Privacy Policy

Last updated: October 26, 2026

This policy explains what Townmore collects, why, who can see it, and the choices you have. "Townmore", "we" and "us" mean Townmore Inc. It covers www.townmore.com, its subdomains (account, entity) and the Townmore mobile app.

1. What we collect

Your account

When you sign up: your name, email address and password (stored only as a one-way hash). We email you a link to activate the account.
What you choose to add to your profile: display name, photo, gender, birthday, languages, profession, website, address, phone and cell numbers, and messaging handles (WhatsApp, WeChat, Telegram, Instagram, Facebook, X).
Settings such as your time zone and date and currency formats.
When you last signed in.

Google sign-in

If you sign in with Google, Google sends us your Google account ID, email address, first and last name, profile photo link, and whether Google has verified your email. We use these to create or find your account. We never see your Google password.

Businesses and organizations (entities)

If you create or join an entity, we store its name, contact details, address and its members and their roles.

Listings

What you post: titles, descriptions, photos, prices, categories, and the location you enter (address, city, ZIP code and map coordinates). You can also choose per listing which contact methods to show.

Offers and applications

Offers: the amount, quantity, your messages, each revision, and the offer's history.
Applications: your message, the answers you give to the lister's questions, the contact details you choose to share with the lister (for example phone or email), and a resume if you attach one.
Resumes: what you write in them. That includes education, work history, skills, hobbies and references. References are other people's details, such as name, relationship, phone, email and address; please add them only with their permission.
Ratings and comments you leave after a completed transaction.

Messages and chat

Messages you send on an offer or application.
Chat messages, with the time and conversation they belong to. For each conversation we also keep a short preview of the last message and unread counts.
We do not store the IP address of chat messages.

Places and location

Places you save (address, city, coordinates and a search radius), and the area you choose to browse.
We do not look up your location from your IP address.
If you're not signed in and use "Use my current location", we use your device's position once to find the nearest town or ZIP code, and keep only that place for your visit to show nearby listings and ads. We don't store the coordinates.

When an ad is shown or clicked, we record the ad, the time, and your account if you are signed in. Each ad counts at most 3 impressions and 3 clicks per person.
Advertisers can target ads by age range, gender, language and place, using what is in your profile — or, if you're not signed in, the place you chose for your visit and your browser's language setting.
Advertisers see totals, not who saw or clicked their ads.

Points

Your points balance and its history: points earned (for example the daily sign-in bonus), bought, sent or received between members, and spent on ads.

Payments

When you buy points, the payment is handled by Stripe or PayPal.
We keep the order: amount, currency, provider, provider reference, receipt link, and the IP address used. We also keep your Stripe customer reference.
We never receive or store your full card number.

Two-step verification (2FA)

If you turn it on, we store your authenticator secret encrypted, and your recovery codes only as one-way hashes.
We also keep "trusted device" records, a log of 2FA events, and any account recovery requests. Each of these records the IP address and browser or app (user agent) involved.

Devices

We do not collect push-notification tokens or device identifiers.
The app keeps a sign-in session, and a trusted-device token if you choose "trust this device" in 2FA.

Cookies and similar storage

We use only cookies needed to run the site:

Cookie	Purpose	Lasts
Session cookie (TMSESSID), shared by the website and the app	Keeps you signed in while you browse	Until you close the browser; the server ends it after about 24 minutes without activity
tm_remember	"Remember me": signs you back in. We store only a hash of it, with the IP address and browser.	30 days
tm_tfa_trust	Skips the 2FA code on a device you trusted	30 days
tm_ad_leave	Remembers sites you chose not to be warned about when leaving through an ad	7 days

Your browser also keeps a few display preferences in local storage, such as list or grid view.
We do not use analytics, advertising or tracking cookies.

Other technical data

Our web servers keep standard access logs: IP address, page requested, time and browser. Password-reset requests record the IP address.

We count how many times each listing is viewed per day — totals only, not who viewed it — to show popular listings. A listing's owner's own views are not counted, and the daily totals are deleted after 90 days.

Ads: when an ad is shown or clicked we count it for the advertiser's billing — against your account if you're signed in, otherwise against a code that changes every day and can't be traced back to your browser or IP address. We don't store your IP address for this.

2. Why we use it

To run your account and the services you use: posting listings, making offers, applying, chat, points and ads.
To show your listings and profile to other members, and to share contact details only where you chose to share them.
To send you emails: notices about your offers, applications and messages, which you can turn off in your notification settings; and emails about your account and its security (activation, password reset, two-step verification, account recovery), which are always sent.
To keep Townmore safe: preventing fraud and abuse, enforcing our Terms, and investigating reports.
To process payments and keep the records the law requires.
To show ads, including ads targeted by the profile details advertisers can choose.

