Privacy Policy

1. Introduction

Welcome to MapWap. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered lead generation platform.

This policy complies with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA/CPRA), and Google API Services User Data Policy.

2. Data Controller

The data controller responsible for your personal data is:

• Platform: MapWap

• Website: https://mapwap.dilipdas.net

• Contact Email: admin@glead.com

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address when you register or sign in via Google OAuth

• Business Profile: Business name, description, service details, target audience information

• User Content: Message templates, lead notes, follow-up details you create

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, AI feature usage counts

• Device Information: Browser type, operating system, device type, IP address

• Cookies: Essential, analytics, and functional cookies (see our Cookie Policy)

3.3 Information from Third Parties

• Google OAuth: Name and email address from your Google account (with your consent)

• Google Maps/Places API: Business information from public listings when you search for leads

4. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To provide and maintain our lead generation platform

• AI-Powered Features: To generate business insights, message templates, and pitch personalizations using AI (Google Gemini)

• Account Management: To manage your account, subscriptions, and payment processing

• Communication: To send service-related notifications and updates

• Improvement: To analyze usage patterns and improve our platform

• Legal Compliance: To comply with applicable laws and regulations

5. AI Data Usage & Training

Free Tier Users: If you are on a free plan and have provided consent, your anonymized and aggregated usage data may be used to improve our AI features. This data is stripped of all personally identifiable information before processing.

Paid Tier Users: If you are on a paid subscription plan, your data is never used for AI training purposes. Your data is only processed to deliver the AI-powered features you use.

Third-Party AI Processing: We use Google Gemini API to power AI features. When you use AI features, relevant business context (your service description, lead information) is sent to Google's AI services for processing. Google's AI services process this data according to their own privacy policies and data processing agreements.

You can manage your AI training consent at any time from your Data & Privacy settings page.

6. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on:

• Consent: For AI training data usage, marketing communications, and optional cookies

• Contract Performance: To provide the services you have subscribed to

• Legitimate Interest: For platform security, fraud prevention, and service improvement

• Legal Obligation: To comply with applicable laws

7. Data Sharing & Third Parties

We share your data with the following categories of third parties:

• Google (OAuth & Maps/Places API): For authentication and lead search functionality

• Google Gemini AI: For AI-powered features (insights, templates, pitch generation)

• Razorpay: For payment processing (payment details are handled directly by Razorpay)

• Hosting Providers: For infrastructure and data storage

We do not sell your personal data to third parties.

7.1 Google API Services — Limited Use Disclosure

MapWap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to data that is necessary for the features you use (authentication via Google OAuth)

• We do not use Google user data for serving advertisements

• We do not allow humans to read your Google data unless we have your affirmative agreement, it is necessary for security purposes, or it is required by law

• We do not transfer or sell Google user data to third parties

8. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion request

• Usage Logs: Retained for 12 months for analytics, then anonymized

• Payment Records: Retained for 7 years as required by Indian tax law

• Consent Records: Retained for the duration of your account plus 5 years for compliance auditing

9. Your Rights

Under DPDPA 2023 (India)

• Right to access your personal data

• Right to correction of inaccurate data

• Right to erasure of personal data

• Right to withdraw consent

• Right to nominate another person to exercise rights

• Right to grievance redressal

Under GDPR (EU/EEA)

• Right of access (Art. 15)

• Right to rectification (Art. 16)

• Right to erasure / right to be forgotten (Art. 17)

• Right to restriction of processing (Art. 18)

• Right to data portability (Art. 20)

• Right to object (Art. 21)

• Right not to be subject to automated decision-making (Art. 22)

Under CCPA/CPRA (California)

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of the sale of personal information

• Right to non-discrimination for exercising your rights

• Right to correct inaccurate personal information

To exercise any of these rights, visit your Data & Privacy settings page or contact us at admin@glead.com.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit

• Encrypted storage for sensitive data at rest

• Access controls and authentication mechanisms

• Regular security audits and monitoring

11. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at admin@glead.com.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (for Google services). We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where applicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Effective Date." Continued use of the platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us:

• Email: support@dilipdas.net

• Website: https://mapwap.dilipdas.net

15. Grievance Officer (India)

In accordance with DPDPA 2023, our Grievance Officer can be reached at: support@dilipdas.net. We will acknowledge your complaint within 48 hours and resolve it within 30 days.