Privacy Policy

Your privacy matters to us. This Privacy Policy explains what information OcuMap Inc. collects, how we use it, and your rights. Please read it carefully.

01

Introduction

OcuMap Inc. (“OcuMap,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who use our visual documentation platform (“Service”). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use the Service at ocumap.com and related applications.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

02

Scope

This Privacy Policy applies to information collected through:

The OcuMap website at ocumap.com and any subdomains
The OcuMap web application and any desktop or mobile applications
Published Viewers created and shared through the Service
Communications between you and OcuMap by email or other means

This Policy does not apply to information collected by third-party services, websites, or applications that you may access through links on the Service. We encourage you to review the privacy policies of those third parties.

03

Information We Collect

Information You Provide Directly

Account information: Name, email address, password, company name, and job role when you create an account
Payment information: Billing address, card type, and last four digits of your payment card. Full card details are collected and stored by Stripe, Inc. — OcuMap does not store full payment card numbers
User Content: Photos, videos, 360 imagery, point clouds, drawings, documents, GPS data, and all other files you upload to the Service
Communications: Messages you send to us by email or through support channels
Profile information: Any optional information you add to your account profile

Information Collected Automatically

Usage data: Pages visited, features used, actions taken, session duration, and interaction patterns within the Service
Device information: Browser type and version, operating system, device type, screen resolution, and language settings
Log data: IP address, access timestamps, referring URLs, and error logs
Cookies and similar technologies: As described in Section 7

Information from Third Parties

If you choose to sign in using a third-party identity provider — Google, Microsoft, or LinkedIn — we receive basic profile information from that provider (typically your name and email address) as permitted by your settings with them. We do not receive or store your identity provider password. Your use of those providers is also subject to their own privacy policies.

GPS and Location Data

If you upload media that contains GPS metadata, that location data will be stored and used to place your content on maps within the Service. You are responsible for ensuring that the capture and sharing of GPS-tagged content complies with applicable law and respects the privacy of any individuals whose location may be reflected in the data.

04

How We Use Information

We use the information we collect to:

Purpose	Legal Basis
Provide, operate, and maintain the Service	Contract performance
Process payments and manage Subscriptions	Contract performance
Authenticate users and maintain account security	Contract performance / Legitimate interest
Send transactional emails (receipts, account notices, password resets)	Contract performance
Provide customer support and respond to inquiries	Legitimate interest
Monitor and improve Service performance and reliability	Legitimate interest
Detect, prevent, and investigate fraud, abuse, or security incidents	Legitimate interest / Legal obligation
Comply with applicable legal obligations	Legal obligation
Send product updates or marketing communications (with opt-out)	Legitimate interest / Consent
Analyze aggregate, anonymized usage patterns to improve the Service	Legitimate interest

We do not use your User Content to train machine learning or artificial intelligence models. We do not sell your personal information to third parties.

05

How We Share Information

OcuMap does not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers (Subprocessors)

We share information with third-party service providers who help us operate the Service, as listed in Section 6. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Published Viewers

When you create and share a Published Viewer, the content you select for that viewer becomes accessible to anyone with the link (or, if password-protected, anyone with the link and password). You control what content is included and who receives the link. OcuMap is not responsible for further sharing or distribution of Published Viewer links by recipients.

Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or governmental authority, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of OcuMap, our users, or the public; or (c) detect, prevent, or address fraud or security issues.

Business Transfers

If OcuMap is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you by email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information for other purposes with your explicit consent.

06

Subprocessors

OcuMap uses the following third-party service providers to operate the Service. Each is bound by contractual obligations to protect your data:

Provider	Purpose	Location
Amazon Web Services (AWS)	Cloud infrastructure, data storage, and hosting	United States
Google Maps	Mapping and geospatial services	United States
Mapbox	Mapping and geospatial services	United States
Autodesk	File format support and 3D processing	United States
Stripe, Inc.	Payment processing and billing	United States
Google (Sign in with Google)	Optional third-party authentication	United States
Microsoft (Sign in with Microsoft)	Optional third-party authentication	United States
LinkedIn (Sign in with LinkedIn)	Optional third-party authentication	United States
Uppy	Open-source file upload interface (client-side only — no data transmitted to Uppy servers)	N/A — open source

OcuMap may update its list of subprocessors from time to time. We will notify users of material changes to this list by updating this Privacy Policy and, where appropriate, by email.