3. Who sees what

Everyone: published listings, and the public parts of your profile and entity pages.
Listing owners see the applications they receive: your message, your answers to their questions, the contact details you chose to share, and the resume you attached. For an entity's listing, members with permission to view applications see the same.
The other party to an offer or application sees the messages, the offer amounts, and the ratings once they are revealed. A rating is revealed when both sides have rated, or 14 days after completion.
Townmore staff:
- Authorized staff may read chat conversations for safety and moderation, for example to handle a report or investigate abuse.
- Every such read is logged, with the staff member, time and IP address, and the log can't be edited.
- Staff can hide messages, close conversations, and mute or ban an account from chat. You are told when this happens.
Service providers (section 4), only as needed to provide their service.
Authorities, when the law requires it or to protect people from harm.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

4. Third parties

Google: sign-in with Google, and maps on listing and profile pages. Google Maps loads from Google, which receives your IP address.
Stripe and PayPal: payments for points. They receive your payment details and the name and email on your account.
Email: we send email from our own mail server.
Content delivery networks: for scripts and fonts (cdnjs, jsDelivr, unpkg, jQuery, Google Fonts), which see your IP address when your browser loads them.
Firebase (Google): used for Google sign-in in our app.

5. How long we keep it

Your account and content: kept until you delete them or ask us to.
When you delete your account: ask in Settings → Security ("Request account deletion"), in the app, or by email to support@townmore.com. In the app, your account is closed at once. We delete or anonymize your personal information within 30 days and email you when it is done. We keep what we must for legal, tax and payment records, and for unresolved safety issues.
Application answers, shared contact details and attached resumes: for applicants who weren't accepted, we remove your answers, the contact details you shared and the link to your resume 12 months after the listing ends. Your resume itself stays yours. We keep the application's status, your message and any ratings.
"Remember me" tokens: expire after 30 days.
Trusted-device records: expire, or end when you revoke them.
Server access logs: kept for 12 months, then deleted.
Chat messages: kept until the conversation or your account is deleted.
Payment records: kept as long as the law requires.

6. Security

Every page is served over HTTPS, and our cookies are sent only over HTTPS. The cookies that keep you signed in (session, "remember me", trusted device) can't be read by scripts on the page.
Passwords are stored only as strong one-way hashes.
Password-reset links and "remember me" tokens are stored only as hashes.
You can protect your account with two-step verification. Your authenticator secret is stored encrypted, and recovery codes are stored hashed.
Encryption keys and other secrets are kept outside the website's files.
No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

7. Your rights and choices

Access and correction: you can see and change most of your information in your account settings.
Deletion and copies: to delete your account, use "Request account deletion" in Settings → Security, or email support@townmore.com. To get a copy of your data or ask any privacy question, email support@townmore.com. We will verify your request and complete it within 30 days.
Choices: you decide what goes on your profile, which contact details you share with each application, and whether to attach a resume.
Notifications: you can manage notification emails in your settings.

California residents (CCPA/CPRA)

Your rights:
- to know what personal information we collect, use and disclose;
- to delete it;
- to correct it;
- to opt out of its sale or sharing;
- to limit the use of sensitive personal information;
- not to be treated differently for using these rights.
Sale and sharing: we do not sell or share personal information as the CCPA defines those terms.
Sensitive information: we use it only to provide the service. That includes your account sign-in, any payment details you give our payment providers, and what you choose to put in applications.
What we collected in the last 12 months:
- identifiers (name, email, account ID, IP address);
- customer records (contact details, address);
- characteristics you add (gender, birthday);
- commercial information (offers, points, payments);
- internet activity (ad impressions and clicks, access logs);
- approximate location (places you save, or the place you choose for a visit);
- professional and education information (resumes, applications);
- inferences: none.
Sources and uses: the sources and purposes are in sections 1 and 2, and the recipients in sections 3 and 4.
Making a request: email support@townmore.com. An authorized agent can make one for you with your written permission.

8. Children

You must be 18 or older to use Townmore. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email support@townmore.com and we will delete it. Signing up asks you to confirm you are 18 or older.

9. Changes to this policy

If we change this policy, we will post the new version here with a new "last updated" date.
If a change is significant, we will tell you by email or on the site before it applies.

10. Contact

Email: support@townmore.com