1. Who We Are
Cityscape Enterprises LLC (“we,” “us,” or “our”) operates a multi-product software and services portfolio under brands that include Cityscape Digital / MyAgency, Agent Party / Venture Village, Creator Knowledge Bots (Telegram + web memberships), 2AM (nightlife / social), ManCave (private Crews), Clipper / ClipHaus / Content Rewards tooling, FieldOS, POD / digital commerce tools, Helix / Studio music tools, Timewire (household and team task workspaces, including native apps), Younify Me and Younify Social (personal record, voice and likeness, location shares, résumé, groups, chat, and access grants), VisionBlocks (music-video editing), MyRepo (connected repository workspaces and developer tools), LifeMAXX (wellbeing and everyday planning), Stance (civic reference), Adulting Lab (education interest list), and internal operator tools for land-intel, surplus analysis, Gator lending analysis, and trading research and guarded operator trading tools (collectively, the “Services”).
Contact: privacy@myagency.dev. Postal: Cityscape Enterprises LLC, 8565 S Eastern Ave, Ste 150, Las Vegas, NV 89123.
Product-specific notices may also apply (for example 2AM legal pages at 2am.social legal, Timewire at /timewire/privacy, Younify at /younify/privacy, LifeMAXX at /lifemaxx/privacy, and Stance at /stance/privacy). If a product-specific policy conflicts with this master policy for that product, the product-specific policy controls for that product only.
MyRepo processes connected repository metadata, provider events, and authorized workspace content to provide repository workflows. Its vault stores secrets supplied by authorized workspace owners; secret access is scoped, audited, and uses expiring grants. Connect only repositories and credentials you are authorized to share.
2. Information We Collect
Account and identity
- Name, email, and OAuth profile data when you sign in (Google or Sign in with Apple)
- Business profile data (name, website, phone, niche) for audits and CRM
- Operator and admin account roles for staff tools
Commerce and payments
- Payment metadata processed by Stripe (we do not store full card numbers). Stripe Connect may process creator payout identity and bank details for Connect recipients.
- Telegram Stars payment identifiers and membership periods for Creator Knowledge Bots
- Order, subscription, invoice, and refund records
Messaging and communications
- Telegram user IDs, chat IDs, usernames, and message content for Creator Knowledge Bots and operator bots
- SMS/iMessage/email content and delivery metadata for outreach you authorize
- Voice/call recordings and transcripts where recording is enabled (Twilio, Deepgram, LiveKit)
- SMS consent, STOP/HELP opt-out records, and suppression lists
Creator and knowledge content
- Authorized creator content libraries (e.g. public video transcripts, licensed course materials) ingested for retrieval
- Vector embeddings and semantic indexes (e.g. Pinecone namespaces) derived from authorized materials
- Chat logs between members and AI assistants for support, safety, and quality
Blueprint Observatory
For authorized studio operators, we store the operator email, selected screen and variant, design direction, source fingerprints, generation status, candidate metadata, and review records to preserve design history and selected implementation targets. Request and review records are scoped to that operator. Published blueprint images are publicly accessible; do not include private or personal information in images intended for publication. The local screenshot comparison control keeps the selected image in your browser and does not upload it.
2AM nightlife / social
- Profile, photos, preferences, and messages you create
- Age-related data (date of birth and, when enabled, identity verification outcomes via Stripe Identity or equivalent)
- Guest list, booking, and venue-related booking data where you use those features
- Event catalog data we ingest from licensed Ticketmaster and Eventbrite discovery APIs (public listing fields and ticket deep-links; we do not sell tickets ourselves)
- Optional peer-to-peer shop listings you create (title, photos, price, condition) on 2AM marketplace surfaces
ManCave private Crews
- If you create or join a Crew, we store its name, your membership and role, join time, and invitation tokens with expiry and acceptance records. After its creator, only invited people can join a Crew; each Crew is limited to six members.
- A completed-commitment card is shared only when you explicitly approve it. The card records your account identifier, the Crew, completion type, and share time. It does not include journal text, health data, workout details, or financial details.
- Reports and blocks record the involved account identifiers, report category and status, and timestamps so we can enforce member safety. Other Crew members cannot read your block list or reports.
