Privacy notice

Data sources and purposes

We receive data from people creating accounts, purchasing, using maps or submitting requests, from devices through enabled features, and from publishers or organizations when they use features that send third-party information to the service. Necessary processing provides the service, controls access, manages subscriptions, answers requests, protects the platform and meets legal obligations. Technical improvements do not authorize advertising using map or return visit data.

PrediMaps determines processing for accounts, billing, support and service security. For content a publisher or organization chooses to record, responsibilities depend on who decides its purposes and use; when acting on instructions, our processing is limited to the agreed service and applicable legal duties.

We do not use map, return visit or comment content for targeted advertising, commercial belief profiles. PrediMaps does not use personal data to train artificial intelligence models. Optional measurement of commercial pages is described separately; refusing it does not prevent necessary features from working.

Sensitive data and children’s data

Context and notes may reveal religious beliefs, health or other sensitive information. Precise location and children’s data also need special care and may receive additional legal protection. Contact details are not always sensitive by themselves: what they reveal about a person matters.

Record only what is necessary and obtain consent or another legal basis where required. In Mexico, when consent is required for sensitive data it must be express and written or obtained through a legally accepted authentication mechanism. Using a reference name, an optional field or a digital notebook does not remove applicable duties.

Purchasing requires legal capacity or valid representation. Children should not be asked to provide information to PrediMaps without the involvement and authorization required. If you believe a child’s data was improperly collected or shared, contact the privacy channel so the case can be assessed and appropriate measures taken.

Return visits, links and backups

Ordinary records stay in this browser, including offline, until you delete them or clear browser data. Optional fields may remain blank. Protect your device: a map PIN does not encrypt or isolate the local notebook from other people using the same browser profile.

Selecting “Create link” stores an encrypted temporary copy on the server with the exact location and the fields selected for the link. Its expiry is displayed when created. If selected, phone and comments are included only in the message sent to the destination app. The preview may show the exact point and map zones with their codes, without people's names, notes, personal characteristics or progress records. Google Maps links contain the location: Google may receive it when previews are generated or links are opened. Other apps may retain those previews.

Anyone receiving the link may open it while valid, subject to map access. You can revoke it from the browser that created it; deleting the return visit also requests revocation of its known links. Without connectivity, revocation stays pending. Revoking or letting the PrediMaps link expire prevents new access to its temporary copy; it does not deactivate Google links or erase messages, previews, screenshots, backups or saved copies.

Backups let you choose the current map or all maps in this browser and protect the file with a password. Anyone with an unprotected file can read it. PrediMaps cannot recover that password. Importing merges records and may restore deleted data; it does not restore link revocation keys.

If domain migration is enabled, you can choose to transfer return visits in a temporary package or continue without transferring them. Transfer requires your choice and keeps the originals in the source browser. Expired temporary copies are purged; the configuration and required technical providers are reviewed for each operation.

Responsibility of the publisher, organization and PrediMaps

• The publisher or organization decides what to record and must obtain the person’s consent or another legal basis when required, especially for sensitive information. Accepting PrediMaps terms does not replace that consent.
• Avoid screenshots, reports or links with personal data unless there is a clear need.
• Control PINs, users, permissions and shared links.
• Define internal criteria for retaining or clearing sensitive data.
• PrediMaps retains its own security and privacy obligations for the data it processes; publisher responsibility does not remove them.

Providers, recipients and international processing

Operation uses infrastructure and storage, transactional email, map and payment services. Google Maps processes requests needed for its maps and geolocation; Stripe processes payments on its screens; support messages and email may pass through the configured email provider. Each feature limits data sent to what is needed to provide it.

OpenFreeMap provides alternative cartography and the basemap for preview and print images. The server requests cartography for the area and draws points or zones; it does not send names, notes or private links to the provider.

These services may operate in countries other than yours. PrediMaps must maintain applicable contractual obligations and safeguards when providers process data on its instructions. A provider determining its own purposes may also act as an independent controller; its conditions do not replace PrediMaps’ obligations.

Recipients chosen by a user receive the information shared through links, messages, files or exports. Legally required disclosures are limited to their legal basis and scope. General acceptance of this notice does not replace specific consent or other formalities required for a transfer.

• Google privacy policy
• OpenFreeMap privacy policy
• Stripe privacy policy
• Microsoft privacy statement

Retention, deletion and security

Account and organization data is retained according to the service relationship and stated purposes. Certain payment, security, request and shared history records may be retained when needed for legal obligations, resolving disputes or preventing abuse. Retention does not authorize new uses or unlimited storage without justification.

Removing account access does not erase every shared organizational activity. Nor does it by itself delete browser return visits, exports or recipients’ copies. Deletion of data under PrediMaps’ control is handled through the privacy channel with legally permitted exceptions and time limits.

Access is limited by roles and functions; support and security actions must have a justified purpose. Technical controls reduce risks but do not promise invulnerability or recovery of local data without backups. A breach will be assessed and containment measures taken. Affected people will be notified immediately when a breach significantly affects their property or moral rights under Mexican law; other notices to people or authorities will follow applicable legal deadlines.

• Delete an account and understand its effects

Exercising rights and requesting review

Submit a request using the privacy form or email listed in this notice. State the right you wish to exercise, the relevant data or link and a way to reply. We may request proportionate information to verify identity or representation; do not send full identity documents, passwords or additional sensitive information until justified through an appropriate channel.

You may request access, correction, deletion, objection, withdrawal of consent and, where applicable, restriction, portability or opting out of certain processing. Withdrawal does not change the lawfulness of prior processing or prevent legally required retention. Refusing optional purposes does not condition necessary service purposes.

For ARCO requests under Mexican law, the general period to communicate a decision is 20 business days from receipt and, if approved, a further 15 business days to implement it; extensions or exceptions require justification. Exercising these rights is free except for costs permitted by law. The initial response target in this notice does not replace legal deadlines.

If you disagree with a response, request review through the same channel and explain why. Applicable appeal procedures and deadlines will be followed without limiting recourse to competent authorities. In Mexico, the federal authority for privately held personal data is the Secretaría Anticorrupción y Buen Gobierno; in the United States, authorities in your state of residence may have jurisdiction.

• Submit a privacy request

Notice updates

The date and version identify the applicable notice. Material changes will be communicated appropriately and new consent obtained where required. Incompatible new purposes will not be applied retroactively to previously collected data merely by changing this text.