Privacy Policy

1. What we collect

• Account details: email, name, password (hashed by our auth provider).
• Usage and technical data: IP address, device/browser info, product events needed to run and secure the service.
• Content metadata: project names, layer names, share settings, storage usage.
• Billing data if you subscribe (handled by Stripe; we store subscription status).
• Messages you send via help or feedback forms.

2. Why we use it

To create and manage accounts, host and display your scenes, enforce invites and quotas, send transactional email (invites, support), process payments, improve reliability and security, and meet legal obligations.

3. Processors

We use trusted providers to operate MapShare, including Supabase (auth and database), object storage, Vercel (application hosting), Stripe (payments), Resend (email), and rate-limiting infrastructure where configured. Primary application data is hosted in Australia where our configuration allows; some processors may process data in other regions under their own terms.

4. Sharing

We do not sell personal information. We share it with processors as needed to run the service, when you publish a share or embed link (recipients can see the shared scene), or when required by law. Public share links expose the content you choose to publish — treat them carefully.

5. Retention

We keep account and content data while your account is active and for a reasonable period afterward for backups, dispute resolution, and legal compliance. You may request deletion of your account; residual copies in backups may persist for a limited time.

6. Security

We use industry-standard controls (HTTPS, access controls, row-level security where applicable). No method of transmission or storage is perfectly secure; please use a strong password and protect your share links.

7. Your rights

You may request access to, correction of, or deletion of personal information we hold about you, subject to legal exceptions. Contact hello@mapshare.app. If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

8. Cookies

We use cookies and similar technologies required for authentication and session security. We do not currently run third-party advertising trackers on the marketing site.

9. Changes

We may update this policy; the version date above will change when we do. See also our Terms of Service.