07

Cookies & Tracking Technologies

OcuMap uses cookies and similar tracking technologies to operate and improve the Service. A cookie is a small data file stored on your device by your browser.

Types of Cookies We Use

Strictly necessary cookies: Required for the Service to function. These cannot be disabled. They include session authentication, security tokens, and load balancing cookies.
Functional cookies: Remember your preferences and settings, such as language and display options.
Analytics cookies: Help us understand how users interact with the Service so we can improve it. We use anonymized or aggregated data where possible.
Payment cookies: Set by Stripe to process payments securely.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. However, disabling strictly necessary cookies may prevent the Service from functioning properly.

We do not respond to browser “Do Not Track” signals at this time, as no industry standard has been established for their interpretation.

Third-Party Tracking

Third-party services integrated into the Service, such as Google Maps and Mapbox, may set their own cookies when you use map-related features. These are governed by those providers’ privacy policies. OcuMap does not control third-party cookies.

08

Data Security

OcuMap implements commercially reasonable technical and organizational security measures to protect your information against unauthorized access, loss, destruction, or alteration. These measures include:

Encryption of data in transit using TLS/HTTPS
Encryption of data at rest on AWS infrastructure
Access controls limiting employee access to customer data
Regular security reviews and monitoring
Secure payment processing through Stripe (OcuMap does not store full payment card details)

However, no method of transmission over the internet or electronic storage is completely secure. OcuMap cannot guarantee absolute security and is not responsible for security breaches beyond our reasonable control.

If you become aware of any security vulnerability or breach related to the Service, please contact us immediately at legal@ocumap.com.

You are responsible for maintaining the security of your account credentials. Do not share your password with others. OcuMap will never ask for your password via email or support channels.

09

Data Retention

We retain your personal information and User Content for as long as your account is active and as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Active accounts: Data is retained for the duration of your account
After account closure: User Content is retained for 30 days, after which it may be permanently deleted
Billing records: Retained for 7 years as required by applicable tax and accounting laws
Support communications: Retained for up to 3 years
Log data: Retained for up to 90 days for security and operational purposes

You may request deletion of your personal information at any time by contacting legal@ocumap.com. We will fulfill deletion requests within 30 days, subject to legal retention obligations.

We strongly recommend exporting any User Content you wish to retain before closing your account, as deleted data cannot be recovered.

10

Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Access

Request a copy of the personal information we hold about you.

Correction

Request that we correct inaccurate or incomplete information.

Deletion

Request that we delete your personal information, subject to legal retention requirements.

Portability

Request a machine-readable copy of your personal information.

Opt-Out of Marketing

Unsubscribe from marketing communications at any time via the unsubscribe link in emails or by contacting us.

Restriction

Request that we restrict processing of your information in certain circumstances.

To exercise any of these rights, contact us at legal@ocumap.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. To submit a CCPA request, contact legal@ocumap.com.

GDPR (EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to object to processing, the right to withdraw consent, and the right to lodge a complaint with your local data protection authority. OcuMap’s primary processing activities occur in the United States. By using the Service, you acknowledge that your information will be transferred to and processed in the United States.

11

Children's Privacy

The Service is not directed to children under the age of 18. OcuMap does not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided personal information to OcuMap, please contact us at legal@ocumap.com and we will promptly delete such information.

12

International Data Transfers

OcuMap is based in the United States, and the Service is operated on infrastructure primarily located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the Service, you consent to the transfer of your information to the United States as described in this Privacy Policy. OcuMap takes reasonable steps to ensure that transfers of personal information receive an adequate level of protection.

13

Changes to This Policy

OcuMap may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify you by:

Updating the “Last updated” date at the top of this page
Sending an email notification to the address associated with your account
Displaying a prominent notice within the Service

Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14

Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OcuMap Inc. — Privacy

Houston, Texas, USA

Privacy & legal inquiries: legal@ocumap.com

General support: support@ocumap.com

We will respond to privacy requests within 30 days of receipt.