Privacy Notice

Information you provide

We collect personal information you choose to provide when you create an account, request or generate a report, join a waitlist, subscribe, complete a form, contact support, participate in a promotion, or otherwise communicate with us. Depending on the feature used, this may include:

• name, email address, telephone number, company name, job title, and account credentials;
• billing and transaction details, although complete payment-card information may be handled directly by our payment processor;
• communications, feedback, support requests, survey responses, and marketing preferences;
• search inputs, business names, locations, URLs, categories, competitors, and other information submitted for analysis; and
• any files, content, or other information you voluntarily upload or provide.

Please provide information that is accurate and current. Do not submit sensitive personal information or information you are not authorized to provide.

Information collected automatically

When you access SpyMap, we and our service providers may automatically collect device, log, and usage information. This may include your IP address, browser type, device type, operating system, language, referring page, approximate location derived from IP address, pages viewed, features used, searches performed, timestamps, session duration, errors, and diagnostic or performance data. We use this information to operate and secure the Services, understand usage, troubleshoot problems, and improve performance.

Business and third-party information

At your direction, SpyMap may collect or analyze information about businesses from public webpages, business listings, mapping products, social profiles, websites, and other publicly accessible sources. This may include business names, addresses, telephone numbers, websites, categories, hours, photos, reviews, ratings, posts, and ranking or visibility signals. Public business information can sometimes contain personal information, such as a sole proprietor's name or telephone number.

Where SpyMap uses Google APIs or Google-provided information, our use and transfer of that information will follow the Google API Services User Data Policy, including applicable Limited Use requirements. Google and other third-party services maintain their own privacy practices, which we do not control.

We may process information to:

• create and administer accounts, authenticate users, and provide requested features;
• generate audits, competitive comparisons, rankings, reports, recommendations, and other SpyMap results;
• process subscriptions and transactions and maintain business records;
• send service messages, respond to questions, provide support, and request feedback;
• personalize the user experience and remember preferences;
• monitor performance, measure usage, conduct analytics, test features, and improve the Services;
• detect, investigate, and prevent fraud, abuse, security threats, and violations of our terms;
• send marketing communications where permitted, subject to your choices;
• comply with law, enforce agreements, establish or defend legal claims, and protect users or others; and
• carry out another purpose disclosed when information is collected or with your consent.

We do not use sensitive personal information to infer characteristics about you. We may aggregate or de-identify information and use it for lawful product, analytics, research, and business purposes.

Where applicable law requires a legal basis, we may rely on one or more of the following:

• Contract: processing necessary to provide the Services you request or to take steps before entering an agreement;
• Legitimate interests: operating, supporting, securing, analyzing, and improving SpyMap, provided those interests are not overridden by your rights;
• Consent: processing you have affirmatively authorized, which you may withdraw as permitted by law;
• Legal obligations: processing required to comply with applicable law, regulation, court order, or lawful governmental request; and
• Protection of rights and safety: processing needed to protect vital interests, prevent harm, or establish, exercise, or defend legal claims.

Residents of Canada may have rights relating to express or implied consent. In limited circumstances, Canadian law may permit collection, use, or disclosure without consent, including for fraud prevention, investigations, legal process, emergencies, certain business transactions, or information defined by law as publicly available.

We may disclose personal information in the circumstances below. We do not authorize service providers to use information for purposes unrelated to the services they perform for us.

• Service providers: vendors that support hosting, cloud infrastructure, databases, analytics, authentication, payments, communications, customer support, security, product development, artificial intelligence, mapping, and marketing.
• At your direction: third parties you choose to connect with, share with, or otherwise authorize.
• Professional advisers: lawyers, accountants, insurers, auditors, and other advisers where reasonably necessary.
• Legal and safety matters: courts, regulators, law enforcement, or others when we reasonably believe disclosure is required by law or necessary to protect rights, property, safety, users, or the public.
• Business transactions: prospective or actual buyers, investors, lenders, advisers, or successors in connection with financing, restructuring, merger, acquisition, sale of assets, or similar corporate event.
• With consent: other parties when you consent to or request the disclosure.

Categories of recipients may include analytics providers, cloud and data-storage providers, payment processors, monitoring and testing tools, authentication services, website hosts, communication platforms, AI providers, advertising or retargeting partners, and social or mapping platforms.

SpyMap and its service providers may use cookies, pixels, local storage, software development kits, and comparable technologies. These tools can keep the Services functioning, preserve preferences, support authentication, prevent fraud, measure performance, understand user activity, and support advertising where permitted.

You can control many cookies through browser settings and, where available, our consent tools. Blocking necessary cookies may prevent parts of SpyMap from working. If we use Google Analytics or a comparable analytics service, you may also use the provider's available opt-out tools. Certain US laws may treat some advertising-related disclosures as a "sale" or "sharing" even when no money changes hands; applicable opt-out rights are described in Section 14.

