Privacy Policy

If you create a creator account:

• Your email address and password (passwords are stored encrypted by our login provider; we never see them).
• Your age group (18+ or 13–17), and any Founding Creator code and zip code you enter when signing up.
• Your profile: name or business name, bio, category, zip code(s), photos, website and social links, and events you post. We look up the city, state and approximate map location of each zip code.
• Plan and billing status. Card details are collected and stored by Stripe, not by us.

If you browse without an account:

• Anonymous activity counts used for creators' stats — when a profile appears in search results, is viewed, or a link on it is clicked. These records note which profile and when, not who you are.
• Your location, only if you tap “Use my location.” Your browser asks first; we round it to about half a mile, use it for that search, and don't save it.
• Anything you write in a report about a profile.
• Your email and (optionally) zip code if you join our launch waitlist. We use it only to tell you when Cosa Local opens near you, and you can ask us to remove it any time.
• Your email, zip code and the category you searched if you ask to be told when a creator joins near you. We send one email when a match publishes, then the alert ends.

Pages we draft for creators:

• To help local creators get started, we may prepare a private draft page using information a business already shares publicly — such as its name, category, city or neighborhood, zip code, and public website or social links — written in our own words. We never include home addresses or copy photos.
• Drafts are private: they don't appear in search, maps or anywhere public, and aren't indexed by search engines. A draft only goes live if the creator claims it, reviews it, and taps Publish. If you find a draft about your business that you don't want, email cosalocalinfo@gmail.com and we'll delete it.

Automatically: like most websites, our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security and reliability.

Creator profiles are public by design: your name, bio, category, city and state, photos, links and events can be seen by anyone, including people without an account and search engines. Your email address, exact zip-code coordinates, age group, billing details and stats are never shown publicly.

• To run the directory: show profiles, search by location and category, display maps and events.
• To manage your account, plan, Founding Creator trial and payments.
• To send account emails: confirming your email, password resets, and trial reminders (which include your profile's view counts).
• To show Insights members stats about their own profile.
• To keep Cosa Local safe: filtering inappropriate language, reviewing reports, and preventing abuse.

We use a small number of service providers who process data on our behalf:

• Supabase — database, login and photo storage.
• Stripe — payments and billing.
• Vercel — website hosting.
• Resend — sending account and reminder emails.
• OpenStreetMap — map images on the map view are loaded from their servers, which receive your IP address like any website you visit.

We may also share information if required by law, to protect someone's safety, or as part of a merger or sale of Cosa Local (in which case this policy would continue to apply). We don't sell personal information or share it for advertising.

We use only the cookies needed to keep you signed in. We don't use advertising or third-party tracking cookies. Your browser may also remember small preferences locally.

Cosa Local is not for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, email cosalocalinfo@gmail.com and we'll delete it.

Creators aged 13–17 may join with a parent or guardian's permission, and a parent or guardian must complete any purchase. Parents can contact us at any time to review or delete their teen's account.

• Edit your profile, photos, links, locations and events any time from your dashboard.
• Delete your account from the dashboard — this permanently removes your profile, photos, stats and login, and cancels any paid plan.
• Ask us for a copy of your information, or to correct or delete it, by emailing cosalocalinfo@gmail.com. Depending on where you live (for example California), you may have additional rights under local law; we honor those requests too.

We keep your information while your account is open. When you delete your account, your profile, photos, stats and login are deleted right away; records our payment provider must keep for tax and accounting purposes are kept by Stripe as required by law. Profiles hidden for breaking our guidelines are kept so we can review appeals and prevent repeat abuse.

We use encryption in transit, access controls that keep private data private, and reputable providers. No website can be perfectly secure, so please use a strong, unique password and tell us right away at cosalocalinfo@gmail.com if you suspect a problem.

If we make meaningful changes, we'll update the date above and, when it matters, let creators know by email or on their dashboard. See also our Terms of Service.

Cosa Local · Arizona, USA · cosalocalinfo@gmail.com