Last updated: 04 November 2025

This Privacy & Data Protection Policy (“Policy”) explains how Cityweft (“Cityweft”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when individuals or organizations (“Users”) access Cityweft’s API and related integrations (“Services”). Cityweft is committed to complying with applicable privacy, security, and data protection laws, including the EU General Data Protection Regulation (“GDPR”).

By using the Services, you agree to the practices described in this Policy.

1. Data Controller

Cityweft OÜ

Tallinn, Estonia

📧 [email protected]

Cityweft has not appointed a Data Protection Officer but can be contacted at the above email for all privacy-related inquiries.

2. Scope of This Policy

This Policy applies exclusively to:

• The Cityweft API
• API integrations into third-party platforms
• Any related backend systems or services used to deliver API functionality

This Policy does not apply to client websites, third-party platforms, or environments where Cityweft’s API is integrated. Those parties remain responsible for their own privacy practices.

3. Data We Collect

Cityweft collects only the minimum data necessary to operate and secure the API. We do not store account profiles, login details, cookies, marketing pixels, or behavioral trackers.

We may collect the following categories of data: