Privacy Policy

Effective: April 7, 2026

1. Introduction

Cartographer ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our tabletop map building service at app.cartographer.live and our website at cartographer.live.

2. Information We Collect

We collect the following types of information:

  • Account information: When you create an account, we collect your email address and display name.
  • Payment information: All payment processing is handled by Lemon Squeezy, our Merchant of Record. We do not store your credit card number or full payment details. Lemon Squeezy collects and processes payment information in accordance with their Privacy Policy.
  • Usage data: We collect information about how you use the Service, including maps created, AI credits used, and features accessed.
  • Technical data: We automatically collect certain technical information, including your IP address, browser type, device information, and operating system.
  • BYOK API keys: If you use the Bring Your Own Key (BYOK) feature, your Google Gemini API key is stored in encrypted form on our servers and is used solely to process your map generation requests.
  • User-generated content: Maps, project data, and other content you create within the Service.

3. How We Use Your Information

  • Service delivery: To provide, maintain, and improve the Cartographer platform.
  • Account management: To manage your account, authenticate your identity, and provide customer support.
  • Billing: To process payments and manage subscriptions through Lemon Squeezy.
  • Communication: To send transactional emails such as account confirmations, billing receipts, and service updates. We do not send marketing emails without your consent.
  • Product improvement: To understand how the Service is used and to improve features, performance, and user experience.
  • Security: To detect, prevent, and address fraud, abuse, and security issues.

4. AI-Generated Content

When you generate AI-stylized maps, we send image data and generation parameters to Google's Gemini API for processing. This data is transmitted securely and is used solely for generating your requested map output. We do not share your prompts or images with third parties for any other purpose. Please review Google's Privacy Policy for information on how they handle data processed through their API.

5. Third-Party Services

We use the following third-party services that may collect or process your data:

6. Data Storage and Security

Your data is stored on secure servers and transmitted using industry-standard encryption (TLS/SSL). BYOK API keys are stored in encrypted form. We implement commercially reasonable administrative, physical, and technical safeguards to protect the confidentiality and integrity of your data. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. Maps and project data are stored until you delete them or close your account. After account deletion, we may retain certain data for up to 30 days to allow for account recovery, after which it is permanently purged. We may retain anonymized, aggregated data for analytics purposes indefinitely.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct any inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data and account.
  • Data portability: Request an export of your data in a commonly used format.
  • Objection: Object to certain types of processing of your personal data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to:

  • Essential cookies: Maintain your session and authenticate your account. These are required for the Service to function.
  • Preference cookies: Remember your settings and preferences within the application.

We do not use cookies for advertising or third-party tracking.

10. Children's Privacy

Cartographer is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

11. International Users

Cartographer is operated from the United States. If you are accessing the Service from outside the United States, your data may be transferred to and processed in the United States or other jurisdictions where our service providers operate. By using the Service, you consent to this transfer and processing of your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, notify you via email or a prominent notice within the Service. We encourage you to review this policy periodically.

13. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].