Privacy Policy

1. Scope

This policy applies to personal information we collect through the Services and when you contact us. It does not cover third-party services you use with InfraMap, such as Google sign-in, Stripe and Link checkout or the AI assistant you connect to our MCP server. Their own policies apply.

For Enterprise customers, we process workspace content on the customer's behalf under its agreement with us. That customer's own privacy notice may also apply to you. A data processing agreement is available on request.

2. Information we collect

Information you give us

• Account information. Your email address. If you sign in with Google, your name, profile photo address and Google account identifier. We also record your sign-in methods, sign-in dates and count, and when you accepted our Terms.
• Billing information. When you buy a plan or a question pack, Stripe's Link service sells it to you as merchant of record. Link collects your card and billing details and handles them under its own privacy policy. We receive and store your Stripe customer ID, plan, subscription status and billing period, and the name, email and billing address you give at checkout. We never receive your full card number.
• Team information. For Team and Enterprise plans: the organization name, members' email addresses, roles, invitations and seat counts. An administrator may give us your email address to invite you, and we email you the invitation.
• Who a purchase is for. When you buy a plan, we may ask whether it is for you or your team, and we record your answer.
• Conversations and inputs. The questions and instructions you send to the InfraMap analyst, Ohm and other AI features, the answers they produce, and related details such as the plant or map area you selected, timing, model, token counts and cost estimates.
• Communications. What you send when you email us or give feedback, and your contact details.

Information we collect automatically

• Product usage. Pages viewed, features and map layers used, searches, and similar actions, linked to a random identifier stored in your browser.
• Device and connection. IP address, browser, operating system, device type, language, and approximate location such as country, region or city, derived from your IP address. We do not collect precise location.
• Logs. Our hosting providers record requests, including IP address, address requested, the page that linked to it, time and browser details. The MCP server logs tool names, outcomes, timing and output size, and your account ID once MCP sign-in is enabled. It does not log your tool arguments or results.
• Cookies and local storage. See Cookies and similar technologies.

Information from others

• Google, when you sign in with Google.
• Stripe, about the status of your payments and subscription.
• Your organization, when an administrator invites you or manages your seat.
• Public sources and business contacts, for business contact information we use to reach potential customers.

3. AI conversations

When you use the InfraMap analyst, Ohm or another AI feature, we keep a record of your questions, the answers and the related details listed above.

How we keep conversations separate from your identity

We store conversation records for analytics and product improvement under a random identifier, not under your name, email address or account ID, and we do not combine them with your account information. Before we use conversations to train models, we remove the direct identifiers we can detect, such as email addresses, phone numbers and street addresses.

You control what you type. If you include personal or confidential details in a question, they become part of the record, so please leave them out.

How we use conversations

• To answer your question and handle follow-ups. The analyst uses a working copy of the conversation on our servers for up to 24 hours.
• To keep the Services secure, enforce limits and prevent abuse.
• To debug problems and measure answer quality, speed and cost.
• To improve answers, prompts, tools and data coverage, and to build test sets. Authorized team members may review samples for this work.
• To develop and train InfraMap's own models and features.

AI model providers

To generate answers, we send your conversation and its map context to our AI model providers, currently Anthropic and OpenAI. They process it under commercial terms that do not allow them to train their models on it. They may keep it for a limited period to monitor for abuse.

Your saved chats

Chats in the InfraMap Pro Agent tab are saved in your browser. Deleting a chat removes it from your browser. It does not delete records we have already logged.

4. How we use information

• Provide and operate the Services, including sign-in, answers, saved preferences and team features.
• Process payments and manage subscriptions, seats and usage limits.
• Offer team plans to organizations. We group the accounts that buy a plan by the domain of their work email address, such as example.com, so our staff can see when several people at one organization pay separately. Only our staff see these groups. We never show one customer who else at their organization uses InfraMap.
• Send sign-in codes, receipts, service and security notices, and notices about changes to our terms.
• Send product news and marketing where the law allows. You can unsubscribe at any time.
• Understand how the Services are used, and improve and develop the Services, new products and AI models.
• Conduct research and create aggregated or de-identified insights, which we may publish or share.
• Keep the Services secure, prevent fraud and abuse, enforce rate limits and enforce our terms.
• Comply with the law, respond to lawful requests, and protect the rights and safety of our users, InfraMap and others.
• Any other purpose we describe when we collect the information, or with your consent.

5. De-identified and aggregated information

We may turn personal information into de-identified or aggregated information that cannot reasonably be linked to you. We may use and share that information for any lawful purpose. We keep it in de-identified form, we do not try to re-identify it except to test our methods, and we require anyone we share it with not to re-identify it.

