Privacy Policy

What we collect

Maptide is a web-based tool for creating map overlays, with an account system, paid subscriptions, and a curated icon library. Depending on how you use Maptide, we collect: the email address you submit to join our waitlist, or that Clerk stores when you create an account; account and session identifiers, and your subscription/tier status; if you subscribe, identifiers for your subscription and transactions, and - only if needed to match a payment to your account - a billing email from Paddle (we never receive or store your card details; that's handled entirely by our payment processor, Paddle); access logs tied to your account, including your IP address and browser user-agent, used to enforce our icon-license terms, and separate rate-limiting counters keyed to your account used to prevent abuse of certain endpoints (see Terms of Service); error diagnostics if something goes wrong in the app; and anonymized page-view analytics via Vercel Analytics (pages visited, referrers, device type). Vercel Analytics doesn't use cookies and doesn't track you across other sites.

How we use it

We use this data to operate your account and the map editor; process subscription payments and manage your billing relationship; notify waitlist subscribers about the Maptide launch and product updates; detect and enforce violations of our icon-license terms; diagnose and fix errors in the service; and understand aggregate site usage. We don't sell your data or share it with anyone except the processors listed below, each of which handles it only to provide their part of the service.

Who processes it

We work with the following processors, each handling a specific part of the service on our behalf:

• Clerk — account creation, sign-in, and session management. Clerk stores your email address and account credentials.
• Paddle — our payment processor and merchant of record for subscriptions. Paddle handles checkout, billing, and payment data; we never receive or store your card details.
• Sentry — error monitoring. We configure Sentry not to collect personal data by default and strip request URLs, headers, and cookies before anything is sent; it typically only receives error messages and stack traces.
• Upstash — stores an access/audit log (IP address, user-agent, action taken) used to enforce the icon-license terms described in our Terms of Service, and separately, rate-limiting counters keyed to your account ID used to prevent abuse of certain endpoints.
• Vercel — hosts our servers and edge functions, and provides cookie-less Web Analytics for aggregate site traffic.
• ConvertKit (Kit) — stores waitlist emails and sends waitlist updates, for visitors who join our waitlist rather than creating an account.
• Google — if you view the map, your browser loads map tiles directly from Google Maps to display the map you're editing; that request reaches Google independent of Maptide, and we don't see or store it. See Google's terms of service.

See our Terms of Service for additional usage policies. If you are located in the EEA/UK, your data may be transferred to and processed in the United States by these processors, each of which maintains appropriate safeguards for international transfers (e.g., Standard Contractual Clauses). Our lawful basis for processing is your consent (when you join the waitlist), performance of our contract with you (operating your account and subscription), and our legitimate interest in keeping the service secure and preventing abuse of the icon library.

Unsubscribe or delete your data

If you're on our waitlist, every email we send includes an unsubscribe link, or you can contact us to unsubscribe or request deletion of your email address. If you have a Maptide account, email us to request deletion — we'll cancel any active subscription and delete your account within 30 days. Either way, reach us at maptide.app@gmail.com.

Data Retention

We retain data only as long as it's needed for the purpose it was collected. Waitlist emails are kept as long as you remain on the waitlist, until you unsubscribe or request deletion. Account data is kept for as long as your account is active, and deleted within 30 days of a deletion request. Billing records are governed by Paddle's own retention policies as merchant of record. Access/audit logs are automatically deleted after approximately 800 days. Error diagnostics are retained per Sentry's default retention period, which we don't independently extend.

Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal data. You may also have the right to object to our processing or request portability of your data. To exercise any of these rights, email maptide.app@gmail.com. If you believe your rights have been violated, you may also have the right to lodge a complaint with your local data-protection authority.

Contact

Questions about this policy? Email maptide.app@gmail.com.