Privacy Policy

1. What we collect

Account data: name, email and password (stored hashed by our authentication provider) for agency users.

Creator data that agencies enter: name, preferred language, social account handles, notification preferences. Creators don’t need an email or password.

Customer Content: request briefs, files, feedback and messages added to a workspace.

Billing data: handled by our payment provider (Stripe). We store a customer id and plan status, never full card numbers.

Technical data: IP address and device information for security, rate limiting and abuse prevention, and push-notification subscriptions if you turn notifications on.

2. How we use it

To run the service, keep it secure, process payments, send service notifications and provide support. We do not sell personal data and we do not use Customer Content to train AI models or for advertising.

3. Who we share it with

Service providers that host and run Mapoca for us (database and file storage, hosting, payments, email), under contracts that limit their use of the data. Authorities, if the law requires it.

4. Retention

Files are kept while the workspace has an active plan (unless the workspace owner chooses automatic deletion) and deleted 45 days after a paid plan ends (7 days after a free trial ends without a plan). Workspace data is deleted within 30 days after a workspace is closed. Billing records are kept as long as tax law requires.

5. Security

Each workspace is isolated at the database level. Files are stored privately and shared only through short-lived signed links. Access is logged for sensitive actions.

6. Your rights

Depending on where you live you may have rights to access, correct, delete or export your data, or to object to processing. Agency users can contact us directly. Creators should contact the agency that added them; we will help the agency respond.

Contact: privacy@mapoca.com · Mapoca, Queensland, Australia.