Operational privacy draft
Draft for operational and qualified-review use; not a promise of legal compliance or a final public notice. Town & City Spotlight is a local-business feature from Town & City Marketing. This draft describes the currently known workflow and its unresolved verification points. It will need revision if the workflow, providers, data categories, business identity, or approved policies change.
Information used in the owner workflow
Private workflow information can include an authorized representative’s contact details, sign-in and workspace state, intake answers, interview transcripts, source notes, draft revisions, selected media, approval and quality-assurance records, and security or diagnostic events. Do not submit passwords, payment-card data, recovery codes, medical information, or private customer records through this workflow.
Publicly accessible website material may be collected as a private candidate for review. It is not automatically owner-confirmed or cleared for republication. A public Spotlight is intended to contain only material selected and approved for publication through the applicable owner and quality-assurance steps.
Known service providers and current status
- Cloudflare provides the hosted delivery, private-preview access control, and related request protection used by the application.
- Supabase is the configured identity and private application-persistence service for owner authentication, workspace state, and related private records.
- Airtable is used by existing operational workflows for private business, evidence, and campaign records where configured.
- OpenAI is configured for bounded editorial processing of supplied source text and owner answers, such as proposed questions, supported facts, edits, and draft copy. Its output is not the factual source of record.
- ElevenLabs is a disabled and planned voice/transcript path. It is not represented here as active collection or a live owner-interview service.
A configured model provider has not been independently verified for the planned voice path. No retention period, model/voice binding, or active browser connection is asserted here for that disabled path. Server-to-server editorial processing does not itself require a browser CSP permission.
Consent, funnel measurement, and follow-up
Promotional consent is separate from access to a free Spotlight and is not required to keep one. The workflow may record an authorized representative’s stated contact permission or consent, its scope, and the workflow state needed to avoid sending an inappropriate follow-up. Anonymous page activity may be used only for aggregate funnel or drop-off measurement; it should not be joined to a person through fingerprinting.
Follow-up is a separate operational action, not an automatic promise. If enabled after an owner-approved policy and timing are established, operators should use the last meaningful activity and completed-state readback, record the outreach attempt, and stop on completion, decline, or opt-out. This draft does not establish a follow-up schedule.
Google Sheets reporting projection
Google Sheets, when access and a restricted workbook are verified, is intended only as an operations reporting projection and operator-notes tool. It is not a system of record and must not reserve a category, mark payment paid, approve copy, release a claim, or publish. The projection should minimize data: no private transcript, token, payment-card, or private-record link should be copied into a Sheet. Application stores remain authoritative for identity, bookings, payments, evidence, approvals, and fulfillment.
Public information and correction requests
A published Spotlight may include approved business facts, service area, public website, public business phone, approved address, approved media, and a last-confirmed date. It should not publish payment status, private contacts, private transcript content, internal prompts, private workflow state, or marketing-consent state.
An authorized business representative may request access, correction, removal, or deletion review at admin@towncitymark.com. Authority may need to be checked before action is taken. Retention periods and deletion procedures are not yet verified for the current provider configuration and are not stated as fixed commitments in this draft.
Updates and review
This is an operational draft pending qualified review. It does not replace applicable terms, a final privacy notice, payment disclosures, consent records, or provider documentation. The notice should be updated and reviewed before expanded collection, activation of voice features, or a public release.