1. Introduction
JayDeeCo Limited operates MapVG, a map-to-SVG conversion tool available at mapvg.com and editor.mapvg.com (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have in relation to it.
By using the Service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by displaying a notice within the Service.
The controller of your personal data is:
JayDeeCo Limited
919 Cameron Road, Gate Pa, Tauranga, New Zealand
Email: hello@mapvg.com
2. What Data We Collect
2.1 Account Data
When you register for a MapVG account, we collect:
- Your first and last name
- Your email address
- Your password (stored in hashed, non-reversible form – we cannot see your password)
- Your IP address at the time of account creation, and on subsequent logins
- An approximate geographic location derived from your IP address (country and region level)
- The date and time your account was created
- Your credit balance and transaction history
Your IP address and derived location are collected for security purposes, including fraud detection and the identification of unauthorised account access. This data is stored at account level and is not used for advertising or marketing profiling.
2.2 Map and Conversion Data
When you use the App to convert a map, we collect and store data associated with that conversion, including:
- The geographic area selected (bounding box coordinates)
- The size of the map area
- The detail level and layers selected
- The file size of the resulting export
- The date and time of the conversion
- Whether the conversion was free or credit-based
This data is linked to your account and is accessible to you via the "My Maps" section of the App. If you delete a map from My Maps, the file will be removed but anonymised metadata will be retained for operational and analytics purposes (see section 6).
2.3 Payment Data
When you purchase credits, payments are processed by Dodo Payments, which acts as the Merchant of Record. MapVG does not store your full payment card details. We do receive and store:
- A transaction reference
- The amount charged and currency
- The date of the transaction
- Your billing country (used for tax calculation)
Dodo Payments may collect additional information directly from you at checkout (such as billing address and email) for the purposes of payment processing, tax compliance, and fraud prevention. For full details, please refer to Dodo Payments’ Privacy Policy.
2.4 Usage and Analytics Data
We use Google Analytics 4 (GA4) to understand how visitors use the MapVG website and App. Google Analytics collects information including:
- Your IP address (used by Google for approximate geolocation and then retained by Google)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each
- Referring website or source
- General geographic location (country/city level)
This data is processed by Google LLC and may be transferred to and stored on servers in the United States. Google Analytics uses cookies to collect this information (see section 8). For more information on how Google uses this data, visit: policies.google.com/privacy.
2.5 Communications Data
If you contact us by email or submit a feedback or support ticket within the App, we retain the content of your message and your email address in order to respond to your enquiry and maintain a record of our correspondence.
If you have opted in to marketing emails, we retain your email address and marketing preferences for the purpose of sending those communications.
2.6 Technical and Log Data
Our hosting infrastructure may automatically record certain technical information when you access the Service, including:
- IP address
- Request timestamps
- HTTP status codes
- Error logs
This data is used for security monitoring, debugging, and infrastructure management. It is not used to identify individual users for marketing purposes.
3. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contract: Processing necessary to provide the Service to you, including account management, processing conversions, and handling payments.
- Legitimate interests: Processing necessary for our legitimate business interests, including analytics, security monitoring, fraud prevention, and improving the Service, where these interests are not overridden by your rights.
- Consent: Where you have given us explicit consent, such as opting in to marketing emails. You may withdraw consent at any time.
- Legal obligation: Where we are required to process data to comply with applicable law.
4. How We Use Your Data
We use the data we collect for the following purposes:
- To create and manage your account
- To process map conversions and deliver the resulting SVG files
- To manage your credit balance and process payments
- To send transactional emails, including receipts, conversion confirmations, and account-related notifications
- To send marketing emails, where you have not opted out
- To provide customer support and respond to enquiries
- To monitor usage patterns and improve the Service
- To detect, investigate, and prevent fraudulent or abusive activity
- To comply with legal obligations
5. Who We Share Your Data With
We do not sell your personal data. We share data only with the following categories of third-party service providers, and only to the extent necessary to deliver the Service:
5.1 Payment Processing
Dodo Payments – acts as the Merchant of Record and processes payment transactions, tax collection, and compliance. Dodo Payments is a data controller in its own right for payment data. Please refer to Dodo Payments’ Privacy Policy.
5.2 Email Delivery
Resend – delivers transactional and marketing emails on our behalf. Your email address is shared with Resend for this purpose.
5.3 Analytics
Google LLC – provides analytics via Google Analytics 4. Usage data including IP address is transmitted to Google and may be stored on servers in the United States. Google may use this data in accordance with its own privacy policy.
5.4 Hosting and Infrastructure
Your account data, map data, and exported files are stored on servers provided by our infrastructure partners. These providers act as data processors on our behalf and are contractually required to handle your data securely and only as instructed by us.
5.5 Legal Disclosure
We may disclose your personal data if required to do so by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of MapVG, our users, or others.
6. Data Retention
We retain your personal data for as long as your account is active, and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and maintain operational records.
Specific retention periods:
- Account data: Retained for the duration of your account. If you delete your account, your personal account data will be deleted within 30 days.
- IP address and location data: Retained at account level for the duration of your account and deleted alongside your account data within 30 days of account closure.
- Name and email address: Deleted within 30 days of account closure, except where required for ongoing legal or financial record-keeping.
