Mapo

Privacy Policy

Last updated: September 6, 2026

1. Who we are

Mapo (“Mapo,” “we,” “us”) provides map-powered lead collection and enrichment software for agencies. This policy describes how we handle personal data on our marketing site (including mapo.axm.app) and, at a high level, in connection with the Mapo application (including app.mapo.axm.app). Product usage under a paid or trial agency agreement may also be governed by that agreement or a data processing addendum.

2. Information we collect

Information you provide. Contact and signup forms may collect your name, work email, agency or company name, phone number, message content, and related details you choose to submit.
Account and workspace data. When you use the Mapo application we process account credentials, organization membership, roles, and configuration you set (for example API keys you supply for Google Places or enrichment providers).
Business and lead data. The product processes business listings, places, contact channels, research artifacts, and related enrichment results that you collect or generate in your workspace. That data may include personal data about individuals associated with those businesses (for example names, titles, emails, or phone numbers obtained via sources you authorize).
Technical data. We may collect device and log information such as IP address, browser type, pages viewed, referring URLs, and approximate timestamps to operate, secure, and improve the services. Cookies or similar technologies may be used for session continuity, preference storage, and basic analytics on the marketing site.

3. How we use information

We use personal data to respond to inquiries; evaluate and provision agency workspaces; provide, maintain, and secure the Mapo product; process enrichment and verification workflows you initiate; communicate service-related notices; improve features and documentation; and comply with law. We do not sell personal data.

4. Sources and processors

Depending on configuration, Mapo may call third-party services you enable or that we use as infrastructure — for example Google Places (collection), search or enrichment providers, email verification vendors, hosting, email delivery, and error monitoring. Those providers process data under their terms and our instructions where we act as a processor for your agency customer data.

5. Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, we rely on one or more of: performance of a contract; legitimate interests in operating a B2B SaaS product and responding to business inquiries; consent where required (for example certain cookies or marketing emails); and legal obligation.

6. Retention

Marketing inquiries are retained as needed to respond and for reasonable follow-up. Workspace and lead data are retained for the life of the agency account and for a limited period afterward for backup, dispute, and legal compliance, unless a shorter deletion timeline is agreed in writing.

7. Sharing

We share personal data with service providers who assist in hosting and operating Mapo; with enrichment or maps providers when you run features that call them; if required by law or to protect rights and safety; and in connection with a merger, acquisition, or asset sale subject to appropriate safeguards. Agency customers control access within their workspace (owners, admins, members).

8. Security

We apply administrative and technical measures appropriate to the risk, including encrypted transport (TLS), access controls, and org-scoped data isolation in the application. No method of transmission or storage is fully secure; please use strong credentials and protect API keys stored in your org settings.

9. Your rights

Depending on your location you may have rights to access, correct, delete, or restrict processing of personal data, or to object or port data. Marketing-site and account requests can be sent to the contact below. If we process customer lead data on behalf of an agency, we will redirect individual requests to that agency where appropriate.

10. International transfers

Mapo may be hosted or supported in countries other than your own. Where required, we use appropriate transfer mechanisms (such as standard contractual clauses) with processors.

11. Children

Mapo is a business service and is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes

We may update this policy from time to time. The “Last updated” date will change when we do. Material changes may also be communicated via the product or email for active customers.

13. Contact

Privacy questions: use the contact form on this site or email the address provided in your order confirmation / agency agreement. For product data subject requests involving lead records, contact your Mapo agency administrator first.