Privacy Policy

We collect the following categories of information when you use the Services:

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your identity.
• To provide, operate, and deliver the Services, including AI-powered content generation.
• To process payments and manage your subscription.
• To communicate with you about your account, respond to support requests, and send service-related updates.
• To monitor usage patterns, diagnose technical issues, and improve the performance and reliability of the platform.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.

Mapaan uses third-party AI services to generate content on your behalf. Your Inputs are sent to these services solely for the purpose of producing your requested Output.

Mapaan does not use your Input or Output to train, improve, or fine-tune its own or any third-party AI models unless you have explicitly opted in to such usage.

We may collect and analyse anonymised, aggregated usage data (such as which features are most popular or average generation times) to improve the Services. This aggregated data does not contain any personally identifiable information or user-generated content.

We use cookies and similar technologies to operate and improve the Services. The types of cookies we use include:

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.

We do not use advertising or behavioural targeting cookies.

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the platform, including cloud hosting providers, payment processors, AI service providers, email delivery services, and analytics tools. These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share information for other purposes when you have given us explicit consent to do so.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Specifically:

• Account data is retained for as long as your account remains active, and for a reasonable period after account closure to comply with legal obligations.
• User-generated content (Inputs and Outputs) is retained while your account is active. Upon account deletion, your content is permanently deleted within 30 days.
• Payment records are retained as required by applicable tax and financial regulations.
• Log and usage data is retained for up to 12 months for security and analytics purposes, after which it is anonymised or deleted.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication mechanisms, including support for OAuth-based sign-in.
• Role-based access controls limiting internal access to personal data.
• Regular security reviews and monitoring for suspicious activity.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal exceptions.
• Restriction: Request that we limit how we process your data.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for specific purposes, including direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@mapaan.com. We may need to verify your identity before processing your request. We will respond within 30 days, or within the timeframe required by applicable law.

Where applicable (such as under the GDPR), we process your personal data on the following legal bases:

• Performance of Contract: To provide and manage the Services you have subscribed to.
• Legitimate Interests: To operate, improve, and secure the platform, provide customer support, and conduct analytics.
• Consent: For optional features such as marketing communications. You can withdraw consent at any time.
• Legal Compliance: To meet regulatory, tax, or legal reporting obligations.

Your data may be transferred to and processed in countries outside your own, including jurisdictions that may not offer equivalent data protection laws. When we transfer data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses or other legally recognised transfer mechanisms, to ensure your data remains protected.

The Services are not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children under this age.

If we become aware that we have collected personal data from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@mapaan.com.

The Services may contain links to third-party websites, platforms, or services that are not operated or controlled by Mapaan. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

Mapaan is not responsible for the data practices, content, or security of any third-party website or service.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you via email or through an in-app notification.

Your continued use of the Services after any changes to this Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: support@mapaan.com

We will do our best to respond to your inquiry within a reasonable timeframe.