Mapkita
Free check
← Back to Mapkita

Mapkita for ChatGPT: privacy policy

What the Mapkita plugin for ChatGPT receives when you use it, why, who it goes to, how long anything is kept, and what you can do about it. It applies only to the plugin; the rest of mapkita.com is covered by our main privacy policy.

Last updated: 27 October 2026

Who is responsible

The plugin and Mapkita are run by Nacho Gabaldon, an individual developer, who decides how the data described here is used. Contact for anything about your data: hello@mapkita.com, or the contact page.

In short

  • No account and no sign-in. We never receive your name, your OpenAI account or your ChatGPT conversation: only what each tool is given, plus the few details ChatGPT adds that are listed below.
  • Everything the plugin looks up is public Google Maps information about businesses. Nothing Google returns is stored.
  • Your email address is used only if you ask for the report by email, and kept only if you also ask to hear from us.
  • We do not sell data, show ads, or use anything you send to train AI models.

What comes with every request

  • An anonymous user id that ChatGPT adds, which does not tell us who you are. We use it only to keep each person to a fair number of requests a day.
  • An approximate location (latitude and longitude, around city level) that ChatGPT adds. We use it only to rank businesses that share a name, so the branch near you comes first, and pass it to Google for that search.
  • The network address (IP) of the request. Requests from ChatGPT come from OpenAI’s servers. We compare the address, in memory, with the list of addresses OpenAI publishes (which we download from openai.com without sending anything about you), to tell real ChatGPT requests apart. When a request is not from ChatGPT, or comes without the anonymous id, the address is what the daily limit counts instead.

Anything else ChatGPT may send with a request, such as language or app version, is ignored.

Tool by tool

Check a Google Maps profile (check_business_profile)

You give it:
a business, as its name with its city or area, a Google Maps link, a Google Maps share link (maps.app.goo.gl), or Google's id for it (placeId).
Sent to:
Google (Places API) receives the search text with the approximate location (or the map position written inside a Google Maps link you pasted), or the placeId. A share link is first resolved with Google's own link service, which receives only the link.
It returns to ChatGPT:
the business’s public Google Maps details (placeId, name, address, category, rating, number of reviews, whether it is open or closed, phone, website, opening hours, number of photos, Google Maps link); Mapkita’s visibility, AI-readiness and completeness scores, which checks pass, what to fix first and any closure notice; the link to its Google review box; other businesses with a similar name (their placeId, name and address), so you can pick the right branch; and whether the report can be emailed.
We keep:
nothing about the business or the request (see “How long we keep it” for the daily counters and the 24-hour “not found” note).

Compare with nearby competitors (compare_nearby_competitors)

You give it:
a business, as its name with its city or area, a Google Maps link, a Google Maps share link (maps.app.goo.gl), or Google's id for it (placeId), and optionally a search radius.
Sent to:
Google (Places API) receives the search text with the approximate location (or the map position written inside a Google Maps link you pasted), or the placeId. A share link is first resolved with Google's own link service, which receives only the link. Then Google receives the business's placeId, its map position and its Google category (or the category's name) to find similar businesses nearby.
It returns to ChatGPT:
the business's placeId, name, address, category, rating, number of reviews and Google Maps link; up to ten similar businesses nearby with their placeId, public name, address, category, rating, number of reviews, distance and Google Maps link; the local median rating and number of reviews; where the business ranks; and other businesses with a similar name (their placeId, name and address), so you can pick the right branch.
We keep:
nothing.

Get a Google review link (get_review_link)

You give it:
a business, as its name with its city or area, a Google Maps link, a Google Maps share link (maps.app.goo.gl), or Google's id for it (placeId).
Sent to:
Google (Places API) receives the search text with the approximate location (or the map position written inside a Google Maps link you pasted), or the placeId. A share link is first resolved with Google's own link service, which receives only the link. With a placeId, nothing is sent anywhere.
It returns to ChatGPT:
the business’s placeId, name and address; the link that opens its Google review box; a link to a QR code image of it on mcp.mapkita.com; a link to our free printable review card; Google’s rules for asking for reviews; and other businesses with a similar name (their placeId, name and address), so you can pick the right branch. When you open the QR image, your browser requests it from our server like any web page. The review card is on our website, where our main privacy policy applies, including its analytics.
We keep:
nothing.

Read Google reviews (get_recent_reviews)

You give it:
a business, as its name with its city or area, a Google Maps link, a Google Maps share link (maps.app.goo.gl), or Google's id for it (placeId).
Sent to:
Google (Places API) receives the search text with the approximate location (or the map position written inside a Google Maps link you pasted), or the placeId. A share link is first resolved with Google's own link service, which receives only the link.
It returns to ChatGPT:
the business's placeId, name, address, category, rating, number of reviews and Google Maps link; up to five public Google reviews, each with the reviewer's public Google name, a link to their Google Maps profile, the rating, the text, when it was written and a link to the review; and other businesses with a similar name (their placeId, name and address), so you can pick the right branch. Reviewers are named because Google requires it when its reviews are shown.
We keep:
nothing: reviews are passed to ChatGPT when asked for and not stored.

