MAPS Intelligence
MAPS

Privacy policy

Last updated: 8 October 2026

This policy explains what personal data MAPS INTELLIGENCE SRL processes when you visit the maps-intelligence.com website, write to us, book a demo or use the MAPS platform, why we process it and what rights you have. It is written in plain language: if anything is unclear, write to us. This is a translation for convenience: in case of any difference, the Italian version prevails.

1. Who the data controller is

The controller is MAPS INTELLIGENCE SRL, Via Nicastro 1, 20137 Milano — VAT and tax code 14920450963. For any privacy question or to exercise your rights, write to privacy@maps-intelligence.com.

2. What data we process, why and on what legal basis

Browsing the website. The hosting provider records technical data such as IP address, browser and pages requested, which are needed to run the website and protect it. For visit statistics we use Vercel Web Analytics, which does not use cookies and does not store the IP address: visitors are counted with an anonymous code that changes every day. Legal basis: our legitimate interest in running, protecting and improving the website.

Demo requests and contacts. When you fill in the “Book a demo” form we collect your name, role, company, email, team size, your interest (demo or beta) and the message you write. The form sends this data by email to our team; we do not store it in the platform’s database. The same applies to emails you send to @maps-intelligence.com addresses. We use them only to reply to you and to organize the demo. Legal basis: responding to your request and pre-contractual measures.

Platform account. To use MAPS we process your email, name, organization and role in the workspace. You sign in with a link sent by email. We also record usage data — which features you use and their cost — without storing the text of your requests to the AI models. Legal basis: performance of the contract.

Content uploaded by customers. Documents, sales data, CRM contacts and other materials that a customer uploads to its projects belong to the customer, who is their controller: MAPS processes them on the customer’s behalf, as data processor, according to its instructions and the data processing agreement. For CRM contacts, the email is turned into a code, the AI works only on aggregated data, and the customer confirms that it has a legal basis for the import.

Public information used for market research. To produce its analyses, MAPS reads public sources: articles, websites, reviews, public social media posts, public professional profiles. These sources may contain people’s names or usernames. We use them only for aggregated market analysis and, for research on customers’ target companies, to identify professional roles; we do not collect email addresses or phone numbers. Legal basis: our and our customers’ legitimate interest in market analysis. If you believe MAPS processes any of your public data, you can object by writing to us.

3. Who we entrust data to

To run the website and the platform we rely on providers that process data on our behalf, under contracts that bind them to use it only to deliver the service:

  • Infrastructure — website hosting and functions (Vercel), database (Neon, with servers in Frankfurt), background processing (Railway), canvas collaboration (Cloudflare), PDF generation (Browserless).
  • Artificial intelligence models — Anthropic (Claude), Groq and OpenAI receive via API the text needed to produce analyses, answers and content. By contract, they do not use it to train their models.
  • Email — Resend, for platform emails and the mail of our addresses.
  • Search and market data — services such as Perplexity, Exa, Bright Data, Apify and DataForSEO receive the search queries needed to read the market, not the data in your projects.
  • Image, video and voice generation — services such as Replicate and ElevenLabs, only when you use these features.
  • Services you connect — for example HubSpot or Google Drive: data flows only if you activate the connection.

The up-to-date list of providers is available on request at privacy@maps-intelligence.com. We do not sell personal data and do not transfer it to third parties for marketing purposes.

4. Transfers outside the European Union

Some providers, in particular the artificial intelligence model providers, are based or have servers in the United States. In these cases the transfer takes place on the basis of an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified providers, or of the standard contractual clauses approved by the Commission.

5. How long we keep data

  • Demo requests and emails — for the time needed to handle the request and the relationship that follows from it.
  • Accounts and projects — for the duration of the contract. When the account is closed, or on request, we delete the data; projects can also be deleted directly from the platform. Some technical copies, such as backups, are deleted according to their rotation schedules.
  • Data required by legal obligations, such as tax data — for the period required by law.

6. How we protect data

Each organization’s data is kept separate and every request is checked against it on the server; communications are encrypted; CRM contact emails are pseudonymized and, if the customer chooses so, encrypted with a key that only the customer knows. No measure eliminates every risk, but we work to reduce it.

7. Your rights

You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. Write to privacy@maps-intelligence.com: we reply within one month. If the data was uploaded by one of our customers, we will direct you to that customer, who is its controller.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

8. Artificial intelligence and decisions

MAPS uses artificial intelligence to analyze the market and produce content, which is marked in the platform as AI-generated. We do not make decisions that produce legal effects on people based solely on automated processing: the analyses are work tools, and decisions remain with people.

9. Minors

The website and the platform are designed for professionals and companies and are not directed at people under 18.

10. Changes

We may update this policy when the service or the law changes. The date of the last update is shown at the top; for significant changes we will notify platform users.