Privacy Policy This page explains what we collect, why, who receives it, and what you can ask us to do about it. 1. What we collect At registration: email address, password (stored only as a hash, so we cannot read it), country, phone number and preferred language. When you book: your name, phone, email and whatever note you write. As you browse: the country and city inferred from your IP address, and the places you have viewed. 2. Why we collect it To deliver what you asked for (getting your booking request into the merchant hands), to keep accounts secure and block automated abuse, and to show the right city, language and currency for where you are. 3. Your location By default we infer your location from your IP address, to city level, not to exact coordinates. If you press the locate button, your browser asks for separate permission. Declining does not affect anything else. 4. Who receives your data The merchant you book with receives your name, phone, email and note, because they have to be able to reach you. Payment providers (ECPay, PayPal) handle merchant listing fees. Email is sent through Resend. The site and its databases run on Cloudflare. We do not sell personal data and we do not run cross-site advertising trackers. 5. Automatic translation When you and a merchant write in different languages, the system translates the message with Cloudflare Workers AI and includes the original text alongside it. The translation exists to deliver that one message; the content is not used to train models. 6. Speech The voice that reads out addresses and place names is synthesised on your own device. The text is never sent to our servers and nothing is recorded. 7. How long we keep it Account data is kept until you delete your account. Booking records are kept for two years as evidence in case of a dispute. Server access logs are kept for 30 days. 8. Your rights You can ask to see, correct, delete or receive a copy of your data, and you can withdraw consent. Users in the EU and UK have the rights granted by the GDPR; users in Taiwan are covered by the Personal Data Protection Act. Write to legal@citymobee.com and we will reply within 30 days. 9. Children This site is not for anyone under 13, and we do not knowingly collect data from children. 10. International transfers The site runs on servers around the world, so your data may be processed outside the country you are in. This policy applies wherever it is processed. 11. Security Everything travels over HTTPS, passwords are stored as hashes, and the merchant console and member area authenticate separately. 12. Changes and contact We update the date on this page whenever the policy changes. Questions go to legal@citymobee.com.