Privacy Policy

MyVillage is a hyperlocal community platform operated by Lorven POS (lorvenpos.com). In this policy, “we” and “us” mean Lorven POS, and “MyVillage” means the website, the mobile apps, and the services behind them.

We are the data controller for the information described here. You can reach our privacy team at [email protected].

Almost everything we hold is something you typed in yourself. Here is the full list, by category.

Account. Your name, username, and email address. Your date of birth, which we use once, to check you meet the 18+ minimum. Your phone number if you choose to verify one. How you sign in, which is Google or an emailed magic link.

Profile. Your bio, photo, cover image, website, WhatsApp number, where you are from, your hometown, your resident status, your occupation, and the languages you speak. All of these are optional. Most of them carry their own public or private switch in Settings, and private means private: hidden from every other member, not merely de-emphasised.

Location. The place label you enter, the city and state we derive from it, the search radius you pick, and a geographic point stored so that “within 10 miles of me” can be answered. See the location section below, because this one deserves its own explanation.

Communities. The cultural communities you join, which is how the feed gets filtered to things you actually care about.

What you post. Posts, comments, photos, videos, reels, stories, reviews, business listings, events, groups, jobs, and classified ads, together with who liked and followed what.

Safety records. Reports you file, people you block or mute, and any moderation decisions about your account.

Payments. If you buy a sponsorship or a promoted placement, our payment processor handles the card. We receive a record that the payment happened and what it was for. We never see or store your full card number.

Technical. IP address, browser or device type, and server logs, kept so we can keep the service running and stop abuse. If the app crashes, an error report is sent to our monitoring provider. On mobile, a push notification token if you allow notifications.

MyVillage is hyperlocal, so location is not a side feature. It is the thing that makes the feed yours. Here is exactly how it is handled.

• You give us a place, not a live signal. You type a city or a zip code, or you tap once to use your device location. We turn that into a point and store it. We do not track you in the background, and we do not follow your movements between sessions.
• That point is used to sort and filter: businesses near you, events near you, neighbours inside your chosen radius. Distances shown to other people are computed from it.
• Other members never see your coordinates. They see, at most, the place label you chose, and only if you left that public. Turn the location switch off in Settings and your label, city, and state are hidden from everyone but you.
• Address lookup is done through the United States Census geocoder, with an open-source fallback service. Map tiles come from OpenFreeMap. We send them what you are searching for, not who you are.

MyVillage is for adults. You must be at least 18 years old to hold an account, and we check the date of birth you give at signup. We do not knowingly allow anyone under 18 to register. If we learn that an underage person has an account, we remove it.

Parents can use the Students hub to track camps, clubs, and competitions for their kids. If you add a child there, we store a nickname you choose, an age band, an optional grade level, and interests. That is the whole record.

If you believe a child's information has reached us in any other way, write to [email protected] and we will delete it.

• To run the service: show your feed, your neighbourhood, your groups and events.
• To let people find you and your business, if you chose to be findable.
• To send you the messages you asked for, including sign-in links and notifications.
• To keep the community safe: reviewing reports, enforcing the Community Guidelines, and acting on abuse.
• To take payment for sponsorships and promoted placements.
• To fix what breaks, using error reports and server logs.
• To meet our legal obligations.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of our contract with you, for running the service; legitimate interests, for safety, security, and improving the product; consent, for optional things like push notifications and precise device location; and legal obligation, where the law requires it.

Some fields are collected but structurally cannot be read by another member. This is enforced in the API, not by hiding a button in the interface.

• Your email address.
• Your phone number. Verifying a phone does not publish it.
• Your date of birth, and your age.
• Your sign-in identity and any authentication token.
• Your exact coordinates.
• Whether your account carries a moderation sanction.
• Anything in your Students hub.

Your WhatsApp number is the one contact detail that can be published, and only because you switched it on yourself. It is off by default.

MyVillage is a community, so parts of it are meant to be seen. Your username, display name, photo, and anything you post to a public surface can be viewed by other members, and by anyone on the internet where the page is public. Business listings, public events, and public group pages are indexed by search engines on purpose, because being findable is the point of a directory.

Assume anything you post publicly may be screenshotted, shared, or cached elsewhere. Once it is out, we cannot recall it from other people's devices.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use a small number of service providers who process data only on our instructions.

• Hosting and database for the servers and the data itself.
• Cloudflare for storing photos and videos, and for protecting the site from attack.
• Zoho ZeptoMail for sending sign-in links and notification emails.
• Google, if you choose to sign in with a Google account.
• Stripe for processing payments.
• Sentry for error monitoring when something crashes.
• Expo for delivering push notifications to the mobile apps.
• OpenFreeMap and the US Census geocoder for map tiles and address lookup.

Search runs on our own servers. Your search queries are not sent to a third party.

We will also disclose information when the law requires it, when we must to protect someone from harm, or if the business is ever sold or merged, in which case we will tell you before your data moves. Content involving the sexual exploitation of children is reported to the National Center for Missing and Exploited Children, as United States law requires.

Our servers and our providers operate in the United States and Europe. If you use MyVillage from outside those places, your information is transferred to and processed there. Where a transfer out of the European Economic Area or the United Kingdom is involved, we rely on the European Commission's Standard Contractual Clauses.

• Your account and profile: until you delete the account.
• Your posts and listings: until you delete them, or the account goes. Deleting a single post is immediate.
• Server logs and error reports: a short rolling window, generally no more than 90 days.
• Backups: encrypted, on a rolling schedule of about two weeks, after which the old copy is gone.
• Payment records: as long as tax and accounting law requires, which is typically seven years.
• Moderation records: kept after deletion where we need them to stop a banned person simply signing up again.

Full detail, including what survives account deletion and why, is on the Delete Your Data page.

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] from the email address on your account, or start at Delete Your Data. We answer within 30 days.

If you are in California. Under the CCPA and CPRA you have the right to know what we collect and why, to delete it, to correct it, to limit the use of sensitive information, and to opt out of sale or sharing. We do not sell or share personal information as those laws define it, so there is nothing to opt out of. We will never treat you worse for exercising a right. You may use an authorised agent, and we will verify the request through the email on your account.

If you are in the EEA or the UK. Under the GDPR you may access, rectify, erase, restrict, or object to our processing, and you may ask for your data in a portable format. Where we rely on consent you can withdraw it at any time, which does not affect what we did before. You may also complain to your national data protection authority.

Traffic is encrypted in transit. Sign-in tokens are short-lived and magic links are stored hashed, so a stolen copy of the database cannot be replayed into a session. Access to production data is limited to the people who need it. Uploaded images and videos are scanned before they are shown.

No system is perfectly secure. If a breach ever affects you, we will tell you and the relevant regulator within the time the law allows.

When we change this policy we update the date at the top. If a change materially affects your rights, we will tell you in the app or by email before it takes effect, rather than expecting you to notice a new date.

Privacy questions and requests: [email protected]

Anything else: [email protected]