This is a template provided for convenience and must be reviewed by qualified counsel before use.
This Privacy Policy explains how MapDove, Inc., [address] (“MapDove”, “we”) handles personal information when you visit our website, sign up for or use the MapDove application and API (the “Services”), or otherwise interact with us.
1. The short version
- MapDove’s analytics contain no personal data. The foot-traffic, demographic and place data in the hosted product is a synthetic demo dataset modeled from neighborhood-level parameters. It is not collected from devices, location panels, cards or people.
- The personal information we process is mostly account information about our customers’ users — names, work emails, sign-in and security events — and messages you send us.
- We do not sell personal information, do not use it for cross-context behavioral advertising, and do not use tracking cookies on our marketing site.
2. Roles
- For website visitors, prospective customers, and account administration (sign-up, billing, support, security), MapDove is the controller (or “business”).
- For Customer Content that customers upload into the Services — for example project notes or, on Enterprise plans, customer-supplied data feeds — MapDove acts as a processor (or “service provider”) on the customer’s behalf under our Data Processing Addendum. Questions about that data should be directed to the relevant customer.
3. Information we collect
Information you provide
| Category | Examples | Source |
|---|---|---|
| Account and profile | name, work email, company, password (stored only as a hash), role, language, theme and default-city preferences | you, or your organization’s admin when they add you |
| Security | two-factor authentication secret, sign-in events | you |
| Waitlist and contact | email, name, company, message, language, the page you came from | forms on our website |
| Billing | billing contact, plan, invoices; payment card details are collected directly by our payment processor and not stored by us | you |
| Support and communications | emails and messages you send us | you |
Information collected automatically
| Category | Examples |
|---|---|
| Usage records | API calls, analyses and exports per organization per month; which features are used; projects, favorites and alerts you create |
| Audit log | security-relevant actions such as sign-ins, failed sign-ins, API key creation and revocation, plan changes, member changes, exports — with timestamp, acting user and IP address |
| Technical data | IP address, browser user agent, request logs and error reports |
| Session cookie | an essential ms_session cookie in the app; see the Cookie Policy |
| Local preferences | on the marketing site, your theme and language choice in your browser’s local storage (not sent to us) |
We do not collect precise geolocation from your device.
4. How we use information
| Purpose | Legal basis (where GDPR-type laws apply) |
|---|---|
| Create and operate accounts, authenticate users, provide the Services | performance of contract |
| Enforce plan limits, measure usage, bill and collect payment | performance of contract; legitimate interests |
| Secure the Services, detect abuse and fraud, maintain audit logs | legitimate interests; legal obligation |
| Provide support and respond to inquiries | performance of contract; legitimate interests |
| Send service and security notices | performance of contract |
| Send product updates and newsletters | consent or legitimate interests; you can opt out at any time |
| Improve the Services using aggregated, de-identified usage metrics | legitimate interests |
| Comply with law and enforce our terms | legal obligation; legitimate interests |
We do not use personal information for automated decisions that produce legal or similarly significant effects on you.
5. How we share information
We share personal information only as follows:
- Service providers (sub-processors) that help us run the Services, in these categories: cloud hosting and infrastructure, transactional email delivery, payment processing, and error tracking and monitoring. They may use the information only to provide services to us. See the Data Processing Addendum.
- Your organization. Owners and admins of your workspace can see members’ names, emails, roles, last sign-in, and the organization’s audit log.
- Legal and safety. When required by law or legal process, or to protect the rights, property or safety of MapDove, our customers or others.
- Business transfers. In connection with a merger, acquisition or sale of assets, subject to this Policy.
- With your direction or consent.
We do not sell or rent personal information, and we do not “share” it for cross-context behavioral advertising.
6. International transfers
We may process information in countries other than your own, including [hosting region]. Where required, we rely on appropriate safeguards such as standard contractual clauses for transfers of personal data.
7. Retention
| Data | Retention |
|---|---|
| Account and profile | for the life of the account, then deleted within 30 days of a deletion request or account closure, unless needed for legal reasons |
| Sessions | until logout or expiry; other sessions are invalidated when you change your password |
| Audit logs | [12–24] months |
| Usage counters | for the life of the organization plus the period needed for billing and tax records |
| Waitlist entries | until you ask us to remove them or [24] months of inactivity |
| Billing records | as required by tax and accounting law |
| Server and error logs | [30–90] days |
8. Security
We protect information with measures including encryption in transit, hashing of passwords and API keys, httpOnly and SameSite session cookies, role-based access within organizations, optional two-factor authentication for all users, audit logging, and restricted, logged staff access. No system is perfectly secure; please report suspected vulnerabilities to privacy@mapdove.com.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, to withdraw consent, and to not be discriminated against for exercising your rights. Residents of certain U.S. states may also have rights to know categories of information collected and to opt out of sale or sharing (we do neither).
To exercise a right, email privacy@mapdove.com. We will verify your request (for example by confirming control of your account email) and respond within the time required by law. You may use an authorized agent where permitted. If your data is held on behalf of a customer organization, we may refer you to that organization. You also have the right to complain to your local data protection authority.
You can update most profile information yourself under Settings → Profile, and unsubscribe from marketing emails using the link in any message.
10. Children
The Services are for business use and are not directed to children under 16. We do not knowingly collect information from children.
11. Re-identification is prohibited
Because MapDove is a location-intelligence product, we want to be explicit: our datasets are synthetic or aggregated, and our Acceptable Use Policy forbids anyone from using the Services to identify, track or profile individuals.
12. Changes
We will post updates to this Policy here and change the “updated” date. For material changes we will notify account owners by email or in the Services before they take effect.
13. Contact
MapDove, Inc. · [address] · privacy@mapdove.com
Data protection representative / officer (if applicable): [name, address].