Privacy Policy

Account information. When you create an account, we collect your email address and password.

Profile information. You may add a username, first and last name, a profile photo, and a short “about me” description.

Network activity. We collect the networks you join or launch, the posts and replies you write, the events you host or RSVP to, and your notification preferences.

Messages. If you message another user through the Service, we store the content of that message.

Suggested-network submissions. If you suggest a network that doesn't exist yet, we collect the origin and location text you submit.

Contact form. If you contact us, we collect your name, email address, and message.

Usage information. We collect standard technical information necessary to operate the Service, such as your IP address, browser type, and the pages you visit, primarily through server logs.

We use the information we collect to: operate and maintain the Service; connect you with networks, events, and other members; deliver notifications you've opted into; communicate with you about your account; detect and prevent fraud, abuse, and violations of our Terms and Conditions; and comply with legal obligations. We do not sell your personal information, and we do not currently use advertising or analytics services that track you across other websites.

We share information with the following service providers, each of which processes information on our behalf and only for the purposes described in this policy:

Supabase, Inc. — hosts our database, authentication, and file storage, including profile data, posts, messages, and event records.

Resend — delivers transactional emails, such as account confirmation and password reset emails, and messages sent through our contact form.

Vercel Inc. — hosts and serves the Service.

We may also share information if required by law, to protect the rights, property, or safety of CultureMesh, our users, or the public, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor the commitments in this policy.

Other members of a network see the profile information, posts, and replies you choose to make visible within that network, and the content of messages you exchange with them directly. If an embassy or partner organization operates a white-label embed of CultureMesh, and you launch or join a network through it, the same information described in this policy is collected — the partner does not receive any additional access to your account.

We use only the cookies necessary to keep you signed in and to operate the Service securely. We do not currently use advertising or third-party tracking cookies.

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

You can access and update most of your profile information directly from your account settings. You may request access to, correction of, or deletion of your personal information at any time by contacting us. We will respond to verified requests within a reasonable time.

Depending on where you live, you may have additional rights over your personal information under applicable law. You can exercise any of these rights by contacting us.

The Service is not directed to, and is not available to, anyone under 13. We do not knowingly collect information from anyone under 13. If we learn that we have collected information from someone under 13, we will delete it.

We use reasonable technical and organizational measures to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means before the changes take effect.