Privacy Policy

MapPush ("we", "us") operates mappush.com, a service that helps local businesses schedule Google Business Profile posts. This policy explains what we collect and how we use it.

Information we collect

• Google account info — name, email, and profile photo when you sign in with Google OAuth.
• Google Business Profile access — OAuth tokens scoped to manage your GBP listings and publish posts. We do not receive your Google password.
• Campaign content — photos you upload, business descriptions, post captions, and scheduling preferences.
• Payment info — processed by Stripe. We store Stripe customer and subscription IDs, not full card numbers.
• Usage data — standard server logs (IP address, browser type, pages visited) for security and debugging.

How we use your information

• Authenticate your account and maintain your session
• Generate AI post captions and publish scheduled posts to Google Business Profile
• Process payments and manage subscriptions
• Send transactional emails about post status or account issues
• Improve the service and fix bugs

Third-party services

We share data only with providers required to run MapPush:

• Google — OAuth and Business Profile API
• Stripe — payment processing
• Vercel — hosting and file storage (Vercel Blob for uploaded images)
• Google Gemini — AI caption generation from your photos and business context
• Inngest — background job scheduling for post publishing

Data retention

We retain your account data while your account is active. You may request deletion by emailing hello@mappush.com. OAuth tokens are removed when you disconnect or delete your account.

Security

Sessions use HttpOnly cookies. OAuth tokens are stored encrypted in our database. We use HTTPS everywhere in production.

Your rights

You may access, correct, or delete your data by contacting us. You can revoke MapPush's Google access at any time from your Google Account permissions.

Contact

Questions about this policy: hello@mappush.com