Privacy Policy

poi-data.com (the "Service") is operated by xMap Inc. ("xMap", "we", "us", "our"), a company doing business as xmap.ai. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Information we collect

• Account information. When you sign up (including via Google OAuth) we receive your email address, name, and a unique account identifier. We do not receive your Google password.
• API usage data. We log API requests including timestamp, endpoint, query parameters, response status, and approximate IP/region for security, billing, abuse prevention, and product improvement.
• Cookies and similar technologies. We use strictly necessary cookies for authentication and session management, and limited analytics cookies to understand product usage.

2. How we use information

• Provide, maintain, secure, and improve the Service.
• Authenticate users and issue API keys.
• Enforce quotas, prevent abuse, and investigate security incidents.
• Communicate with you about your account, updates, and support.
• Comply with legal obligations.

Google user data. If you sign in with Google, we use the basic profile information (email, name, account ID) solely to create and operate your account. We do not use Google user data for advertising, and we do not sell or transfer Google user data to third parties except as needed to provide the Service, comply with applicable law, or as part of a merger or acquisition. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Sharing of information

We do not sell personal information. We share information only with: (a) service providers who process data on our behalf (e.g. cloud hosting, authentication, analytics, email) under appropriate confidentiality and security obligations; (b) authorities when required by law, subpoena, or to protect rights, safety, or property; and (c) acquirers in a merger, acquisition, financing, or sale of assets.

4. Data retention

We retain account data while your account is active and for a reasonable period thereafter to comply with legal, accounting, or reporting obligations. Logs may be retained for up to 24 months. You may request deletion at any time (see Section 7).

5. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

6. International transfers

We operate globally. Your information may be processed in the United States or other countries that may have different data protection laws than your jurisdiction.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@xmap.ai. You may also revoke Google OAuth access at any time via your Google Account permissions.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data.

9. Changes

We may update this Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, additional notice.

10. Contact

xMap Inc. — privacy@xmap.ai
Website: xmap.ai