LEGAL — PRIVACY POLICY

PRIVACY POLICY

LAST UPDATED: MAY 2026 — CITIESUNLOCKED.COM

1. Introduction

CitiesUnlocked ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using the Platform, you consent to the practices described here.

2. Information We Collect

We collect the following types of information: • Account Data: Name, email address, and password when you register. • Membership Data: Billing information, plan type, and membership status per city node. • Usage Data: Pages visited, features accessed, session duration, and in-app interactions. • Device & Technical Data: IP address, browser type, operating system, and referring URLs. • Communications: Any messages you send us via contact forms or email. We do not collect sensitive personal data (e.g., health data, government IDs) and do not sell your data to third parties.

3. How We Use Your Information

We use your data to: • Create and manage your account and memberships • Process payments and issue receipts • Deliver city intel and member-exclusive content • Send transactional emails (e.g., membership confirmation, renewal notices) • Improve the Platform through usage analytics • Respond to customer support inquiries • Detect fraud and enforce these Terms We do not use your data for profiling or automated decision-making that materially affects you.

4. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics cookies (e.g., anonymized usage tracking) to improve the Platform. You can disable cookies in your browser settings, though some features may not function correctly without them. We do not use advertising or third-party tracking cookies.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with: • Payment processors (e.g., Stripe) solely to complete transactions • Infrastructure and hosting providers under confidentiality obligations • Law enforcement or regulatory bodies when required by law City partners (Operatives) do not receive your personal data. They only see anonymized membership counts for their city node.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it (e.g., billing records for tax compliance, typically 5–7 years). Anonymized usage data may be retained indefinitely for analytics.

7. Your Rights

Depending on your jurisdiction, you may have the right to: • Access a copy of the personal data we hold about you • Request correction of inaccurate data • Request deletion of your data ("right to be forgotten") • Object to or restrict certain processing activities • Data portability (receive your data in a machine-readable format) • Withdraw consent at any time where processing is based on consent To exercise any of these rights, contact us at: contact@citiesunlocked.com. We will respond within 30 days.

8. Security

We implement industry-standard technical and organizational security measures including encrypted data transmission (TLS/HTTPS), hashed password storage, and access controls. However, no system is completely secure, and we cannot guarantee absolute security of your data.

9. Children's Privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has registered, we will promptly delete their account and associated data.

10. International Transfers

Your data may be processed in countries outside your own, including Mexico and the United States, where our infrastructure providers operate. By using the Platform, you consent to such transfers. We ensure that any cross-border transfers are covered by appropriate safeguards.

11. Third-Party Links

The Platform may contain links to third-party websites (e.g., venue websites, partner resources). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice on the Platform. Continued use after the effective date constitutes acceptance.

13. Contact & Data Controller

CitiesUnlocked is the data controller for personal information collected through the Platform. Email: contact@citiesunlocked.com Website: citiesunlocked.com For data protection inquiries or to exercise your rights, please contact us at the email above.

CitiesUnlocked

A private cultural access club for travelers who want more than tourism.

© 2026 CitiesUnlocked — The city belongs to those who unlock it.