Timewire
- Account email, display name, and workspace membership
- Tasks, notes, comments, day-ledger entries, and household/workspace names you create
- Optional bank and liability balances if you connect Plaid or SimpleFIN (access tokens stay server-side; we do not store your bank password)
- Optional on-device signals (for example HealthKit sleep). Location attached to a synced task or geofence is stored with that task if you use those features
Younify Me and Younify Social
- Voice recordings you upload and provider voice clones derived from them (ElevenLabs and other listed voice providers), stored only after a recorded consent statement. Purpose: let you or a named grantee speak with a voice you authorized. Retention: while the voice row is active. Revoke by deleting the voice or the account; we then delete the provider voice id where the provider supports it.
- Face and likeness references (images, character sheets, Soul ids, LoRAs) with an explicit allowed-use list. Purpose: generate authorized likeness-bound media. Retention: while the likeness row is active. Revoke by deleting the likeness; signed URLs expire in minutes and are not durable public links.
- Precise location shares (latitude/longitude of the latest ping only — not a trail) with a mandatory expiry (default one hour, ceiling 24 hours). Purpose: share where-you-are with a named grant. Retention: until expires_at or you delete the ping; reads ignore expired rows even before purge. Revoke by ending the grant or letting the ping expire.
- Résumé (JSON Resume) and credentials (certificates, licences, degrees, portfolio proofs) in a private documents bucket. Purpose: apply-kit / work identity you control. Default visibility is private. Retention: while the account is active. Revoke by deleting the document, tightening visibility, or deleting the account.
- Social account links (handles you claim, optional pointers at connected posting accounts). Purpose: show how to find you and, when connected, which account can post. Retention: while the link exists. Revoke by unlinking or deleting the account.
- Younify Social groups, group chat, and direct messages, plus availability (busy / free windows you publish). Purpose: the social product. Retention: while the group, channel, or availability window exists. Revoke by leaving, deleting messages you control, or deleting the account.
- Access tokens / grants (younify_grant): a hashed secret, scopes, optional location-read expiry, and the grantee you named. Purpose: the only way anything reads a Me facet. Retention: until the grant lapses or you revoke it. The secret is shown once at mint and is not recoverable — only reissued.
Adulting Lab
- Name, email, and optional learning-focus if you join the Adulting Lab interest list
Clipper, POD, social, and media
- Campaign briefs, licensed source URLs, captions, compliance checks, and payout records for clipping / content-rewards workflows
- Product, mockup, and listing assets for POD / digital commerce; social calendar content and publishing metadata
Prospect and research data
- Business contact and research records for agency prospecting (public and licensed sources, form submissions, CRM notes)
- Land-intel, surplus, and lending-analysis inputs you or operators upload (analysis tools; not automatic fund movement)
Operator trading data
- Connected broker or exchange account balances, positions, orders, fills, and margin or risk information needed to evaluate and reconcile trading activity
- Market signals, strategy settings, risk limits, decision records, and execution logs used by paper trading and authorized live trading tools
Automatically collected
- Usage events, pages/features used, session duration
- Device, browser, approximate location from IP
- Cookies and similar technologies (see Cookies)
- Error and performance telemetry (e.g. Sentry)
3. How We Use Information
- Provide, operate, secure, and improve the Services
- Process payments, memberships, Connect payouts, and refunds
- Generate AI-assisted audits, content, music tools, and creator-bot answers grounded in authorized materials (with AI disclosure on bot surfaces)
- Send transactional messages; send marketing only where permitted and opted-in
- Enforce terms, prevent fraud/abuse, and meet legal obligations
- Control private ManCave Crew access, optional completion sharing, and member safety
- Run operator workflows (CRM, clipper QC, social staging) under access controls
- Evaluate market signals, enforce trading limits, and reconcile authorized orders
4. How We Share Information
In ManCave, an approved completion card is visible only to eligible members of its selected Crew. Reports and blocks are not posted to the Crew; authorized moderators may access reports to handle safety concerns.
