Privacy Policy

Effective: 10 November 2026 | Applies to users in Australia, New Zealand, Canada and the United Kingdom

1. Who is responsible

MapMyLot (mapmylot.com) is operated from Queensland, Australia. We are responsible for (the "controller" of) the personal information described here. Contact: [email protected].

2. What we collect

Lookups: when you search for an address or open a lot, we record the address you typed (if you typed one), the lot opened, the date and time, and either your IP address (without an account) or your account (when signed in). We use this to apply the free daily limit, prevent abuse, and understand which areas and features are used.
Server logs: our web server records IP addresses, the pages requested and timestamps, for security and diagnosis.
Account (if you create one): your email address and sign-in, handled by Clerk. We keep your plan and your saved properties, and for Pro any company name and logo you upload for your reports.
Purchases: payments are made through Stripe's checkout, so your card details never reach us. We receive and keep the email address you give at checkout, what you bought, the amount and currency, and a payment reference.
Report delivery: we email your report link to the email address you gave at checkout.
Coverage waitlist: if you ask to be told when we cover your area, we keep your email address and the area.
Analytics and session replay: Google Analytics (loaded through Google Tag Manager) and PostHog record page views, clicks and feature use. PostHog session replay records what happens on the page, which can include the addresses and lots shown on screen. What you type into form fields is masked, and the link that opens a paid report is never recorded. For signed-in users we link this to your account ID and email address.
Google Ads: when you buy a report or start Pro, a Google Ads conversion tag records the purchase (the amount, currency and an order reference) so we can measure our Google ads.
Meta Pixel (Australia and New Zealand only): if you visit from Australia or New Zealand, the Meta Pixel on our home page and map sets the _fbp cookie and tells Meta when a page loads, when you find a lot, see a report offer or start a checkout, and when you sign up, buy a report or start Pro (for a purchase, the amount, currency and an order reference). We use it to measure our Meta ads. We never send Meta your email address, the addresses you search or your payment reference. Visitors from other countries do not load it. You can control how Meta uses this in your Meta ad preferences.
Feedback: if you send a bug report or idea, we keep your message, the page and lot you were on, browser details and any reply email address you give, and email it to our support mailbox.

3. Why we use it (lawful basis for UK users)

To provide the service, process purchases and deliver reports (performing our contract with you).
To apply limits, prevent fraud and keep the service secure (legitimate interests).
To understand and improve the service and measure our ads (legitimate interests).
To keep records the law requires, such as payment records (legal obligation).

We do not sell your personal information.

Stripe: payments (privacy)
Clerk: accounts and sign-in (privacy)
Microsoft 365: sending report links and support emails (privacy)
Cloudflare: content delivery and protection; every request to mapmylot.com passes through it (privacy)
Google: Analytics, Tag Manager, Ads conversion measurement and Search Console (privacy)
PostHog: analytics and session replay, stored in the United States (privacy)
Meta: measures our Meta ads, for visitors in Australia and New Zealand only (privacy)
Address search services: to find an address, the text you type can be sent to Land Information New Zealand (New Zealand addresses), the BC Address Geocoder (British Columbia addresses) and, as a fallback, OpenStreetMap Nominatim (privacy). Australian addresses are matched on our own servers.
Map providers: your browser loads the street map from OpenFreeMap and satellite imagery from Esri, which see your IP address and the map area you view.

Our servers are in Singapore. Some providers above store data in the United States or elsewhere. Where personal information is transferred abroad, we rely on our providers' data protection terms.

5. How long we keep it

Server logs: up to 30 days, then deleted.
Lookups, purchases, waitlist entries and feedback: kept while we need them to run the service, apply the free limit, answer questions about a purchase and meet our legal obligations. Payment records are kept as long as tax law requires (in Australia, 5 years).
Account data: until you ask us to delete your account.
Analytics and session replays: kept under Google's and PostHog's retention settings for our accounts.

6. Your rights

You can ask to see, correct or delete the personal information we hold about you, or object to its use. Email [email protected] and we will reply within 30 days. In the UK you can also ask us to restrict processing or give you a copy in a portable form.

If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), the New Zealand Privacy Commissioner (privacy.org.nz), the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the UK Information Commissioner's Office (ico.org.uk).

7. Changes

We may update this policy. The effective date above shows the latest version.