1. Introduction

MapStack ("we", "us", or "our") operates the MapStack Sponsors portal. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

Account information: Name and email address from your Google or Apple sign-in.
Business information: Place name, address, and photos you select for your sponsorship.
Targeting criteria: Geographic locations and interest tags you configure for your audience.
Billing information: Payment method details collected and stored securely by Stripe. MapStack does not store your full card number or bank account details.

Information Collected Automatically

Usage data: Click counts, impressions, billing periods, and dashboard activity.
Click logs: When a MapStack app user clicks your sponsored place, we record the event with a timestamp, an anonymized user identifier, and your sponsorship ID. This is used for accurate billing and fraud prevention.
Log data: IP addresses, browser type, pages visited, and referring URLs collected automatically when you use the portal.

3. How We Use Your Information

To create and manage your account and sponsorships
To display your sponsored place to targeted MapStack users
To calculate, invoice, and collect payment for click-based charges
To provide you with billing history, invoices, and usage reports
To detect and prevent fraudulent or invalid clicks
To communicate with you about your account, billing, or Service updates
To improve the Service and develop new features
To comply with legal obligations

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

Stripe: Our payment processor. Stripe handles all payment data under their own Privacy Policy.
Firebase / Google Cloud: Our infrastructure and database provider. Data is stored and processed under Google's security standards.
Google Places API: Used to look up business details and photos. Queries you make are sent to Google under their Privacy Policy.
Legal requirements: We may disclose your information if required by law, subpoena, or to protect the rights, property, or safety of MapStack, its users, or the public.

4a. Curator Program (Stripe Connect)

If you participate in MapStack's Curator Program, you are eligible to receive payouts from a share of the sponsored-placement revenue paid by third-party businesses. Payouts are issued through Stripe Connect Express, a separate Stripe product from the sponsor billing flow described above.

To receive payouts, you complete an onboarding form hosted by Stripe at connect.stripe.com. During onboarding, Stripe (not MapStack) collects the information required to satisfy U.S. tax-reporting and anti-money-laundering rules — name, date of birth, residential address, Social Security Number (for individuals) or Employer Identification Number (for businesses), and bank-account routing and account numbers. MapStack does not store, view, or have direct access to these fields. Stripe is the controller of that data and processes it under their own Privacy Policy and Stripe Connected Account Agreement.

What MapStack stores in your profile is limited to:

Your Stripe Connect account ID (e.g. acct_1ABC…)
The current verification status returned by Stripe (none, pending, verified, or restricted)
For each completed payout: the period it covers, the gross USD amount, the Stripe transfer ID, and the timestamp of the transfer

Stripe issues IRS Form 1099-K to U.S.-based curators each calendar year when the threshold defined by IRS rules is met. MapStack relies on Stripe for that filing. Curator program participation terms are described in the Curator Agreement.

5. Data Retention

We retain your account and sponsorship data for as long as your account is active or as needed to provide the Service. Billing records and invoices are retained for a minimum of 7 years to comply with financial regulations. You may request deletion of your account by contacting us; note that some data may be retained as required by law or for legitimate business purposes.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including encrypted data transmission (TLS), Firebase Security Rules to restrict database access, and server-side authentication token verification. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your personal data
Object to or restrict certain processing
Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at info@mapstackapp.com. We will respond within 30 days.

8. Cookies and Tracking

The Service uses session cookies required for authentication and security. We do not use third-party advertising trackers or analytics cookies beyond what is necessary to operate the Service. You can disable cookies in your browser settings, but doing so may prevent you from signing in.

9. Children's Privacy

The Service is intended for business use by adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at info@mapstackapp.com.