Privacy Policy

Mapgrid is the data controller for personal data processed through the service. Mapgrid offers a tool to manage Google Business Profile listings and related local-marketing services.

• Account data: email, name, and role within the application.
• Google Business Profile data you authorize access to (locations, reviews, posts, photos, metrics).
• OAuth tokens (access_token / refresh_token) to call Google APIs on your behalf. They are stored encrypted and used only for operations you initiate in the app.
• Minimal technical logs for debugging and security.

We use your data exclusively to provide the service: read and update your Business Profile, show analytics, reply to reviews and publish content you approve. We do not sell data to third parties.

We rely on infrastructure providers (Google Cloud, Supabase, Lovable, Cloudflare) acting as data processors. Access to Google APIs is governed by the Google API Services User Data Policy, including the Limited Use requirements.

Payments — Stripe as payment processor. All paid subscriptions are processed by Stripe Payments Europe, Ltd. ("Stripe"), which acts as the Merchant of Record and reseller for our orders. When you purchase a plan, Stripe receives the personal and billing data required to complete the transaction (name, email, billing address, country, tax identifiers where applicable, and payment method details). Stripe acts as an independent data controller for that payment data and also handles invoicing, tax compliance, subscription management, refunds and chargebacks. Stripe's processing is governed by the Stripe Privacy Policy. We never receive or store your full card number.

We keep your data while your account is active. You can revoke access at any time from your Google account or by requesting deletion by email.

Under GDPR you have the right to access, rectify, delete, object to and port your data. Contact us at hello@mapgrid.app.

Mapgrid · hello@mapgrid.app