We do not sell personal information. We share data with processors as needed:
- Supabase — database, auth, edge functions
- Stripe / Stripe Connect — payments and creator payouts
- Vercel — hosting and edge delivery
- Telegram — bot messaging when you use Telegram bots
- Pinecone — vector search for knowledge bots and internal retrieval
- AI providers (e.g. Anthropic, OpenAI, Google, xAI, Groq) — generation and analysis
- Coinbase — connected exchange account data and authorized order execution; TradingView, LuxAlgo, and Finviz — operator research requests and market signals when those integrations are used
- Twilio, Resend, LiveKit, Deepgram — communications
- Cloudflare R2 / object storage — media assets
- Notion / operator tools — workflow control planes for operators
- Sentry — error monitoring
- Ticketmaster / Eventbrite — licensed event discovery when 2AM shows public nightlife listings
- Resend — transactional and interest-list notification email (including Adulting Lab signups)
- Plaid / SimpleFIN — optional Timewire bank and liability connections you authorize
- ElevenLabs — Younify Me and operator voice cloning (api.elevenlabs.io) when you record a consent statement
- Higgsfield — likeness and video generation (mcp.higgsfield.ai) when you use those studio / Younify likeness flows
- Runway — video generation (api.dev.runwayml.com) when a studio or likeness job is routed there
- Retell — voice agents (api.retellai.com) for outreach and nightlife receptionist flows you enable
- Freelancer — operator bounty / marketplace API (www.freelancer.com/api) for jobs you choose to bid
- Craigslist — licensed search index (sapi.craigslist.org) for operator opportunity discovery
- Greenhouse — public job boards (boards-api.greenhouse.io) for the job-finder
- Firecrawl — page fetch (api.firecrawl.dev) for operator research and surplus/lead intelligence you run
- Everbee — POD research and store APIs (research-open-api.everbee.com, store-open-api.everbee.com)
- GitHub — repository APIs (api.github.com) for operator repo radar, skill sources, and Helix remote canon reads
- RunPod — GPU jobs (api.runpod.io) for studio / music-video generation you start
- HuggingFace — open-weight model weights and identity probes (huggingface.co) for studio video jobs
- ChatCut — clipper / video edit handoff (api.chatcut.io) when you send a project to ChatCut
- PostHog — product analytics (us.i.posthog.com) with autocapture and identified profiles, only after cookie consent
- Whop / Post-for-Me — Clipper / ClipHaus campaign and social publishing when you connect those accounts
- Law enforcement or regulators when required by law
5. Retention
- Account data: while the account is active, then deleted or anonymized on request. Minimal suppression identifiers may be retained to prevent erased Studio data from being recreated by pending jobs. These identifiers are not treated as anonymous data.
- Business audit reports: typically 12 months from generation
- Call recordings: up to 12 months (or configured retention window), then deleted
- Creator bot chats and memberships: while membership is active and a reasonable post-cancellation support window
- Non-engaged prospect research records: subject to automated retention sweeps (default target: 18 months without engagement, unless a deal or legal hold applies)
- Timewire workspaces: while the account is active; in-app deletion follows workspace hand-over rules (shared boards are not destroyed when other members remain)
- Younify Me / Younify Social: voice, likeness, résumé, grants, groups, chat, and DMs while the account is active; location pings until their expiry; revoke a grant or delete the account to stop further reads
- ManCave Crews: invitations stop working after seven days, and you may unshare a completion card. Leaving a Crew or deleting your account removes your cards and membership. A Crew with other members may continue under a new owner; a moderation report made by someone else may remain with your account identifier removed.
- Adulting Lab interest-list records: until you unsubscribe or request deletion
- Financial and tax records: as required by law
Request deletion anytime at privacy@myagency.dev or via in-product account deletion where available.
6. Security
We use TLS in transit, OAuth where applicable, service-role isolation for sensitive tables, and role-based admin gates. No method of transmission or storage is 100% secure.
7. Cookies
- Essential — authentication and session
- Analytics — PostHog (autocapture and identified-only person profiles) only after cookie consent. Rejecting cookies opts PostHog out; we do not load the SDK until consent is accepted.
8. International Transfers
Primary processing is in the United States. International transfers rely on appropriate safeguards such as Standard Contractual Clauses where required.
9. Your Rights
Depending on your jurisdiction you may request access, correction, deletion, restriction, portability, or objection. Contact privacy@myagency.dev. We will respond within applicable legal timelines.
10. California (CCPA/CPRA)
California residents may request to know, delete, and correct personal information, and to opt out of sale or sharing. We do not sell personal information. Submit requests to privacy@myagency.dev.
11. Children
Services are not directed to children under 13. 2AM and other adult social features require a minimum age of 18 (and may require additional venue/ID checks). Contact us to delete any data we may have collected from a child.
12. AI and automated systems
We use AI models to generate analysis, content, and conversational answers. Creator bots are AI assistants trained or grounded only on authorized materials and are not the human creator. Outputs can be wrong; verify before relying on them for legal, medical, or financial decisions.
13. Changes
We may update this policy by posting a new version with a revised “Last updated” date. Material changes will be highlighted where required.
14. Contact
Cityscape Enterprises LLC
8565 S Eastern Ave, Ste 150
Las Vegas, NV 89123
Email: privacy@myagency.dev