Privacy Policy

1. Who We Are

Mappetize LLC is an Illinois limited liability company operating the Mappetize platform at www.mappetize.com. We are the data controller for personal information collected through our Service. For privacy questions, contact us at [email protected].

2. Information We Collect

Information you provide

• Account information: When you sign in with Google, we receive your name, email address, and profile photo from Google. If you sign in with email, we collect your email address and the name you provide. We may offer additional sign-in methods in the future.
• Restaurant information: If you claim a restaurant listing, we collect your restaurant's name, address, phone number, website, specials, photos, and other business information you provide.
• Communications: When you contact us by email or through the Service, we retain that correspondence.
• Payment information: Subscription payments are processed by Stripe. We never receive or store your full credit card number. Stripe provides us with billing confirmation, subscription status, and limited payment details (such as card type and last four digits) for account management purposes.
• User-generated content: Any content you submit through the Service, including check-ins, saved specials, preferences, and feedback.

Information collected automatically

• Usage data: We collect information about how you interact with the Service, including pages and listings viewed, features used, search queries, and actions taken (such as saving a special or tapping for directions). This helps us improve the product and provide analytics to restaurant owners.
• Log data: Our servers automatically record information including your IP address, browser type, referring URL, pages visited, and timestamps.
• Device information: Browser type, operating system, screen size, device type, and language settings.
• Location information: If you grant permission, we may collect your approximate or precise location to show you nearby specials and restaurants. You can control location access through your device settings. We may also derive an approximate metro area from your IP address to show specials near you before you grant location permission. This is not stored or shared.
• Analytics: We use Vercel Analytics and Vercel Speed Insights to understand how people use our Service and to monitor performance. These tools are privacy-friendly, do not use cookies, and do not track you across websites.

Information from third parties

• Google Places API: We use the Google Places API to obtain restaurant names, addresses, phone numbers, websites, photos, ratings, and geographic coordinates for display on the platform.
• Restaurant websites: Our automated systems periodically review publicly accessible restaurant websites to collect information about specials, promotions, menus, and events. We only collect publicly available content. If you are a restaurant owner and wish to opt out of automated collection, contact us at [email protected].
• Authentication providers: When you sign in via Google or other third-party authentication providers, we receive basic profile information as described above.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Display restaurant listings, specials, events, and map data to people using the platform
• Authenticate your account and maintain your session
• Process subscription payments and manage restaurant accounts
• Provide analytics, insights, and performance metrics to restaurant owners
• Personalize your experience, such as showing relevant specials based on your location or preferences
• Communicate with you about your account, the Service, and updates
• Send promotional communications and marketing messages (you can opt out at any time)
• Analyze usage trends and measure the effectiveness of the Service
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of Mappetize, our users, and the public

We do not sell your personal information to third parties.

4. Cookies, Tracking, and Similar Technologies

We use cookies, local storage, and similar technologies for the following purposes:

Essential (required)

• Authentication: Supabase stores a session token in local storage or a cookie to keep you logged in. This is required for account functionality and cannot be disabled while using an account.

Functional

• Google Maps: The Google Maps JavaScript API uses cookies and local storage to provide map functionality, remember map state, and optimize performance. Google's use of this data is governed by the Google Privacy Policy.
• Google Sign-In: If you sign in with Google, Google sets authentication cookies subject to their privacy policy.
• Preferences: We may store your preferences (such as filter settings or map view) in local storage to improve your experience.

Analytics and Performance

• Vercel Analytics and Speed Insights: We use these first-party, privacy-friendly tools to understand usage patterns and monitor site performance. They do not use cookies and do not track you across other websites.

We may add additional analytics, marketing, or advertising tools in the future. If we do, we will update this policy and, where required by law, obtain your consent. You can manage cookie preferences through your browser settings at any time.

5. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: We work with third-party vendors who process data on our behalf, including Supabase (database and authentication), Stripe (payment processing), Vercel (hosting and analytics), and other infrastructure and service providers. These vendors are contractually obligated to protect your data and use it only as directed by us.
• Restaurant analytics: We provide restaurant owners with aggregate analytics about their listings, such as view counts, engagement metrics, and performance data.
• Check-in activity feed:When you check in at a restaurant, that restaurant's owner sees the check-in on their dashboard. By default, your check-in appears anonymously (for example, “A new customer checked in for Taco Tuesday”). Your name, photo, email, phone, or account ID are never shared by default. You can choose to share your first name and profile photo with a specific restaurant by opting in after you check in, and you can revoke that choice at any time.
• Legal requirements: We may disclose information if required by law, regulation, court order, subpoena, or government request, or if we believe disclosure is reasonably necessary to protect the rights, property, or safety of Mappetize, our users, or the public.
• Business transfers: If Mappetize LLC is acquired, merged with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your information in other circumstances where you have given us explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or fraud-prevention purposes.

Server log data is generally retained for up to 90 days. Aggregate analytics data associated with restaurant listings is retained as long as the listing remains active and may be retained in anonymized form indefinitely.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update your account information through your dashboard or ask us to correct inaccurate data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request a copy of your data in a portable format, where technically feasible.
• Opt out of marketing: Unsubscribe from promotional emails using the link in any marketing email, or by contacting us.
• Opt out (restaurants): Restaurant owners can request that we remove or stop automatically collecting information from their website by contacting us.
• Cookies and tracking: You can manage cookies through your browser settings. Note that disabling certain cookies may prevent some features from working properly.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may ask you to verify your identity before processing your request.

8. Children's Privacy

Mappetize is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at [email protected] and we will delete it promptly.

9. Data Security

We implement commercially reasonable security measures to protect your personal information, including encrypted connections (HTTPS), access controls, and secure hosting infrastructure. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. We will notify affected users in the event of a data breach as required by applicable law.

10. International Data

Mappetize is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations.

11. Third-Party Links and Services

The Service contains links to restaurant websites and displays content from third-party services like Google Maps. These third-party sites and services have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and may notify you by email or through the Service. Your continued use of Mappetize after the updated policy takes effect constitutes acceptance of the changes. If you disagree with any changes, you should stop using the Service and may request deletion of your account.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: