Privacy Policy

1. Who we are

Mappelier, LLC, a Maryland limited liability company, is responsible for the personal information described in this policy.

Privacy questions and requests may be sent to privacy@mappelier.com.

2. Initial United States availability

Mappelier is currently offered for use only within the United States. Our event catalog may include events in other countries for people in the United States researching art and travel, but the interactive Service is not presently offered outside the United States.

Cloudflare derives a country code from an incoming IP address so we can enforce this regional availability. Requests identified as originating outside the United States, or for which a country cannot be determined, receive a limited regional notice instead of the interactive Service. That notice does not initialize Mappelier accounts, maps, device location, or the application database. Our providers may retain limited request and security records as described below.

3. Information we collect

Information you provide

• Account information, such as your email address, password credential, display name, and account identifier.
• Content you submit, including event URLs, pasted event details, saved events, and support messages.
• Information you include when you contact us or exercise a privacy right.

Information collected when you use the Service

• Feature and account activity, such as events you save and the actions needed to operate those features.
• Technical and security information that our infrastructure providers may process, such as IP address, browser and device type, request timestamps, referring pages, and error or security logs.
• A short-lived pending-save identifier stored in your browser for up to 30 minutes when you begin saving an event before signing in. Authentication session information is also stored in your browser so you can remain signed in.

Location and map information

If you grant browser permission, Mappelier uses your device’s precise location in your browser to show nearby events and position the map. Mappelier does not save those precise device coordinates to your account or database, and does not place them in the page URL. You can deny or withdraw location permission in your browser or device settings. Place searches, map tiles, and map areas may be requested from mapping providers, which receive the technical information ordinarily included in an internet request.

Public event information

We collect event information from public websites and user submissions. This may include names or professional contact details that an organizer has made public in connection with an event. Event listings are public and are treated separately from private account data.

4. How and why we use information

We use personal information to:

• Provide accounts, authentication, and saved events.
• Process submitted event information and maintain the public event catalog.
• Answer support requests and communicate about the Service.
• Protect the Service, prevent abuse, enforce rate limits, and diagnose failures.
• Determine and enforce the Service’s initial regional availability.
• Comply with law and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service and maintaining an accurate event catalog, your consent for optional device permissions, and compliance with legal obligations. You may withdraw consent through your browser, device, or account settings without affecting earlier processing.

5. How we disclose information

We disclose information only as reasonably necessary to the following recipients:

• Infrastructure and database providers, including Cloudflare for hosting, delivery, and security and Supabase for authentication, database, and related backend services.
• Sign-in and communication providers, including providers used to authenticate accounts and send account-related email.
• Mapping and content providers, including OpenStreetMap and Nominatim, Open-Meteo, Google Maps or Google Calendar when you choose those links, and remote image hosts used by event listings.
• Event-processing providers, including Firecrawl and an OpenAI-compatible artificial-intelligence service, which process public or submitted event content to help extract and organize listing information.
• Professional advisers and authorities when reasonably necessary to comply with law, protect rights and safety, or complete a corporate transaction.

Event information you submit may become part of the public catalog. Please do not submit personal or confidential information that should not be public.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. The Service does not currently use third-party advertising or analytics trackers.

6. Retention

We generally keep account information and private feature data while your account remains active. Account deletion removes the authentication account and associated private feature data, subject to limited backups, legal obligations, fraud prevention, and records needed to resolve disputes. Public event listings may be retained after account deletion, but the submitting account link is removed.

Support records and security logs are kept only as long as reasonably necessary for the purpose collected, legal compliance, security, or dispute resolution. Retention periods may also depend on our service providers’ backup and security schedules.

7. Your choices and privacy rights

You can manage browser permissions through your browser or device and delete your account from Settings. You may also ask us to access, correct, delete, restrict, or provide a portable copy of personal information, or object to certain processing, where applicable.

Email requests to privacy@mappelier.com. Describe your request and the country or state where you live. We may need to verify your identity and authority before acting. You may use an authorized agent where local law permits. We will not discriminate against you for exercising a privacy right.

Depending on applicable law, you may have a right to appeal our response. Send an appeal to the same address with “Privacy Appeal” in the subject line.

8. Processing locations

Mappelier is based in the United States and initially offers the Service only within the United States. Information may be processed in the United States and other locations where our providers operate. Where applicable law requires a transfer mechanism or contractual protection, we use the required measure.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and account-level database restrictions. No internet service is completely secure, so we cannot guarantee absolute security. Email support@mappelier.com if you believe your account or the Service has been compromised.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact us so we can investigate and delete it. Additional age restrictions may apply under local law.

11. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy and update its effective date. If a change materially affects how we use personal information, we will provide additional notice when required.

12. Contact us

For privacy matters, email privacy@mappelier.com. For general support, email support@mappelier.com.