Privacy Policy

Information we collect

We collect only what is needed to provide the Service:

• Account information: when you sign in with Google, Google provides us your email address, name and profile picture. We never receive your Google password.
• Your content: the materials you upload (documents, images and so on), the cards, notes and links you create or edit in your knowledge maps, and your conversations with the Agent.
• Usage records: point consumption and settlement, and the status and results of background jobs such as structure generation and avatar generation.
• Technical logs: request time, IP address, browser type and error details, used for security and troubleshooting and kept for no more than 30 days.

Analytics

When you visit zoommap.app we record the page you opened, the site that referred you, any campaign parameters in the link, and an anonymous visitor id stored in a cookie, so we can tell which channels bring people to ZoomMap. We use Microsoft Clarity to record how visitors interact with this website (page views, clicks, scrolling, and anonymised session replays with text content masked) and to understand which sources bring visitors here. Clarity may set cookies; see Microsoft's privacy statement. We also record a first-visit source cookie (see below) so that, if you later sign up, we know how you found ZoomMap.

How we use it

We use the information above for the following purposes, and only these:

• To provide and maintain the Service: signing you in, storing your content, running the generation jobs you start.
• To meter and settle usage: deducting points for the features you actually use.
• For security and compliance: preventing abuse, diagnosing faults, meeting legal obligations.
• To improve the product: analysing feature usage in aggregated, de-identified form.
• We do not sell your personal information, we do not use your content to target advertising at you, and we do not use your content to train models.

AI processing and third-party services

The core features of the Service rely on third-party large language models. When you start a generation job or talk to the Agent, the relevant material content, card content and your instructions are sent to model providers for processing. We send only what the task needs; these providers handle data under their own privacy policies and commit not to train on API data.

We also rely on these infrastructure providers: Google (sign-in), Fly.io (application hosting, servers located in Singapore) and Cloudflare (network delivery, security and encrypted backup storage).

Cookies and local storage

We use a single session cookie (HttpOnly, Secure, valid for 30 days) to recognise that you are signed in. We also set a first-visit source cookie (zm_src, 30 days) that records how you first arrived here so that, if you sign up later, we know which channel or shared map brought you. Microsoft Clarity, our analytics provider, may set its own cookies to distinguish sessions. We do not use advertising cookies.

Interface settings such as your language preference are kept in your browser's local storage and are not sent to the server.

Retention and deletion

Your content is kept for as long as your account exists. You can delete materials, cards and maps inside the product at any time.

To close your account and delete all of your data, email hi@zoommap.app. We delete your data from the primary database within 30 days; backup copies are cleared by the backup rotation within a further 30 days.

Security

Data is encrypted in transit with HTTPS and stored on encrypted disks; backups are encrypted as well. Only the people who operate the Service can access data, and only when necessary.

No internet service can guarantee absolute security. If a security incident affects your data, we will notify you promptly.

Your rights

You have the right to access, correct, export and delete your personal information, and to withdraw consent and close your account. To exercise these rights contact hi@zoommap.app; we respond within 30 days.

Changes to this policy

We may update this policy from time to time. Updates change the "last updated" date at the top; material changes are also announced inside the product. Continuing to use the Service means you accept the updated policy.

Contact

Email: hi@zoommap.app