Privacy Policy

Your privacy matters to us. At MapFlow, we help businesses optimize their delivery, field service and sales routes by analyzing and planning the most efficient routes. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights.

1. Who This Policy Applies To

This policy covers: website visitors, prospective and current customers, authorized users of our platform. It does not cover personal data about your own customers that you collect independently using MapFlow. In that case, you are the data controller, and we act as a processor on your behalf.

2. What We Collect and Why

a. Identity & Access

We collect your name, email, company, job title, and password when you sign up. This allows us to: set up and manage your account, send product updates and transactional communications, offer customer support.

Legal basis: Contractual necessity, Legitimate interest

b. Route & Geolocation Data

We collect and process data related to your routes such as: delivery and intervention addresses, vehicle geolocation data (in the context of GPS tracking with MapFollow), route constraints (time windows, required skills, vehicle capacity), route history and performance. This data is used to optimize your routes, plan your tours and display information in your MapFlow dashboard.

Legal basis: Legitimate interest

Important: You are responsible for complying with applicable laws (e.g. GDPR, CCPA) when collecting and processing your customers' data, including verifying that lawful contact conditions are met.

c. Usage Data

We collect data on how you use the platform to: improve performance and usability, recommend relevant features, detect anomalies or abuse.

Legal basis: Legitimate interest

d. Billing Information

If you purchase a plan, we collect your billing details (name, address, VAT number) and payment method via Stripe. We do not store any payment card details.

Legal basis: Contractual necessity, Legal obligation

e. Website Analytics & Cookies

We use cookies and third-party tools (like Google Analytics, Meta Pixel, and LinkedIn Ads) to: understand visitor behavior, improve our website and product, measure advertising effectiveness. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these emails. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. Visitors from the EU/EEA will be shown a cookie consent banner to manage preferences in accordance with the ePrivacy Directive and GDPR. You can also manage cookies via your browser settings.

Legal basis: Consent

f. Communication

If you contact us or respond to a survey, we retain your message and contact info to: assist you, improve our services.

Legal basis: Legitimate interest, Consent

3. How We Use Your Information

We use your information to: provide and maintain MapFlow, optimize your routes and itineraries, communicate with you, improve our platform, comply with legal obligations. We may use aggregated and anonymized data for internal research, benchmarking, or statistics.

4. Data Sharing

We do not sell your personal data. We may share your data with:

Subprocessors (e.g. Stripe, AWS, OpenAI) under strict confidentiality agreements
Your authorized integrations (e.g. Slack, HubSpot, Shopify)
Public authorities, if legally required (e.g. court order, subpoena)
No MapFlow employee accesses your account data unless: necessary for support, with your explicit permission

A list of subprocessors is available upon request.

5. Data Retention

Your account data is retained as long as your subscription is active. Deleted accounts are fully purged within 90 days. Certain data (e.g. billing records) may be retained longer to comply with legal obligations.

6. International Transfers

MapFlow is operated from France. If you are in the EU/UK, your data may be transferred to third-party processors in the United States or other countries. In such cases, we implement Standard Contractual Clauses or equivalent safeguards to ensure adequate protection of your data.

7. Your Rights under GDPR and CCPA

You have the right to:

Access your personal data
Correct inaccurate or outdated data
Request deletion of your data
Restrict certain processing
Export your data (portability)
Object to certain processing
Withdraw consent at any time
File a complaint with a data protection authority

To exercise any of these rights, email us at contact@mapflow.co. We may ask for verification of your identity.

8. California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), you may request:

A copy of the personal information we hold about you
Correction or deletion of your personal data
Information about data collection and sharing practices
We do not sell or share personal data as defined by CCPA.

We do not sell personal data as defined by CCPA.

We do not discriminate against users exercising their rights.

9. Security & Breach Notification

We implement industry-standard security practices, including: encryption in transit and at rest, firewalls and access controls, monitoring and anomaly detection. However, no system is 100% secure. You are responsible for safeguarding your login credentials. In the event of a data breach, we will notify affected users without undue delay in compliance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via: email, in-app banner or notification. The date of the last update is always shown at the top of this page.