MapBillsAbout

Privacy

Privacy Policy

AI Policy Map keeps personal data use narrow. Most visitors browse without creating an account. We process only the information needed to run the site, respond to privacy requests, and understand usage when analytics consent is granted.

Controller contact

Reach the team responsible for privacy notices and data requests.

AI Policy Map

Use this contact for policy questions and privacy requests.

Overview

How this policy works in practice

What we collect

Most visitors use the site without giving us direct personal data. We may process IP addresses for security, consented analytics data, and the details you submit in a privacy request.

How we use it

We use privacy request details to answer your request, limited security data to prevent abuse, and analytics data only after consent so we can understand what is working and what is not.

Who helps run the site

We rely on a small set of providers for hosting, storage, security, and consented analytics. We do not sell personal data and we do not use visitor data for marketing.

Your choices

Where privacy law applies, you can ask for access, correction, deletion, restriction, objection, or portability. Use the privacy request page and we will handle the request through the public workflow.

Processors

Service providers

  • Vercel

    Hosting the public site

    United States · DPA and platform safeguards

  • Neon

    Database hosting

    United States · DPA and encryption at rest

  • Upstash

    Rate limiting and abuse prevention

    United States · DPA and platform safeguards

  • Google LLC

    Consented analytics via Google Analytics

    United States · Standard Contractual Clauses

  • Microsoft Corporation

    Consented analytics via Clarity

    United States · Standard Contractual Clauses

Retention

How long we keep data

  • Privacy requests

    To respond to requests and keep a record of how they were handled

    3 years after request closure

  • Admin access

    To manage staff access to the content system

    Life of account + 30 days after deactivation

  • Consented analytics

    To understand site usage and improve the experience

    13 to 14 months

  • Security logs

    To prevent abuse and keep the site available

    90 days

Data rights

Your main options

  • Access

    Ask for a copy of the personal data we hold about you.

  • Correction

    Ask us to fix personal data that is inaccurate or incomplete.

  • Deletion

    Ask us to delete data when there is no valid reason to keep it.

  • Restriction

    Ask us to pause processing while a request or objection is reviewed.

  • Portability

    Ask for your data in a usable format when the law requires it.

  • Objection

    Object to processing that relies on legitimate interest.