Privacy Policy

When you create a Mapwright account, we collect your email address and the content you add to the app: your projects, maps, cards, notes and any files or sketches you upload. We also keep basic usage records, like your monthly credit spend, so we can show you your own usage back.

If you connect a GitHub or Notion account, we store the access token needed to keep that connection working, encrypted at rest. We never see your card details directly - Stripe handles payment collection and only shares back what we need to run your subscription (plan, status, renewal date).

To run the product: rendering your maps, generating specs and demo content with your AI agent, billing your subscription, and emailing you things like magic sign-in links or team invitations.

We don't sell your data, and we don't use your project content to train AI models.

The services that process data on our behalf, each only for the purpose below:

• Supabase - hosts our database and handles sign-in
• Stripe - processes payments and manages subscriptions
• Resend - sends transactional emails (sign-in links, invitations)
• Anthropic - processes the prompts and project content your AI agent sends when you chat or generate a spec
• GitHub and Notion - only if you choose to connect them, and only for the access you grant

Every table in our database enforces Row Level Security, meaning access to your data is checked at the database layer itself, not only in application code. Connected-account tokens are stored in an encrypted vault rather than in plain text.

You can request a copy of your data or ask us to delete your account and its contents at any time by contacting us below. If you're in the UK or EU, this includes the rights GDPR gives you over your personal data.

Questions about this policy: hello@mapwright.co.uk