Privacy Policy

1. Who We Are

CityBrew is operated by Michael Maxwell. This policy explains what personal information we collect, how we use it, and your choices. Questions? Email hello@citybrew.ai.

2. Information We Collect

We collect only what we need to deliver the service:

• Email address — used to deliver your newsletter and authenticate your account
• Onboarding responses — your answers to our preference questions, used to personalize picks
• Delivery preferences — your chosen delivery days and time
• Feedback — ratings and notes you submit, used to improve future picks
• Usage data — standard server logs (IP address, browser type, pages visited) for security and performance

We do not collect payment information. We do not sell your data.

3. How We Use Your Information

• To generate and deliver your personalized weekly newsletter
• To authenticate your account and maintain your session
• To improve our curation model based on your feedback
• To send transactional emails (e.g. magic links, account notices)

We do not use your data for advertising, and we do not share it with third parties except as described in Section 4.

4. Third-Party Services

We use the following sub-processors to operate the service:

• Supabase — database and authentication (data stored in the US)
• Resend — transactional email delivery
• Anthropic — AI model used to generate newsletter content and reader profiles; your onboarding transcript may be sent to Anthropic's API
• Vercel — web hosting and edge infrastructure

Each provider is bound by its own privacy policy and data processing agreements.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain it by law.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email hello@citybrew.ai. You may also unsubscribe from the newsletter at any time via the unsubscribe link in any email we send.

7. Cookies

We use a single session cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

8. Security

We use industry-standard measures including HTTPS, row-level database security, and short-lived authentication tokens. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children

CityBrew is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as the service evolves. We will notify you of material changes via email. The effective date at the top of this page indicates when it was last revised.