Privacy Policy

This policy explains what information Mapo Media collects, why, how it is used, and the choices you have. It is written to describe the platform as it actually operates today — where something is planned but not yet live, we say so.

Who we are

Mapo Media is a productized marketing services platform. Confirm the full registered legal entity name, business address, and any registration/jurisdiction details to publish here. You can reach us at info@mapo.media for any question about this policy or how your information is handled.

Scope of this policy

This policy applies to:

• The Mapo Media marketing website
• Mapo Media customer accounts and the client portal
• Mapo Media services, orders, and projects
• Mapo Media applications and integrations, including third-party services you choose to connect (for example, a social media account)

Where a connected third-party service (such as Stripe, HubSpot, or a social platform) has its own privacy policy, that policy also governs how that service handles your information once it leaves Mapo Media’s systems.

Information we collect

1. Account information

Name, email address, password/authentication credentials, email verification status, and account role (for example, client user, client admin, or a member of the Mapo team).

2. Business and brand information

Company name, industry, audience, goals, brand voice, brand colors and fonts, uploaded logos and brand assets, branding-guideline content, and other information you provide to describe your business or brand. Mapo supports multiple brands per customer account, and this information is stored per brand.

3. Order and transaction information

The products or services you purchase, order details, quantities, invoice records, and payment status (for example, paid, pending, or refunded). Payment card processing is handled entirely by our payment processor, Stripe — Mapo Media does not receive or store your full card number. We receive the transaction information necessary to confirm and fulfill your order (such as the amount charged and a payment status).

4. Project and content information

Brief answers and product details you provide for a purchased item (topic, platform, target publish date, and similar fields that vary by product), uploaded reference files, comments and feedback left during review, approval decisions, and the deliverables produced for your project.

5. Communications

Support requests and their contents, messages exchanged with the Mapo team, and service-related notifications and emails (for example, order confirmations, status updates, and account emails).

6. Technical information

Standard technical information generated by using the site and portal, such as IP address, browser and device information, authentication/session identifiers, and the cookies described in Cookies & similar technology below. We do not currently operate a dedicated analytics or tracking platform on top of this.

How we use information

We use the information above to:

• Create, secure, and manage your account and role-based access
• Process purchases and deliver the services you order
• Manage your brands, projects, briefs, assets, and deliverables
• Operate review, comment, and approval workflows
• Respond to support requests and send service-related communications
• Maintain the security of the platform and prevent abuse or fraud
• Operate integrations you choose to enable, such as connecting a business tool or social account
• Provide AI-assisted features you use, as described below
• Maintain and improve the reliability of the platform

We do not sell your personal information, and we do not use your business or brand content for purposes unrelated to providing Mapo Media’s services.

AI-assisted features

Mapo Media uses Anthropic’s Claude models to power two features:

• Branding-guideline generation — creating a draft branding guideline from the brand information you provide, which you can review and edit.
• AI-assisted product details — suggesting content for certain brief fields after checkout, based on your brand and branding-guideline information. You always review and can edit any AI-suggested content before it is saved, and this feature falls back to a normal manual form if it is unavailable.

Using these features sends the relevant brand, project, and brief information to Anthropic’s API in order to generate a response. Anthropic processes this information as our service provider to deliver the feature you requested.

Social media integrations

Mapo Media supports connecting business tools and social media accounts to a brand so our team can help manage that brand’s content. This is optional — nothing is connected unless you choose to connect it.

Today, connecting an account works one of two ways:

• Inviting our team as a collaborator or admin directly on your existing account (for example, adding Mapo as a Page admin) — the recommended method for social platforms.
• Optionally sharing access details through an encrypted field in the client portal, at your discretion, when a direct invite isn’t practical. Anything entered this way is encrypted at rest (AES-256-GCM) and is not displayed back to anyone after it’s saved.

