Version 2026-08-10 · Draft for legal review

Privacy Notice

This notice explains what personal data MapMyAI processes when you use OrgScan.

Roles

Your organisation is the controller of employee directory data, survey answers, and policy acknowledgements. MapMyAI is the processor for that customer content. For admin account data and billing metadata, MapMyAI (and Paddle for payments) act as independent controllers of their respective records.

What we process

• Admin identity: name, work email, role, authentication events
• Organisation settings, campaign configuration, usage counters
• Survey responses and optional identified fields when you choose identified mode
• Billing projection: Paddle customer, subscription, transaction, and refund request IDs
• Consumption events for exports and downloads used for entitlements and refund eligibility

Payments

Card and tax data are handled by Paddle. We store only the billing identifiers and status needed to unlock features and support refunds.

Retention

Customer content follows each organisation’s retention policy. Billing and audit records are kept as required for accounting, security, and dispute handling.

Rights

Individuals may request access, correction, or erasure of their personal data through their organisation or, where applicable, through MapMyAI support. Mandatory local law prevails.