Privacy Policy

MapsData is a product of Hiive Arts ("we", "us"). This policy explains what information we handle when you use mapsdata.ai and the MapsData service, and the choices you have. Questions or requests can always go to admin@mapsdata.ai.

Who is responsible for what

Two kinds of data flow through MapsData, with different roles:

• Your account data. For the information you give us (account, billing, usage), we are the data controller.
• Business data in lead lists. We compile publicly available business information and act as controller of that compiled dataset. When you download a lead list, you become an independent controller of your copy, and you are responsible for using it lawfully (see our Terms of Service).

Information we collect about you

• Account details. Your email address, and if you sign in with Google, the name and profile information Google shares with us. We use this to operate your account and to send service emails such as sign-in codes and job notifications.
• Billing. Payments are processed by Stripe. We never see or store your card number; we keep records of your plan, invoices, and usage against your plan allowance.
• Usage. The searches you run, the lead lists you generate, and technical logs (such as IP addresses and error reports) needed to run and secure the service.
• Messages. Feedback and support messages you send us through the app or by email.

Cookies

We use first-party cookies only, and no advertising or cross-site tracking cookies:

• Session and sign-in cookies that keep you signed in and secure the login flow.
• Attribution cookies. If you arrive through a campaign or partner link, we set a cookie (30 days for campaigns, 60 days for partner referrals) so we know which link brought you here if you later sign up. It contains the referral source, nothing about your browsing elsewhere.

If we measure site traffic, we use cookieless analytics that do not identify individual visitors.

Business data in lead lists

MapsData compiles business information from publicly available sources, including Google Maps listings and the public websites of businesses: business names, categories, addresses, phone numbers, ratings, websites, and contact email addresses that businesses publish. Where this information identifies a person (for example a sole trader whose business email is their name), we process it under our legitimate interest in providing business-to-business contact data, and we collect only what the business has itself made public.

If you represent a business and would like your details removed, email admin@mapsdata.ai. We will remove them from our data and add them to a suppression list so they stay out of future lead lists we compile.

Where your data lives

Our primary database and authentication run in the European Union (Frankfurt, Germany), and lead processing runs on servers in the EU. Exports you download are stored with Cloudflare. Our web application is served by Vercel. Some providers below process data in the United States; where they do, transfers are covered by their standard contractual safeguards.

Service providers

We share data only with the providers needed to run MapsData: Supabase (authentication and database), Stripe (payments), Vercel (hosting), Hetzner (processing servers), Cloudflare (file storage and delivery), Resend (transactional email), Google (optional sign-in), RapidAPI (business listing searches; receives search queries, not your account data), and Anthropic (an AI service that expands search terms; it receives search queries, not your account data). If you enable email verification, the email addresses in the list you are verifying are sent to MillionVerifier using the API key you provide. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Retention

We keep account information while your account is active. Cached business data expires on a rolling basis (typically within about 30 days). Lead lists you generate stay available in your account until you delete them or your account is deleted. You can ask us to delete your account and associated personal data at any time.

Your rights

Depending on where you live (including under GDPR, UK GDPR and the CCPA), you can request access to, correction of, export of, or deletion of your personal data, and you can object to processing based on legitimate interest. Email admin@mapsdata.ai and we will respond to every request. If you are in the EU or UK you also have the right to complain to your data protection authority.

Changes

If we make material changes to this policy, we will update this page and the date above, and for significant changes we will notify account holders by email.