1Scope
This Policy applies to personal information we process when you visit our websites, create an account, capture and upload imagery, view or search imagery, or otherwise interact with the Service. It does not apply to third-party websites, tools, or platforms that we link to or integrate with, which are governed by their own privacy policies (see Section 9).
2Information we collect
Information you provide.
- Account information — name, email address, username, password, and, for paid plans, organization name and role.
- Billing information — for paid plans, billing contact details and payment information. Payments are processed by our payment provider; we do not store full card numbers.
- Communications — messages you send us (support requests, removal requests, feedback) and their contents.
Imagery and related data you upload. When you capture and upload imagery, we process the imagery together with its embedded and associated metadata, which may include:
- Location data — GPS coordinates and track/sequence geometry.
- Capture metadata (EXIF) — timestamps, camera and device model, orientation, and similar technical fields.
- Depicted content — imagery of public spaces may incidentally capture individuals, faces, vehicles, license plates, and property. See Section 6 on blurring.
Information collected automatically. When you use the Service we collect standard technical and usage data, which may include IP address, device and browser type, operating system, referring pages, pages and imagery viewed, search queries, and interactions, collected via cookies and similar technologies (see Section 11).
3How we use information
We use personal information to:
- provide, operate, maintain, and improve the Service, including hosting, processing, and displaying imagery;
- process uploads, including automated detection and blurring of faces and license plates, track alignment, and generation of derived data;
- create and manage accounts, authenticate users, and provide customer support;
- process payments and manage subscriptions;
- publish public imagery to the map and enable open-license sharing when you choose to make imagery public;
- monitor, prevent, detect, and address fraud, abuse, security incidents, and violations of our Terms;
- comply with legal obligations and respond to removal and data-subject requests; and
- communicate with you about the Service, including service-related notices and, where permitted, product updates.
4Legal bases for processing (EEA/UK)
Where the EU/UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service to you); legitimate interests (to operate, secure, and improve the Service and to maintain a public imagery map, balanced against your rights); consent (for certain cookies and optional communications, which you may withdraw); and compliance with legal obligations. Where we rely on legitimate interests, you may object as described in Section 8.
5How we share information
We do not sell personal information. We share information only as described below:
- Publicly, for imagery you make public. Imagery you choose to publish, together with its associated location and capture metadata, is made available on the public map and under the applicable open license. Do not make imagery public if you do not want that imagery and its metadata to be publicly accessible.
- Service providers. Vendors who process data on our behalf — for example hosting, content-delivery, storage, analytics, blurring/detection, and payment processing — under contracts limiting their use of the data.
- Third-party platforms you direct. If you choose to export or publish imagery to another platform (such as Mapillary), we share that imagery at your direction, subject to that platform's terms.
- Legal and safety. When we believe disclosure is required by law, legal process, or to protect the rights, safety, or property of Maprizon, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
6Faces, license plates, and blurring
Imagery processed for the Service is passed through automated detection intended to blur faces and vehicle license plates before it is made viewable. No automated system is perfect; blurring is provided on a reasonable-efforts basis and does not guarantee that all identifying features are obscured. Depending on jurisdiction, blurred and unblurred imagery of identifiable individuals may constitute personal data, and detection of faces/plates may implicate biometric or special-category rules — an area requiring specific legal review before launch. If you are depicted in imagery, you may request removal or additional blurring (see Section 8).
7Data retention
We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Public imagery already shared under an open license cannot be recalled from copies others have obtained, though we can remove or further blur imagery on the Service and change a collection's visibility going forward. We retain aggregated or de-identified data, which is not personal information, as needed.
8Your rights and choices
Depending on your location, you may have rights to access, correct, delete, export (portability), restrict, or object to the processing of your personal information, and to withdraw consent. Residents of California and certain other U.S. states have rights under laws such as the CCPA/CPRA, including the right to know, delete, and correct, and to opt out of “sales” and “sharing” (we do not sell personal information). We will not discriminate against you for exercising these rights.
To exercise a right, or to request removal of or additional blurring for imagery that depicts you or your property, contact [email protected]. We will verify your request as required by law and respond within the applicable timeframe. You may also have the right to lodge a complaint with your local data-protection authority.
9Third-party services
The Service integrates with third-party tools and data, which may include OpenStreetMap and its editors (such as iD and JOSM), base-map and tile providers, analytics providers, our payment processor, and optional export destinations (such as Mapillary). Their processing of your information is governed by their own privacy policies, and we are not responsible for their practices.
10International data transfers
We are based in the United States and may process and store information in the U.S. and other countries where we or our service providers operate. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) for transfers from the EEA and the UK International Data Transfer Addendum (IDTA) to the SCCs for transfers from the UK, together with any supplementary measures needed to protect the data. You may request a copy of the relevant safeguards by contacting us at [email protected].
11Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. We use Google Analytics (GA4) to measure traffic and usage; these analytics cookies load only after you accept them in our cookie notice, and not if you decline. Our cookie notice lets you accept or manage non-essential cookies, and you can control cookies through your browser settings. Some features may not function properly without certain cookies.
12Security
We use administrative, technical, and organizational measures designed to protect personal information appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
13Children's privacy
The Service is not directed to children, and you must be at least 18 years old (or the age of majority in your jurisdiction) to create an account, consistent with our Terms. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can delete it.
14Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice — for example, by posting the updated Policy with a new “Last updated” date or by notifying you in the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
15Contact us
Questions, requests, or complaints about this Policy or your personal information? Contact Kaart Group, LLC at [email protected], 734 Main Street, Grand Junction, CO 81501, USA.