Legal · Privacy
Privacy Policy
Last updated May 11, 2026
City by Adaptensor (“City,” “we,” “us”) is a no-code website platform for small municipalities operated by Adaptensor, Inc. This policy describes what personal information we collect, why we collect it, who else touches it, and how long we keep it.
We are the data controller for everything submitted to this platform. If you have any question about this policy or want to exercise a privacy right, email privacy@adaptensor.com.
1. Information we collect
Town administrator accounts.When a town representative signs up, we collect name, email address, authentication identifiers (provided by Clerk), the town’s name, state, ZIP code, requested subdomain, and the representative’s role with the town.
Town content. Modules a town configures, page text, event listings, directory entries, uploaded settings, and any media they add.
Resident-submitted data.When a resident reports an issue, submits a permit/form, subscribes for updates, or looks up a water account, we collect what they provide — typically a name, contact details, and the body of their submission. Subscription requires only an email address.
Water billing data. Account numbers and balances uploaded by the town. Payment processing is handled by Stripe; we do not store card numbers.
Operational logs. IP addresses on form submissions for abuse prevention; an audit log of admin actions (who changed what, when); standard web-server access logs from our hosting provider.
2. How we use it
To provide the service, bill town administrators, send transactional and announcement emails the town initiates, process water payments, prevent abuse, and improve the platform. We do not sell personal information and we do not use resident data for advertising.
3. Service providers
We share the minimum data needed with the following sub-processors. Each is contractually bound to confidentiality and to processing data only on our instructions.
| Processor | Purpose | Data handled |
|---|---|---|
| Clerk | Authentication | Email, name, session tokens |
| Stripe | Subscription billing and water payment processing | Card data (Stripe-hosted), billing address |
| Resend | Email delivery | Recipient address, message content |
| Vercel | Application hosting | Web traffic, IP, request logs |
| Neon | Managed PostgreSQL database | All persisted application data |
We disclose data when required by law (subpoena, court order) and will notify the affected party where lawful to do so.
4. Retention
We keep personal information only as long as we need it to provide the service or comply with legal obligations.
- Town administrator accounts — for the life of the account, plus 30 days after deletion to allow recovery.
- Subscriber email lists — until the subscriber unsubscribes, plus 30 days (to suppress accidental re-subscription).
- Form submissions and permit applications — 2 years, after which submitter PII is anonymized while the aggregate record is retained.
- Issue reports — until the town deletes them or until the town account is closed.
- Audit logs — 1 year.
- Water payment records — 7 years (financial records).
5. Your rights
You can ask us to:
- Confirm what personal information we hold about you.
- Correct anything inaccurate.
- Delete your data (subject to retention legal minimums).
- Export your data in a portable format.
- Withdraw consent for email subscriptions at any time.
Email privacy@adaptensor.com with your request. We respond within 30 days. Town subscribers can also use the one-click unsubscribe link in any email update.
California residents have specific rights under the CCPA; residents of the EU/UK have rights under the GDPR. The list above already covers them. We do not sell or share personal information as defined by either statute.
6. Cookies
We use only essential cookies. The single cookie our application sets is a Clerk authentication session cookie, which keeps town administrators signed in. We do not use advertising, cross-site-tracking, or analytics cookies.
7. Security
All connections are encrypted in transit (TLS 1.2+). Sensitive fields (API keys we hold on a town’s behalf) are encrypted at rest with AES-256-GCM. Access to production systems is limited to authorized Adaptensor staff and is audit-logged.
In the event of a personal-data breach we will notify affected accounts and applicable regulators within the timeframe required by law.
8. Children
This service is intended for municipal administrators and adult residents. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal data, contact us and we will delete it.
9. Changes to this policy
We will post material changes here with a new “Last updated” date and, where appropriate, notify account holders by email. Continued use of the service after a change constitutes acceptance.
10. Contact
Adaptensor, Inc.
Privacy inquiries: privacy@adaptensor.com
General contact: hello@adaptensor.com
See also the Terms of Service and our Trust & Security report.