Privacy Policy

1. Who we are

Controller: MoMac Innovations Limited (established in New Zealand).

Address: 12 Blake Street, Rangiora, North Canterbury, New Zealand, 7400

Privacy contact: hello@momacinnovations.co.nz

2. Information we collect

• Account data: email address and password (stored hashed), plus your marketing email preference.
• Billing data: subscription status and Stripe customer/subscription identifiers. Payment card details are processed by Stripe — we do not store full card numbers.
• Map content you create: maps, lot data, images you upload, embed settings, and related configuration.
• Signup analytics (server-side): approximate city / region / country derived from IP or CDN headers at registration, plus marketing attribution fields (UTM parameters, referrer, landing page) when you allow analytics cookies.
• Technical data: IP address (for security, geo at signup, and abuse prevention), browser/device information, and logs.
• Cookies & similar tech: see our Cookie Policy.

3. How we use information

• Provide, secure, and improve the Service (accounts, maps, embeds, billing).
• Process subscriptions and communicate about your account.
• Understand product usage and acquisition (with consent where required).
• Detect fraud, abuse, and technical issues.
• Comply with legal obligations.

4. Legal bases (EEA / UK / Switzerland)

Where GDPR / UK GDPR applies, we rely on:

• Contract — to create your account, provide the Service, and process billing.
• Legitimate interests — security, fraud prevention, essential service operations, and limited product analytics that do not require consent under ePrivacy (where applicable).
• Consent — non-essential cookies (e.g. Microsoft Clarity, attribution cookie) and optional marketing emails (unchecked by default at signup).
• Legal obligation — where we must retain or disclose information by law.

5. Sharing

We share data with processors who help us run the Service, including:

• Stripe — payments and subscriptions.
• Hosting / infrastructure providers — application hosting, database, and file storage (e.g. object storage for map images).
• Microsoft Clarity — product analytics / session insights, only when you consent to analytics cookies.

We do not sell your personal information for money. Analytics tools may constitute “sharing” under some US state laws (e.g. California) — you can opt out by rejecting non-essential cookies.

If you publish a map embed on your website, map data you choose to make public will be visible to visitors of that site.

6. International transfers

We and our providers may process data in countries outside your own (including the United States and others). Where required, we use appropriate safeguards (such as Standard Contractual Clauses) with vendors.

7. Marketing emails

If you opt in at signup or in Account settings, we may email you product updates and occasional offers. You can withdraw consent anytime in Account settings or via unsubscribe links we include in marketing messages. We may still send transactional emails (e.g. security, billing, service notices) as needed to provide the Service.

8. Retention & deletion

We keep account and map data while your account is active and as needed for billing, security, and legal requirements. Cookie consent preferences are stored for up to 180 days.

You can permanently delete your account yourself in Account settings (password + confirmation required). That removes your profile, maps, lot data, sessions, and associated uploaded images, and cancels Stripe billing for the account where possible. Limited records may remain in backups or financial logs for a short period where required by law.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your data; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority.

EEA / UK / CH: contact us at hello@momacinnovations.co.nz. You may also contact your local data protection authority.

California and similar US state laws: you may request know / delete / correct rights (self-serve delete is available in Account settings), and opt out of sale or sharing via Cookie settings (Reject non-essential). We do not knowingly sell personal information of consumers under 16.

10. Children

The Service is not directed to children under 16 (or the age of digital consent in your country). We do not knowingly collect personal data from children.

11. Changes

We may update this policy from time to time. We will post the updated version on this page and revise the effective date.

12. Contact

Questions: hello@momacinnovations.co.nz