. The OneTownCity Android app contains no analytics, advertising, or crash-reporting SDKs.

Account and Data Deletion

You can permanently delete your account at any time — from My Profile (Danger Zone) on the web, or from the Profile screen in the Android app. Deleting your account:

• Immediately deletes your profile, profile photo, favorites, likes, notifications, saved devices, and sign-in history.
• Deletes your authentication identity with Supabase, so the same Google account cannot be used to silently recreate your deleted account.
• Keeps comments and reviews you posted visible (shown as "Deleted User") so replies and ratings from other users aren't affected — but removes the link to your identity.
• Keeps reports you filed for moderation records, with your identity removed.
• Leaves businesses, properties, jobs, or other listings you posted live and public, no longer linked to your account. Delete them individually from My Listings first if you want them removed too.

This action cannot be undone.

How Long We Keep Information

We keep your account information for as long as your account is active. If you delete your account, we remove your personal data as described above; content that remains part of the public directory (like listings, or comments/reviews shown as "Deleted User") continues to exist but is no longer linked to your identity.

Security

Connections to OneTownCity are encrypted (HTTPS). On Android, your sign-in session is stored using the device's encrypted storage. We don't display passwords, tokens, or private keys anywhere in the app.

Children's Privacy

OneTownCity is intended for a general audience and is not directed at children under 13. If you believe a child has provided us with personal information, please contact us using the details below so we can address it.

Changes to This Policy

We may update this policy from time to time. We'll post any changes on this page and update the "Last updated" date above.

Grievance Officer

In accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may raise a privacy grievance by contacting us at ctaftelaneebusinesses@gmail.com. We will acknowledge and address grievances within the timelines required by law.

Contact Us

Questions about this policy or your data? Contact us at ctaftelaneebusinesses@gmail.com, or use the Contact page.