DatMap Platform — Privacy Policy

Version 1.0 — Effective: June 1, 2026

This Privacy Policy explains how DatMap, LLC, a Delaware limited liability company ("DatMap", the "Operator", "we", "us"), collects, uses, and shares personal data when you use the DatMap Platform (the "Platform"). It is part of, and incorporated into, our Terms of Service at https://datmap.ai/legal/terms and our Submission & Contribution Terms at https://datmap.ai/legal/submission-terms.

1. Who we are

DatMap, LLC is the controller of personal data processed through the Platform (except Customer Data you upload to your own tenant space, for which you determine the purposes and we act as your processor/service provider). Privacy questions and requests: privacy@datmap.ai. General support: contact@datmap.ai.

2. Data we collect

Account data: email address, password hash (or OAuth identifier), display name, plan/tier, and verification status.

Billing data: payments are handled by Stripe. We store a Stripe customer/subscription identifier and subscription status; we do not store full card numbers.

Customer Data: datasets you upload or pull, the maps and embeddings derived from them, chat questions and answers, and submissions you make. Customer Data is stored in your isolated tenant space.

Usage & technical data: log data, IP address, device and browser information, map view events, quota counters, and audit-log entries used for security and abuse prevention.

3. How we use data

We use data to: provide, secure, and operate the Platform; authenticate you; process payments; meter and enforce quotas and fair use; send service and account emails (for example, verification and "your map is ready" notices); prevent abuse and fraud; comply with law; and maintain and improve the service.

4. AI processing

Grounded chat and summaries send the relevant snippets of your data, together with your question, to a model/inference provider in order to generate an answer. We do not sell your Customer Data. We do not use the private content of your tenant Customer Data to train third-party foundation models. Content you publicly publish, or submit to a public map, may be used as described in the Terms of Service and the Submission & Contribution Terms, including for model training subject to the opt-out described there.

5. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract (providing the Platform to you); legitimate interests (security, abuse prevention, service improvement, and analytics proportionate to those aims); consent (where required, for example for certain cookies or marketing communications, which you may withdraw at any time); and legal obligation (for example, tax and accounting records).

6. Sharing & sub-processors

We share personal data with service providers that help us run the Platform, under contract and only as needed: Stripe (payments), our email delivery provider, our hosting and infrastructure providers, and our model/inference providers. A current list of sub-processors is available on request at privacy@datmap.ai. We may also disclose data to comply with law, enforce our terms, or protect rights and safety, and in connection with a merger, acquisition, or sale of assets (in which case this Policy will continue to apply to previously collected data). We do not sell personal data, and we do not "share" personal data for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

7. Cookies

We use strictly necessary cookies for authentication and sessions and, where applicable, limited analytics. You can control cookies in your browser; disabling necessary cookies may break sign-in. Where required by law, we request consent before setting non-essential cookies.

8. Retention

We keep account data and Customer Data while your account is active and as needed for the purposes above or to meet legal and accounting obligations. When you delete your account, we delete or de-identify your tenant data in accordance with our retention practices; backups and legally required records may persist for a limited period before being purged on their normal cycle. Maps you have published or shared publicly may persist where they have been distributed.

9. Security

We use technical and organizational measures including per-tenant data isolation, encrypted secrets, access controls, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security; please use a strong, unique password and keep your credentials confidential.

10. International transfers

We are based in the United States, and data may be processed in countries other than yours. Where required for transfers of EEA, UK, or Swiss personal data, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum or IDTA, as applicable) or an applicable adequacy decision.

11. Your rights

Everyone. You can access and update most account data from your account settings, and you can delete your account at any time.

EEA/UK and similar jurisdictions. You may have the right to access, correct, delete, port, or restrict your personal data, to object to processing based on legitimate interests, and to withdraw consent (without affecting prior processing). You also have the right to complain to your local supervisory authority.

California (CCPA/CPRA). In the last 12 months we have collected the categories of personal information described in Section 2 (identifiers, commercial information, and internet or network activity) from you directly and from your devices, for the purposes in Section 3, and disclosed them to the service providers in Section 6. California residents have the right to know, access, correct, and delete personal information, the right to opt out of sale or sharing (we do not sell or share personal information), and the right not to be discriminated against for exercising these rights. We honor opt-out preference signals such as Global Privacy Control where legally required. You may use an authorized agent to submit requests, subject to verification.

How to exercise rights. Email privacy@datmap.ai from the address associated with your account (or provide information sufficient to verify your identity). We will verify and respond within the time required by applicable law, and we will not charge a fee for legitimate requests except where the law permits.

12. Children

The Platform is not directed to children under 16 (or the higher age set by your local law), and we do not knowingly collect their data. Contribution features additionally require contributors to be at least 18, as described in the Submission & Contribution Terms. If you believe a child has provided us personal data, contact privacy@datmap.ai and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new version number and effective date, and, where required, notified to you by email or through the Platform before they take effect.

14. Contact

Privacy questions or requests: privacy@datmap.ai General support: contact@datmap.ai DatMap, LLC, Delaware, USA