Privacy Policy
Effective July 3, 2026
What we collect
Account details you give us (name, email, password hash — passwords are hashed with argon2id and never stored in plain text). Workspace content you create (projects, imported data, exhibits, branding, leads submitted to your share pages). Billing status from Stripe — card numbers never touch our servers. Basic operational logs (timestamps, request metadata) to keep the service running.
What we don't do
We don't sell your data. We don't run third-party advertising trackers. Share-page viewers aren't profiled — brokers see view counts and, when a viewer chooses to submit one, a contact request.
Processors we rely on
MongoDB Atlas (data hosting), Stripe (payments), BuiltWithHeart (transactional email), AWS (infrastructure), and Google (optional Google sign-in, and the web fonts our pages load — loading a page shares your IP address with the font service, as with any web asset). Address searches are processed by our own self-hosted geocoder built on OpenStreetMap data; when you use the optional fallback search, the query goes to Mapbox but results are never stored.
Your choices
Export your data anytime in open formats (GeoJSON, CSV, KML). Delete your account from the account page — the deletion cascades through projects, exhibits, shares, leads, and exports. Email us to ask what we hold about you or to request correction.
Share pages and leads
When you view a share page, the workspace that published it sees an anonymous view count. If you submit a "request details" form, the name, email, and message you enter are stored for that workspace and emailed to its owner — that's the feature working as designed.
Retention and security
Workspace data is retained while the account exists. Activity logs expire after 90 days. Data is encrypted in transit; access is restricted to what operating the service requires.
Contact and changes
Questions or requests: support@mapvane.com. Material changes to this policy are announced to account owners by email before they take effect.