6. How we share information

We share personal information only in these situations:

• Service providers. Companies that host, store, analyze, email or bill for us, under contracts that limit their use of the information. See the subprocessor list.
• AI model providers. As described in AI conversations.
• Your organization. If you have a Team or Enterprise seat, your organization's administrators can see your name, email address, role, when you joined and how many analyst questions you used in the current billing period. They do not see your questions or answers.
• Integrations you choose. When you connect an AI assistant or other client to InfraMap, results go to that client.
• Legal and safety. When we believe the law requires it, or to protect the rights, property or safety of our users, InfraMap or others.
• Business transfers. In a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, personal information may be transferred to the new owner, subject to this policy for information collected before the transfer.
• With your consent or at your direction.

We may also share de-identified and aggregated information, as described above.

7. Cookies and similar technologies

We use a small number of cookies and browser storage entries to run the Services and measure their use. We do not use advertising cookies.

InfraMap Pro honors Global Privacy Control and Do Not Track. When your browser sends either signal, we turn off product analytics and conversation analytics for that browser. You can also clear cookies and site data in your browser settings.

8. Product notes

• InfraMap Pro. Analytics record a defined list of product events. Page views record the type of page (a plant page, not which plant), the referring site's domain from a fixed list of search engines, AI assistants and other sites (never the full address) and the campaign tag on our own links. Automatic click capture and session recording are off.
• InfraMap Edu. No account is needed. Ohm conversations are logged as described above. Product analytics capture clicks and may record sessions, with everything you type masked. The "use my location" feature turns your position into the nearest city name inside your browser, and only that name is used. Tour progress stays in your browser.
• inframap.org and InfraMap Data Centers. Standard web analytics.
• InfraMap MCP server. No account is needed today. IP addresses are held briefly in memory to enforce rate limits. When MCP sign-in launches, we will store refresh tokens in hashed form for up to 30 days. Access tokens are not stored and expire after one hour.

9. How long we keep information

• Account information. While your account is open. We delete it within 90 days after you ask us to delete your account or we close it, except what we must keep for legal, tax or security reasons.
• Sign-in codes. 10 minutes, stored only as a keyed hash.
• Sign-in rate limits. Hashed records of recent attempts, covering the last 10 minutes for an IP address and the last hour for an email address or account. Older timestamps are dropped the next time the record updates.
• Analyst working copies. Used for up to 24 hours. Expired copies can remain in private storage until we delete them, and we do not use them after they expire.
• Billing records. As long as tax, accounting and other legal requirements demand, typically seven years.
• Conversation and usage analytics. As long as they are useful for the purposes in this policy. Then we delete or aggregate them.
• Server logs. For a limited period set by our hosting providers, generally no more than 30 days.
• De-identified and aggregated information. We may keep it indefinitely.

We may keep information longer when the law requires it or to resolve disputes and enforce our agreements.

10. Security

We use administrative, technical and physical safeguards designed to protect personal information. See our Security page for details. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and regulators as the law requires.

11. Your rights and choices

You can ask to access, correct, delete or get a copy of your personal information. Email contact@inframap.org from your account email address. We may need to verify your identity, and we respond within the time the law requires. You may use an authorized agent, and we may ask for proof of the agent's authority. We will not discriminate against you for exercising your rights.

Conversation and usage records are not tied to your account, so we may not be able to find them for an access or deletion request. If you tell us the approximate date and content of a conversation, we will try.

• Marketing email. Use the unsubscribe link in any marketing email. Account and security emails continue while your account is open.
• Analytics. Turn on Global Privacy Control or Do Not Track, or clear your browser's site data.
• Account deletion. Email us. Self-service deletion is coming.
• Appeals. If we decline your request, reply to our decision to appeal. If you are not satisfied with the result, you may contact your state attorney general or data protection authority.

12. US state privacy rights

Residents of California and other states with comprehensive privacy laws have the rights described above, subject to legal exceptions. California residents have the right to know, delete and correct personal information, the right to opt out of its sale or sharing, and the right not to be discriminated against for exercising these rights.

In the past 12 months we collected these categories of personal information: identifiers, such as name, email address, IP address and account IDs; commercial information, such as plan and purchase history; internet and electronic activity, such as product usage, logs and AI conversations; approximate geolocation; and professional information, such as your organization and team role. We collect them from the sources and for the purposes described in this policy, and we disclose them for business purposes to the service providers and others listed in How we share information.

We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it.

13. International users

We are based in the United States and process information there. If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing our contract with you, such as running your account and billing; our legitimate interests in operating, securing, analyzing and improving the Services, including the use of de-identified conversations; your consent where the law requires it; and compliance with legal obligations.

You may have the right to access, correct, delete, restrict or port your information, to object to processing, to withdraw consent, and to complain to your data protection authority. When we transfer personal information out of those regions, we use standard contractual clauses or another lawful transfer mechanism where required.

14. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. InfraMap Pro accounts and paid plans are for adults. If you believe a child under 13 gave us personal information, contact contact@inframap.org and we will delete it.

15. Changes to this policy

We may update this policy. We will post the new version with a new effective date. If a change is material, we will give notice by email or in the product before it takes effect.

16. Contact

InfraMap is independently owned and operated. For privacy questions or requests, email contact@inframap.org.