Legal
Privacy policy
Last updated 28 July 2026
The short version
We collect the minimum needed to run a search-visibility tool: an email address to sign you in, the businesses and keywords you ask us to track, and the results we measure. We do not sell anything to anyone, we do not run advertising trackers, and we do not build a profile of you across other sites.
What we collect
| What | Why |
|---|---|
| Your email address | To send the sign-in link and account notices. It is the account identifier. |
| Your organization name, branding, logo | To render your reports under your own identity. |
| Businesses, addresses and keywords you enter | To run the scans you asked for. |
| Scan results | The product. Search results at coordinates, and where the business you track sits in them. |
| Billing details | Held by Stripe, not by us. We store a customer reference and the plan state. |
| Server logs | Requests, errors and timing, for keeping the service working. |
| Coverage sample: your email address | Only if you ask to see the full map. One email about that scan, and nothing else unless you ask. |
| Coverage sample: a Google ad click id | Only if you arrived from one of our Google ads, and only the identifier Google itself put in the link. We store it so we can tell Google that the ad led somewhere, which is how we know whether the advertising is worth paying for. There is no advertising script on this page, nothing is read from your browser, and it is not used to follow you anywhere else. |
| Coverage sample: your IP address | Used to count how many sample scans have come from one place today, and never stored. It is hashed together with the date, so yesterday's value cannot be recomputed and the counter cannot be turned back into a list of who visited. The counters delete themselves after 24 hours. |
We do not use cookies for advertising or analytics. The only cookie we set is the session cookie that keeps you signed in. The coverage sample page loads Cloudflare Turnstile, which is a bot check rather than a tracker. It is the one third-party script on this site, and it is on no other page.
Businesses you are not
A scan records public search results, which include competitor business names, ratings and review counts. That is information Google already shows to anyone who searches, and we hold it as measurement. If you are a business that appears in someone's scan and you want to know more, write to hello@mapvue.com.
Who else processes it
| Processor | What they see |
|---|---|
| Cloudflare | Hosting, database, file storage and the headless browser that renders PDFs. Everything sits here. |
| Search-data providers | The keyword and the coordinates for each scan. Not your identity. |
| Stripe | Your billing details and payment, handled entirely on their systems. |
| Our email provider | Your email address and the contents of sign-in and account emails. |
| Google Ads | Only if you arrived from one of our ads: the click id from that ad, and the fact that it led to a scan, a signup or a subscription. It is sent from our server after the event rather than from your browser, so this site sets no advertising cookie and loads nothing from Google. |
| Cloudflare Turnstile | On the coverage sample page only, to tell a person from a bot. It sees the check's own token and your IP address. It is not an advertising tracker and sets no advertising cookie. |
How long we keep it
| Data | Kept for |
|---|---|
| Account and organization records | While the account exists |
| Scan summaries (coverage, position, counts) | Indefinitely, so long-run history stays comparable |
| Full grid results for a scan | 13 months, enough for a year over year comparison |
| Generated report PDFs | 12 months |
| Coverage-sample results and email addresses | 24 months |
| Coverage-sample rate-limit counters | 24 hours, then deleted automatically |
| Sign-in links | Minutes. They are single-use and expire quickly. |
Report share links
A report link is an unguessable URL that needs no sign-in, so that your
client can open it. Those pages carry noindex and are excluded in
robots.txt, and revoking a link deletes it and its PDF at once.
Anyone who was given the URL before you revoked it loses access immediately.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything under it. Write to hello@mapvue.com and we will act within 30 days. Deleting an account removes its organizations, locations, scans and reports.
Depending on where you live you may also have the right to complain to a data protection authority in your own country.
Security
Passwords are stored as salted one-way hashes, never in plain text. You can also sign in with a single-use email link. Every read of your data is filtered by your organization, report PDFs are served through the application rather than from a public bucket, and uploaded logos are checked by parsing the image itself rather than trusting what the file claims to be.
Changes
If we change this policy materially we will email the account owner before it takes effect, and the date at the top will change.
Contact
MapVue Corp. hello@mapvue.com