Privacy Policy

Mapkita Technologies Inc. (Mapkita), Metro Manila, Philippines. We are the data controller for the information described here. Contact: hello@mapkita.com.

• Account data — the name and email address of the person who signs up, so we can identify the account owner.
• Business data — the public details of the business you ask us to manage: name, address, phone, hours, categories, photos, ratings and reviews.
• Google account data — when you connect Google, we receive an access token, a refresh token and your email address. See the section below.
• Meta account data — if you connect Facebook or Instagram, the Pages you grant, their access tokens, and the messages sent to those Pages.
• Usage data — basic logs needed to run and secure the service (timestamps, errors, IP address of requests).

We do not collect payment card details ourselves; payments, when applicable, are handled by a payment processor.

When you connect your Google Business Profile, you grant the business.manage scope. With it we access, strictly on your behalf:

• The list of Business Profile accounts and locations you manage — to know which listing to work on.
• Your reviews and their replies — to show them to you and to publish the replies you approve.
• Your profile information (hours, phone, categories, attributes) — to show it and to apply the changes you approve.
• Your Business Profile performance metrics (views, calls, direction requests, website clicks) — to show you results.

We also request openid and email so the app can display which Google account is connected.

Limited Use. Mapkita’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not use Google user data to serve advertising, we do not sell it, we do not transfer it except as needed to provide the service you asked for, and no human reads it except with your explicit permission, for security purposes, or where required by law.

We are an independent service. Mapkita is not affiliated with, sponsored by, or endorsed by Google.

To draft review replies, posts and suggestions, we send the relevant text — the review or message content, and the business details needed for context — to our AI provider (DeepSeek) for processing. That content is processed only to generate the draft you requested. Drafts are shown to you; nothing is published without the approval level you set.

We do not sell personal data. We share it only with the processors that make the service work:

• Hosting and infrastructure providers, to run the application and store your data.
• Our AI provider, as described above.
• The platforms you connect (Google, Meta), to carry out the actions you approve.
• Authorities, where we are legally required to.

Access tokens are stored encrypted at rest by our storage provider and are never exposed to the browser or to other customers. Access to production data is restricted to the people who operate the service.

We keep your data for as long as your account is active. When you disconnect a platform, we delete the corresponding tokens immediately. When you close your account, we delete your data within 30 days, except where we must retain records by law.

• Disconnect at any time — from Integrations inside the app, or from your Google account permissions. Revoking access stops all further data access immediately.
• Access, correct, export or delete your data — write to us and we will action it.
• Object to or restrict processing, and withdraw consent, without affecting what happened before.

We handle personal data under the Philippine Data Privacy Act of 2012 (RA 10173). If you are in a jurisdiction with additional rights, those apply too.

The service is for businesses and is not directed at children under 18.

If we change this policy materially, we will update the date above and notify account owners by email before the change takes effect.