SpyMap may use artificial intelligence, machine learning, or automated systems to organize information, analyze business listings and websites, identify patterns, generate summaries or recommendations, and improve reports. To provide these features, relevant inputs and technical data may be transmitted to contracted AI or cloud service providers.

AI-generated results can be incomplete or inaccurate and should be independently reviewed before relying on them. Do not submit confidential, sensitive, regulated, or third-party personal information unless you are authorized to do so and the feature expressly supports it. We apply this Privacy Notice to personal information processed through AI-enabled features.

If SpyMap permits you to register or sign in through a third-party account, we may receive information such as your name, email address, profile image, account identifier, and other information you authorize the provider to share. We use this information to authenticate you, create or maintain your SpyMap account, and provide the requested connection. The third party's use of information remains governed by its own privacy policy and settings.

SpyMap and its service providers may store or process information in the United States and other countries where they operate. Those countries may have data-protection laws different from the laws where you live. When required, we use appropriate safeguards for cross-border transfers, such as contractual protections or another legally recognized transfer mechanism.

We retain personal information only as long as reasonably necessary for the purposes described in this notice, including providing the Services, maintaining records, resolving disputes, enforcing agreements, meeting tax or accounting requirements, and satisfying legal obligations. Retention periods depend on the type of information, the reason it was collected, sensitivity, risk, and applicable law.

When information is no longer needed, we may delete, anonymize, or securely isolate it until deletion is feasible. Backup copies may remain for a limited period under routine backup and disaster-recovery practices.

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. No online service, transmission method, or storage system can be guaranteed completely secure. You are responsible for protecting your credentials, using secure devices and networks, and notifying us if you suspect unauthorized account activity.

SpyMap is intended for business users and is not directed to children under 18 or the minimum age required by local law. We do not knowingly collect personal information from children for use of the Services. If we learn that we collected such information without appropriate authorization, we will take reasonable steps to delete it. Contact hello@postpixel.ai if you believe a child has provided information to SpyMap.

Depending on your location and subject to legal exceptions, you may have the right to request access to personal information, correction of inaccurate information, deletion, restriction or objection to processing, data portability, withdrawal of consent, or review of certain automated decisions. You may also have the right to complain to a relevant data-protection authority.

You can unsubscribe from promotional email using the unsubscribe link or by contacting us. Even after opting out of marketing, we may send account, transaction, security, support, or other non-promotional messages. If your account includes editable profile settings, you may update some information directly. Account deletion may not immediately remove information we must retain for legitimate business or legal reasons.

Some browsers offer a Do-Not-Track setting. Because there is not yet a universally accepted standard for responding to these signals, SpyMap may not respond to them. If a binding standard or legal requirement applies in the future, we will address it as required. We may honor legally recognized opt-out preference signals, such as Global Privacy Control, where applicable.

Certain state privacy laws require additional disclosures. In the preceding 12 months, depending on how a person interacted with SpyMap, we may have collected the following categories: identifiers; customer-record information; commercial or transaction information; internet or electronic activity; approximate geolocation; professional or employment-related information; and inferences derived from usage or business-analysis activity. We do not intend to collect protected classifications, biometric identifiers, precise geolocation, health data, or other sensitive personal information through ordinary use of SpyMap.

We collect information from users, their devices and browsers, publicly available business sources, connected services, service providers, and business partners. We use and disclose these categories for the purposes and to the recipients described in Sections 2 and 4.

Subject to state law, residents may have rights to know, access, correct, delete, or receive a portable copy of personal information; opt out of targeted advertising, sale, sharing, or certain profiling; limit certain uses of sensitive information; and receive equal service when exercising privacy rights. SpyMap does not sell personal information for money. Some advertising or analytics activity may be considered "sharing," "sale," or targeted advertising under broad state definitions.

To exercise an applicable right, email hello@postpixel.ai with the subject line "SpyMap Privacy Request." We may ask for information reasonably necessary to verify your identity and request. An authorized agent may submit a request when permitted by law, but we may require proof of authority and direct verification with you. If we deny a request, you may have a right to appeal by replying to our decision.

California residents may also request information under California's Shine the Light law regarding certain disclosures for third parties' direct-marketing purposes, if applicable.

We may revise this Privacy Notice to reflect changes in the Services, our practices, technology, or applicable law. The date at the top shows when the notice was last updated. If a change is material, we may provide additional notice through the Services, by email, or through another appropriate method. Continued use after an update is subject to the revised notice, to the extent permitted by law.

Questions, concerns, and privacy requests may be directed to:

SpyMap, a PostPixel product
Email: hello@postpixel.ai

To request access to, correction of, or deletion of personal information, or to exercise another applicable privacy right, email hello@postpixel.ai. Include enough information for us to understand your request, identify the relevant account or interaction, and verify your identity. We will respond within the time required by applicable law. Legal exceptions may allow or require us to retain certain information or deny part of a request.