Privacy Notice

1. Data controller and scope

This notice explains how Bitsy Maps processes personal data of visitors, registered users, prospective customers, business representatives, and authorized business staff. For Mexico, it is published as a comprehensive privacy notice in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties. For the United States, it describes general practices and rights that may apply depending on your state, including California where applicable.

Privacy contact: bitsymaps@gmail.com.

2. Personal data we may process

• Identification and account: name, email, phone, encrypted password, role, associated business, branch, permissions, and verification status.
• Content and activity: profiles, reviews, comments, reactions, favorites, posts, images, catalogs, events, promotions, reservations, policies, loyalty, and forms you choose to use.
• Business contact: messages, requests, and data needed for support, training, billing, or plan administration.
• Technical data: IP address, session identifiers, cookies, device, browser, operating system, language, referrer, UTM, security logs, and usage metrics.
• Location: approximate or precise data only when the browser, device, or user allows it, or when inferred from necessary operation, for example to show nearby businesses.
• Payments: when a payment integration exists, we may receive transaction identifiers, status, amount, currency, and minimal reconciliation data; we do not seek to store full card details.

We do not deliberately request sensitive data. If a user or business posts sensitive information in text, images, reviews, or forms, they do so at their own responsibility and we may moderate or remove it.

3. Primary purposes

• Create, authenticate, protect, and manage accounts.
• Publish and maintain business profiles, branches, catalogs, hours, contacts, events, promotions, and public content.
• Operate requested features such as reviews, favorites, reservations, loyalty programs, policies, coupons, notifications, and administrative tools.
• Send transactional emails, account verification, password recovery, security alerts, and operational notices.
• Measure visits, clicks, conversions, and the performance of profiles or campaigns, preferably in aggregate form or with pseudonymized identifiers.
• Prevent abuse, spam, fraud, unauthorized access, attacks, and misuse of the platform.
• Comply with legal obligations, respond to authorities, and defend the rights of Bitsy Maps, users, businesses, or third parties.

4. Secondary purposes and choices

We may use your data for recommendations, product improvements, statistics, surveys, our own commercial communications, or feature promotion. You can opt out of non-essential communications through the unsubscribe links, the available settings, or by writing to bitsymaps@gmail.com. Opting out does not affect messages necessary to operate your account or fulfill obligations.

5. Who we share data with

• With businesses you interact with, when necessary to handle a review, reservation, coupon, policy, benefit, request, or business relationship.
• With providers that help us operate the platform, such as hosting, storage, email, security, technical analytics, maps, payments, support, and administrative tools.
• With authorities, advisors, acquirers, or third parties when necessary due to a legal obligation, investigation, defense of rights, fraud prevention, corporate reorganization, or protection of individuals.
• With the public, when you or a business post information in public areas of the platform.

We do not sell personal data. If in the future a practice could be considered a sale or sharing under applicable law, we will update this notice and enable the corresponding opt-out mechanism.

6. Transfers and processors

We may use providers located in Mexico, the United States, or other countries. When they process data on behalf of Bitsy Maps, they must use it only to provide their services and under reasonable contractual measures. Some transfers may be necessary to carry out our relationship with you, operate the platform, comply with legal obligations, or protect rights.

7. ARCO rights and other rights

In Mexico you may exercise rights of access, rectification, cancellation, and objection, as well as revoke your consent or limit the use/disclosure of your data, where applicable. Write to bitsymaps@gmail.com with your name, account email, the right you wish to exercise, a clear description of the request, and a reasonable document or means to verify your identity.

If you reside in the United States, certain state laws may grant you rights of access, correction, deletion, portability, limitation of sensitive data, objection to certain processing, non-discrimination, and opt-out of sale or sharing. California recognizes rights under the CCPA/CPRA for covered residents and businesses. We will honor verifiable requests where applicable law requires it.

8. Retention and security

We retain data for as long as necessary for the described purposes, to operate accounts, keep records, resolve disputes, prevent abuse, comply with legal obligations, or defend rights. We apply reasonable administrative, technical, and physical measures, such as protected sessions, hashing for passwords or technical identifiers, access controls, security logs, and security headers. Even so, no system connected to the internet can guarantee absolute security.

9. Minors

Bitsy Maps is not directed to children under 13 and does not seek to deliberately collect data from children. If you believe we received data from a person under 13 without verifiable authorization, write to us so we can review it and delete it where appropriate.

10. Changes to this notice

We may update this notice due to legal, technical, or operational changes. We will post the new update date and, if the change is material, we may notify you by reasonable means within the platform or by email.