Privacy Policy

1. Introduction

Welcome to Your Map Art ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our services:

• Account Information: When you sign in with Google OAuth, we collect your name, email address, and profile picture.
• Design Data: Map designs you create, including location data, text, styles, and customization preferences.
• Order Information: Billing address, shipping address, and order history when you make purchases.
• Payment Information: Payment processing is handled by Stripe. We do not store your credit card information on our servers.
• Communication Data: Information you provide when contacting our support team, including support tickets and file attachments.

2.2 Automatically Collected Information

When you use our services, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, and interaction patterns.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Session Data: Login times, session duration, and authentication logs.
• Analytics Data: Template views, design exports, style changes, and feature usage statistics.

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Process orders, generate designs, deliver digital downloads, and fulfill physical products.
• Account Management: Create and manage your account, authenticate sessions, and provide customer support.
• Communication: Send order confirmations, shipping notifications, download links, and customer support responses.
• Improvement: Analyze usage patterns to improve our services, develop new features, and optimize user experience.
• Security: Detect and prevent fraud, unauthorized access, and security vulnerabilities.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.
• Marketing: Send promotional emails about new features, templates, and special offers (with your consent).

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

• Stripe: Payment processing (credit cards, Apple Pay, Google Pay)
• AWS S3: File storage for designs and digital downloads
• Resend: Email delivery service
• Google: Authentication via Google OAuth
• Cloudflare: Spam protection via Turnstile
• Gelato: Physical product fulfillment and shipping

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Database Security: PostgreSQL database with encrypted connections and access controls.
• File Storage: AWS S3 with private buckets and pre-signed URLs with time-limited access.
• Authentication: OAuth 2.0 via Google with session-based authentication and automatic expiration.
• Access Controls: Role-based access control (user, admin, superadmin) with least-privilege principles.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access your personal data through your dashboard. To request a complete copy of your data in a portable format, please contact us at info@yourmapart.com.

6.2 Correction and Update

You can update your account information through your dashboard settings at any time.

6.3 Deletion (Right to be Forgotten)

You can request deletion of your account and associated data. Note that we may retain certain information for legal compliance, dispute resolution, and enforcement of our agreements. To delete your account, contact us at info@yourmapart.com.

6.4 Marketing Communications

You can opt out of marketing emails by clicking the "Unsubscribe" link in any promotional email or by contacting us. Note that you will still receive transactional emails (order confirmations, shipping notifications, etc.).

6.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of our services.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active, plus 90 days after deletion request.
• Order History: Retained for 7 years for tax and accounting purposes.
• Design Files: Digital downloads expire after 7 days; purchase history retained indefinitely.
• Session Data: Automatically expire after inactivity period.
• Analytics Data: Aggregated and anonymized data may be retained indefinitely.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our servers are located in the United States (AWS US-East-2 region). By using our services, you consent to the transfer of your information to the United States and other countries where we operate.

9. Children's Privacy

Our services are not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: