Privacy Policy

1. Who we are

Mapbuz (“we”) operates this service. For privacy questions or requests, contact us through the Contact page.

2. Data we collect

Account data (name, email, password in hashed form, language), business data (organization name, connected business locations, reviews and replies, sentiment analysis results, and the content and publish time of posts you schedule), alert data (the Telegram chat ID you connect and the history of alerts sent), QR Review data (the QR codes you create and the number of scans per day, without storing who scanned), billing data (plan, invoices, payment status and references — we never see or store full card numbers), team data (invited members and roles), and technical data (IP address, device/browser, security and audit logs).

3. How we use data

To provide and secure the service, authenticate you, generate AI reply suggestions, analyze review sentiment and calculate the Local SEO Score, send negative-review alerts by Telegram and e-mail, publish the posts and photos you choose, count QR Review scans, process payments and invoices, send service notifications, prevent fraud and abuse, comply with law, and improve the product.

4. AI processing

To generate a reply, the review text and relevant business context are sent to the AI provider configured for the service. Do not include sensitive personal data in custom instructions. AI providers process the data under their own terms.

5. Sharing

We do not sell your personal data. We share data only with service providers needed to run the product (for example Google for your business profile, payment providers, AI providers, Telegram for the alerts you turn on, hosting and email), with your team members according to their roles, or when the law requires it.

6. Data from Google

If you connect your Google account, Mapbuz requests the Google Business Profile permission (scope business.manage) to read your business locations, read and reply to customer reviews, read profile performance statistics, and read business photos and photos uploaded by customers, and create and delete business posts and photos at your request. We only access the account you connect.

Data from Google is used only to provide the features you see and choose in Mapbuz: the location list, reviews, reply suggestions and sending, posts and photos (including customer photos shown straight from Google and not stored by us), post scheduling, sentiment analysis, Local SEO Score, QR Review, and reports. Photos you upload are passed straight to Google and are not stored on our servers; scheduled posts are kept until they are published or cancelled and are then deleted within 30 days. This data is not sold, not used or shared for advertising, and not used for any other purpose. Mapbuz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access at any time, either by disconnecting in Mapbuz or from your Google Account settings at myaccount.google.com/permissions. Once disconnected, we delete the tokens, locations, Google reviews and unpublished scheduled posts stored in Mapbuz.

Review text is sent to the AI provider only to generate reply suggestions, as described in the AI processing section.

7. Retention

We keep data while your account is active and as long as needed for billing, legal and security purposes (for example invoices and audit logs). You can ask us to delete your account data, subject to those obligations.

8. Security

Passwords are stored as salted hashes, sensitive credentials are encrypted, sessions use secure cookies, and access is restricted by role and organization. No system is perfectly secure; report any concern to us right away.

9. Your rights

You can request access to, correction of, or deletion of your personal data, withdraw consent where processing is based on it, and object to certain uses, in line with applicable law, including Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

10. Cookies and local storage

We use essential cookies to keep you signed in and remember your language. If you choose “Remember my email”, your email (never your password) is stored in your browser and can be removed by unticking the option or clearing site data.

With your consent, we also use Google Analytics 4 (Google LLC) to measure site usage in aggregate: pages viewed, traffic sources, device type, and approximate city-level location. Analytics cookies are only set after you press “Accept”. If you press “Decline”, no analytics cookies are set. Page addresses that carry personal tokens (team invitations, password reset, checkout) are not sent to Google Analytics in full. Your choice is stored in this browser and can be reset by clearing site data for mapbuz.com.

As Google Analytics requires, Google explains how it uses this data in “How Google uses information from sites or apps that use our services”: https://policies.google.com/technologies/partner-sites

11. Changes to this policy

We may update this policy. The version and date are shown at the top; for material changes we will notify you.

12. Contact

For any privacy request, reach us through the Contact page.