Your data,
clearly explained.
Who we are
search.city is an urban discovery platform operated by PayRoad Inc., a Delaware C-Corporation. We help people find local businesses, restaurants, cafés, and services through conversational AI agents including Claude (Anthropic) and ChatGPT (OpenAI).
Our registered address is in the United States. For questions about this policy, contact us at privacy@search.city.
What we collect
search.city is designed with minimal data collection. We distinguish between two types of users: end users (people searching for places) and merchants (businesses listed on our platform).
| Data type | Source | Why we collect it | Retention |
|---|---|---|---|
| GPS location token | User-initiated, via browser | To find nearby businesses. Converted to a temporary token — raw coordinates are not stored. | 30 minutes |
| Search queries | Conversation with AI agent | To return relevant results. Used in aggregate for platform improvement. | 90 days (anonymized) |
| Merchant business info | Merchant self-enrollment | To display accurate listings: name, address, hours, menu, photos. | While account is active |
| API request logs | Server infrastructure | Security, debugging, and abuse prevention. | 30 days |
We do not collect names, email addresses, phone numbers, or any personally identifiable information from end users performing searches. No account or registration is required to use search.city through an AI agent.
How we use your data
We use the data we collect solely to operate and improve the search.city platform:
Search results. Location tokens and search queries are used in real time to return relevant local business results. They are not linked to any user identity.
Platform analytics. Anonymized, aggregated search patterns help us understand which areas and business types are most in demand, which informs our merchant outreach and product roadmap.
Merchant listings. Business information provided by enrolled merchants is displayed to users searching for places in their area.
Third parties
We do not sell your data to third parties. We do not use your data for advertising. We work with the following service providers to operate the platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Amazon Web Services | Infrastructure (Lambda, API Gateway, DynamoDB) | Encrypted request data |
| Google Places API | Business data for non-enrolled locations | Search coordinates (anonymized) |
| Anthropic (Claude) | AI agent integration via MCP | Tool call parameters (no PII) |
| OpenAI (ChatGPT) | AI agent integration via MCP | Tool call parameters (no PII) |
| Stripe | Payment processing (merchants with ordering enabled) | Transaction data per Stripe's privacy policy |
Location data
When you choose to share your location through a search.city link, your browser sends your GPS coordinates directly to our server over an encrypted HTTPS connection. We immediately convert these coordinates into an opaque session token and do not store the raw coordinates. The token expires after 30 minutes.
Location sharing is always voluntary and user-initiated. The AI agent will provide a link; you choose whether to open it and share your location.
Non-enrolled business listings
search.city may display information about businesses that have not formally enrolled in our platform. This information is sourced from publicly available data providers such as Google Places and OpenStreetMap. These listings are clearly marked as unverified and may not reflect current hours, menus, or availability.
If you own a business and wish to update or remove your listing, contact us at merchants@search.city.
Your rights
Because we do not collect personally identifiable information from end users, most traditional data rights (access, correction, deletion) apply primarily to enrolled merchants. Merchants may request deletion of their account and associated data at any time.
If you are a California resident, you have additional rights under the CCPA. We do not sell personal information as defined by the CCPA.
If you are in the European Economic Area, we process data under the lawful basis of legitimate interest for anonymized analytics, and contractual necessity for merchant accounts.
Security
All data transmitted to and from search.city is encrypted via HTTPS/TLS. Our infrastructure runs on AWS with access controls, encrypted storage, and automated log retention policies. We conduct periodic security reviews and follow AWS security best practices.
Children
search.city is not directed at children under 13. We do not knowingly collect any information from children. If you believe a child has provided us with information, contact us immediately and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to enrolled merchants via email. Continued use of search.city after changes constitutes acceptance of the updated policy.
Contact
For any privacy-related questions, requests, or concerns:
search.city — Privacy
Operated by PayRoad Inc.
Email: privacy@search.city
Merchant inquiries: merchants@search.city
Website: https://search.city