Privacy Policy

1. Who We Are

Map Your Contacts ("we," "us," or "our") is a contact mapping tool for professionals. This Privacy Policy explains how we collect, use, store, and protect information when you use our service at mapyourcontacts.com ("the Service").

For the purposes of GDPR, Map Your Contacts acts as a data processor with respect to the contact data you store. You, the user, are the data controller and are responsible for the lawfulness of the data you upload.

2. Information We Collect

2.1 Account Information

• Email address — used for account creation, login, and service communications
• Password — stored as a secure hash via Supabase Auth; we never see your plain-text password
• Account creation date — for our records

2.2 Contact Data You Provide

When you add contacts to the Service, we store exactly what you enter:

• Name, city/location, company
• Email address and phone number
• Status (Client, Contact, Churned) and notes
• Date the contact was added

This data belongs to you. We do not analyze, enrich, sell, or share it with third parties.

2.3 Technical Data

• Authentication tokens — temporary session data stored in your browser, used to keep you logged in
• Terms acceptance — a flag stored in your browser's localStorage indicating you have accepted these terms

We do not use analytics tools, tracking pixels, advertising cookies, or any third-party tracking technologies.

3. How We Use Your Information

We use your information only to provide and improve the Service:

• To authenticate your account and maintain your session
• To store, retrieve, and display your contact data
• To send transactional emails (account confirmation, password reset)
• To respond to your support requests

4. Data Storage and Security

Your data is stored using Supabase, a SOC 2 Type II certified cloud database provider. Supabase stores data in the European Union by default.

• Encryption at rest — all data is encrypted on disk
• Encryption in transit — all connections use TLS/HTTPS
• Row-level security — enforced at the database level; only you can access your contacts, even in the event of an application error
• Access controls — we do not have routine access to your contact data

Supabase's full privacy and security documentation is available at supabase.com/security.

5. Data Sharing

We do not sell, rent, or trade your personal data to anyone.

We share data only in these limited circumstances:

• Supabase — our database provider, acting as a sub-processor under a Data Processing Agreement. They store your data but do not access or use it independently.
• Stripe — processes payments. We share only what is necessary to complete a transaction. Stripe does not receive your contact data.
• Legal requirements — if required by law, court order, or to protect our legal rights, we may disclose information. We will notify you if legally permitted to do so.

6. Your Rights GDPR CCPA

Depending on where you live, you have the following rights regarding your personal data:

How to Exercise Your Rights

Email us at hello@mapyourcontacts.com with your request. We will respond within 30 days. You may also export your data directly from the app at any time using the "Export CSV" button.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us
• The right to opt out of the sale of personal information — we do not sell personal information
• The right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at hello@mapyourcontacts.com. We do not discriminate against users who exercise their privacy rights.

7. Data Retention

We retain your account and contact data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where retention is required by law.

You may export your data at any time before deletion using the CSV export feature in the app.

8. Cookies

We use only essential cookies and browser storage necessary to operate the Service:

• Authentication session — keeps you logged in. Expires when you sign out or after 7 days of inactivity.
• Terms acceptance flag — stored in localStorage to record that you have accepted these terms. Not a cookie; not transmitted to any server.

We do not use advertising cookies, tracking cookies, or any third-party cookies. No cookie consent banner is required because we only use strictly necessary storage.

9. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. International Data Transfers

Your data is stored on Supabase servers located in the European Union. If you access the Service from outside the EU, your data is transferred in accordance with applicable data protection laws. Supabase maintains Standard Contractual Clauses (SCCs) as required under GDPR for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 14 days before they take effect. The effective date at the top of this page reflects when the current version took effect.

12. Contact and Complaints

For privacy-related questions or to exercise your rights, contact us at:

hello@mapyourcontacts.com

If you are located in the EU/UK and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.