Privacy policy

Last updated 27 October 2026. This policy explains what Mapailytics Inc. ("Mapailytics", "we") collects when you use mapailytics.com, its product sites and the Mapailytics application, why, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Who we are

Mapailytics Inc., Toronto, Ontario, Canada. Questions about this policy or your information: [email protected].

What we collect

Your account. When you sign up or sign in we keep your name, email address and the workspaces you belong to. Sign-in runs on our own identity service; we never see or store your password in readable form.

The data you upload. Spreadsheets, addresses and other files you add to a workspace are processed to do what you asked: cleaned, geocoded, mapped, analysed and shown on pages and reports. They belong to you and are used for your workspace only. Addresses are matched against open address data; when our own geocoder cannot place an address it may be sent to Mapbox for geocoding.

Billing. Payments are handled by Stripe. We receive the plan, the amount and the last four digits of the card; the card number itself never reaches our servers.

How the service is used. Our own, first-party records of pages viewed, features used, errors and response times, so we can run and improve the service. We do not use third-party advertising or analytics trackers.

Messages. What you send us by email or through a form on a page, including forms on pages our customers publish, which go to the workspace that owns the page.

How we use it

To provide the service you signed up for, to bill for it, to answer your requests, to keep the service secure and working, and to tell you about changes to it. We do not sell personal information and we do not share it for advertising.

Artificial intelligence

Some features answer questions in plain language, write summaries and draft pages. By default these run on models hosted on our own servers. A workspace can choose to use a hosted model from Anthropic for some features; then the text of the request and the rows needed to answer it are sent to that provider under its data terms, and are not used to train its models. Which model answered is recorded with every request.

Who else sees data

We use a small number of service providers, each for one job: Stripe for payments; Mapbox for map tiles and some geocoding (your browser loads map tiles directly from Mapbox, which sees your IP address); Cloudflare to protect and speed up the sites; an email service to send messages from the platform; and, only when you connect one, Microsoft OneDrive or Google Drive to keep a copy of your workspace's data in your own drive, with access limited to the folder the backup creates. We share information with authorities only when the law requires it.

Cookies

Necessary cookies keep you signed in, protect forms and remember your cookie choice. Preference cookies remember settings such as your theme. Analytics cookies are our own and count how the service is used. We set no marketing cookies. The banner on your first visit lets you accept all, reject the non-essential ones, or choose, and you can change that choice at any time from the footer.

Where data is kept and for how long

Your data is stored on servers operated by Mapailytics, encrypted in transit and in backups. Backups are kept for a limited period and then overwritten. Your workspace's data stays for as long as the workspace exists; when you delete a dataset or a workspace it is removed from the live service, and from backups as they expire. Account records are kept while your account is active and for a short period afterwards for billing and legal reasons.

Your rights

You can see the personal information we hold about you, correct it, ask us to delete it, or withdraw consent where it is the basis for processing. Write to [email protected] and we will answer within 30 days. If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada.

Children

The service is for businesses and organisations and is not directed at children under 16.

Changes

When this policy changes we update it here with the date at the top. A change that affects how we use your information is announced in the application before it takes effect.