Direct, authorized connections (OAuth). We are developing a direct “Connect your account” flow for supported platforms — including Facebook and Instagram — that uses that platform’s own login and authorization process, rather than the invite/credential method above. This flow is not yet available to customers. When it launches:

• You will authorize the connection yourself, through Facebook/Instagram’s own login screen — Mapo Media will never ask you for your Facebook or Instagram password.
• Mapo Media will request only the specific permissions needed for the features it offers at the time (for example, connecting a Page or scheduling content) — not broad access to your account.
• We will receive the account/profile and Page/Business information and the authorization token(s) that platform issues for those permissions, and will use them only to provide the functionality you enabled (such as displaying the connected account or publishing/scheduling content you create in Mapo).
• You will be able to disconnect the integration from within Mapo Media, or revoke access at any time from your Facebook/Instagram account settings.

Disconnecting an integration stops Mapo Media from making further use of that connection, but does not automatically delete records we are required to keep for legitimate business, legal, or security reasons (for example, a record that a connection existed, or content already delivered through it). See Data Deletion for how to request removal of stored information.

Other third-party services

Mapo Media relies on the following service providers to operate the platform:

• Stripe — payment processing for orders and subscriptions.
• Supabase — authentication, database, and file storage for the platform, secured with role-based access and row-level security.
• Anthropic (Claude) — AI-assisted branding-guideline generation and product-detail suggestions, as described above.
• HubSpot — customer relationship management, support ticket handling, and scheduling (for example, booking a call).
• Social media and other connected platforms — such as Facebook, Instagram, and the other services listed in your account’s Access/Connections settings — only when and how you choose to connect them.

We share the information with each provider that is reasonably necessary for it to perform its function for us.

Cookies & similar technology

Mapo Media uses a small number of functional cookies to run the site and portal, including cookies that:

• Keep you signed in and maintain your session (set by our authentication provider, Supabase)
• Remember which brand you’re currently working on
• Remember your in-progress cart/checkout details and preferred currency

These are essential/preference cookies needed for the site to function — we do not currently use advertising cookies or a third-party analytics/tracking platform. If that changes, this policy will be updated.

Data retention

We retain information for as long as reasonably necessary to provide our services, including:

• Account information — for as long as your account is active, and afterward as needed for the purposes below.
• Transaction and billing records — as needed for accounting, tax, and legal obligations.
• Project, brief, and deliverable information — for as long as needed to deliver and support your projects.
• Support communications — as needed to resolve and reference past requests.
• Integration/connection information — until you disconnect it or request deletion, subject to the retention needs described above.

We do not have a single fixed retention period for every category. Where no fixed period applies, we retain information as reasonably necessary for providing our services, meeting legal and accounting obligations, resolving disputes, maintaining security, and other legitimate business purposes.

Data security

We use reasonable technical and organizational measures to protect information, including:

• Encryption in transit (HTTPS) across the site and portal
• Role-based access control, so staff and customer accounts see only what their role permits
• Database row-level security policies that scope data access by account
• Encrypted storage (AES-256-GCM) for any access credentials you choose to share for an integration
• Authenticated, session-based access to the client portal

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. We work to protect your information but cannot promise that unauthorized access, loss, or misuse will never occur.

When we share information

We share information only:

• With service providers who help us operate the platform (see Other third-party services)
• With a payment processor to complete a purchase
• With a social or business platform you’ve chosen to connect, to provide that integration
• To comply with a legal obligation, enforceable request, or to protect the rights, property, or safety of Mapo Media, our customers, or others
• To detect, investigate, or prevent fraud, abuse, or security incidents
• As part of a business transaction (such as a merger or acquisition), where required, with continued protection under a policy at least as protective as this one

We do not sell your personal information.

Your rights & choices

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information, subject to legitimate retention needs (see Data Deletion)
• Request a copy of certain information in a portable format, where applicable
• Withdraw consent or object to certain processing, where applicable

To exercise any of these rights, contact us at info@mapo.media. We’ll respond to verified requests consistent with applicable law.

International data transfers

Mapo Media uses cloud infrastructure and third-party service providers that may process information in countries other than your own. Where this occurs, we expect our service providers to protect your information consistent with applicable data-protection laws. Specific transfer mechanisms (for example, standard contractual clauses) will be documented here once confirmed for each provider.

Children’s privacy

Mapo Media is a business-to-business service intended for business and professional use. It is not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we’ll publish the revised version here with an updated “Last updated” date above. Material changes may also be communicated directly, where appropriate.

Contact us

Questions about this policy or how Mapo Media handles your information can be sent to info@mapo.media.