Email the Google Maps report (email_profile_report)

You give it:
an email address you type, the business's placeId, and whether you yourself asked to receive tips from us (keepInTouch).
Sent to:
Google (Places API), which receives the placeId. mapkita.com’s server, which receives the email address, whether you asked for tips, the business name and its check (placeId, name, address, category, rating, number of reviews, Google Maps link, Mapkita’s scores, checks and what to fix first) and sends the email. Our email provider, which receives the address and the email’s content to deliver it.
It returns to ChatGPT:
whether the email was sent, the address with most of it hidden, the business's placeId and name, whether you asked for tips, and a note on what happens to your address.
We keep:
If you did not ask for tips: not your address. Only scrambled codes of it (keyed hashes, which cannot be turned back into it): one of the address and the business, for 24 hours, so the same report is not sent twice in a day; and one of the address, for up to 3 days, for the limit of three reports a day per address. If you asked for tips: the same codes, plus your address, the business name, its placeId, the date and whether the report was sent, and a record of the check (placeId, Mapkita’s scores, checks and what to fix first). The Mapkita team sees these in its own tools and in a daily summary email, uses them to send you the occasional tip about that Google page, and may write to you. Kept until you reply “stop” or ask us to delete them.

The report email

The email contains the business’s name, Mapkita’s score, which checks pass and fail, what to fix first, and links to free tools and guides on mapkita.com. It sells nothing. Its links carry tags that tell our website’s analytics the visit came from this email. When you open it, your email app loads our logo from mapkita.com and the text font from Google Fonts, which, like any image or font on the web, see the network address of the device that loads them.

Why we use it

  • To do what you asked: find the business on Google Maps, check it, compare it, read its reviews, give its review link, or email its report.
  • To keep the service available and fair: daily limits per person, at most one identical report per address a day, and a daily spending cap.
  • To count how much the plugin is used: totals per tool and day, with nothing that identifies anyone.
  • Only if you asked for them: to send you the occasional tip about your Google page, and for the Mapkita team to write to you.

Who receives it

We share data only with the services that make the plugin work, for that purpose only:

  • Google: the Places API (search text, approximate location or map position, placeId, category) and its link service (share links you paste), to look up public business information; Google Fonts, when the report email is opened.
  • OpenAI: the results of each tool go back to ChatGPT, which OpenAI runs under its own privacy policy.
  • Vercel: hosts the plugin's server and our website, and keeps short technical request records.
  • Upstash: stores the plugin's daily counters, the 24-hour codes and notes described here.
  • Supabase: our website's database, which holds the 3-day counter for report emails, the details of people who asked for tips, and the “stop” list.
  • Resend: delivers the report emails, and the Mapkita team's daily summary.
  • Authorities, only where the law requires it.

These providers may process data outside the Philippines, including in the United States. We do not sell personal data, show advertising, or let anyone use it for their own purposes.

How long we keep it

  • Anonymous user id or IP address: only as a keyed hash, in daily counters that expire after 24 hours. Never written to our application logs.
  • Approximate location, search text, links, business details, competitors and reviews: not kept. Each answer is built when you ask and then discarded.
  • “Not found” notes, when Google says a placeId or a search does not exist: 24 hours, holding only that id or a scrambled code of the search.
  • Usage and spending totals per day: 3 days, with nothing that identifies anyone.
  • Our application logs: the tool used, the outcome, how long it took and error codes; nothing you typed and no identifiers. They stay with our host for at most 3 days.
  • Our host's technical request records (time, path, network address, result; the path of a QR image contains the business's placeId): at most 3 days.
  • Report email without tips: the address is not kept; its scrambled codes go after 24 hours in the plugin and within 3 days on our website's server. Our email provider keeps delivery records under its own privacy policy (resend.com/legal/privacy-policy).
  • Report email with tips: until you reply “stop” or ask us to delete it. After “stop”, your details are deleted within a day.
  • The “stop” list: if you reply “stop”, we keep only your address on it, so we never email you again.

Your choices and rights

  • Use every tool without giving an email address.
  • Get the report by email without agreeing to anything else.
  • Reply “stop” to any email from us and we will not email you again.
  • Ask to see, correct or delete what we hold about you by writing to hello@mapkita.com. We answer within 30 days.
  • Remove the plugin from ChatGPT at any time.

We handle personal data under the Philippine Data Privacy Act of 2012 (RA 10173). You can also complain to the National Privacy Commission (privacy.gov.ph). If you are somewhere with additional rights, those apply too.

Security

All traffic is encrypted (HTTPS). The plugin’s server and our website talk to each other with a secret key that never leaves our servers, and identifiers are stored only as keyed hashes.

Children

The plugin is for people running a business and is not directed at children.

Changes

If the plugin starts using data in a new way, we update this page and its date before the change goes live. See also our main privacy policy, the terms and how the plugin works.

Questions about this document? Email hello@mapkita.com.