- Map and conversion data: SVG files stored in your My Maps are retained indefinitely unless you delete them. If you delete a map, the file is removed but anonymised metadata (coordinates, size, file size, conversion date) is retained for operational and analytics purposes and is no longer linked to your account.
- Payment records: Transaction records are retained for a minimum of 7 years to comply with financial record-keeping obligations.
- Marketing email records: Retained until you opt out. Once you opt out, your marketing preference is recorded and your address is suppressed from future sends.
- Support correspondence: Retained for 3 years after the last correspondence.
- Analytics data: Google Analytics data is retained in accordance with our GA4 property settings, currently configured to 14 months.
- Log and technical data: Retained for 90 days and then deleted or anonymised.
7. International Data Transfers
MapVG is operated from New Zealand. Your data may be transferred to and processed in countries outside your own, including the United States, where our infrastructure and service providers are based.
If you are located in the EEA or UK, these transfers may be to countries that do not have an equivalent level of data protection law. Where this is the case, we rely on appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
- Transfers to providers that participate in recognised adequacy frameworks
New Zealand has been granted an adequacy decision by the European Commission, meaning transfers from the EEA to JayDeeCo Limited in New Zealand are permitted without additional safeguards.
8. Cookies
8.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They allow the site to remember information about your visit. MapVG uses cookies for two purposes: to keep you logged in to your account, and to collect anonymised analytics data.
8.2 Cookies We Use
Essential cookies: Required for the App to function. These include session cookies that keep you logged in to your account. These cannot be disabled without breaking the Service.
Analytics cookies: Set by Google Analytics 4 to collect anonymised usage data, including page views, feature usage, and conversion events. When you accept analytics cookies, Google Analytics stores first-party cookies (prefixed _ga) in your browser to distinguish unique visitors and sessions. These cookies do not contain personal information and cannot be used to identify you individually.
We do not use advertising cookies or third-party tracking pixels.
8.3 How We Collect Consent
Analytics cookies are blocked by default. When you first visit MapVG, a banner at the bottom of the page asks whether you would like to accept or decline analytics cookies. No analytics cookies are set, and no personally identifiable analytics data is collected, until you make a choice.
- If you click "Accept": Analytics cookies are enabled for that browser.
- If you click "Decline": No analytics cookies are set and your visit is not tracked.
Your choice is remembered in your browser’s local storage so you are not asked again on subsequent visits.
8.4 Withdrawing or Changing Your Consent
You can withdraw your consent at any time by clearing your browser’s local storage for mapvg.com or editor.mapvg.com. This will reset your preference and show the consent banner again on your next visit. You can also block cookies from MapVG entirely through your browser’s cookie settings.
To clear local storage in most browsers: open Developer Tools (F12), navigate to the Application or Storage tab, find Local Storage for the MapVG domain, and delete the entry named mapvg_consent.
8.5 Using MapVG Without Analytics Consent
If you decline cookies or have not yet made a choice, Google Analytics operates in a limited, cookieless mode. It may still receive basic page-load signals (without personal identifiers) that Google uses to provide aggregated, modelled data. No cookies are stored on your device in this state. Your ability to use the App is not affected.
9. Your Rights
9.1 Rights for All Users
Regardless of your location, you may:
- Access and update your account information via your account settings in the App
- Delete maps from your My Maps library
- Opt out of marketing emails at any time via your account settings or by using the unsubscribe link in any marketing email
- Request deletion of your account via the "Delete Account" option in your account settings
- Contact us at hello@mapvg.com with any privacy-related enquiries
9.2 Rights Under GDPR (EEA and UK Users)
If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to erasure: You have the right to request deletion of your personal data, subject to our legal obligations to retain certain records.
- Right to restriction: You have the right to request that we limit the processing of your personal data in certain circumstances.
- Right to data portability: You have the right to receive your personal data in a structured, machine-readable format.
- Right to object: You have the right to object to processing based on legitimate interests, including profiling.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@mapvg.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the EU, this is your national supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk.
9.3 Rights Under California Law (CCPA/CPRA)
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information.
MapVG does not sell personal information. To exercise any applicable rights, please contact us at hello@mapvg.com.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
- Passwords stored using one-way hashing
- Encrypted connections (HTTPS) across the website and App
- Access controls limiting which personnel can access personal data
- Use of reputable, security-certified infrastructure providers
No method of transmission over the internet or electronic storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and any applicable regulatory authority as required by law.
11. Children’s Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at hello@mapvg.com and we will delete it promptly.
12. Third-Party Links
The MapVG website may contain links to third-party websites or services. This Privacy Policy applies only to MapVG. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before providing any personal data.
13. New Zealand Privacy Act 2020
JayDeeCo Limited is subject to the New Zealand Privacy Act 2020. We are committed to complying with the Information Privacy Principles (IPPs) set out in that Act, which govern how we collect, store, use, and disclose personal information.
If you have a complaint about how we have handled your personal information, you may contact us at hello@mapvg.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.
14. Contact and Data Requests
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:
JayDeeCo Limited
919 Cameron Road, Gate Pa, Tauranga, New Zealand
Email: hello@mapvg.com
We aim to respond to all privacy-related enquiries within 30 days.
© MapVG / JayDeeCo Limited. All rights reserved.