Privacy Policy

New Map is the data controller for the personal data described here. New Map is the trading name of [legal entity name], registered in England & Wales [company number]. Contact us about privacy at privacy@thenewmap.ai.

• Audit inputs — the website you submit and the email address you give to receive your report.
• Account data — name, work email, company, role, and login credentials (passwords are stored hashed; we never see them in plain text).
• Usage data — how you interact with the platform, and basic technical data such as IP and device/browser, used for security and to operate the Service.
• Communications — messages you send us and your responses to our outreach.

We do not intentionally collect special-category data and ask that you do not submit it.

To run your audit and produce your dashboard; to provide, secure and improve the Service; to contact you about your audit, account and (with the appropriate basis) relevant updates; to take payment on paid plans; and to meet legal obligations.

We rely on: performance of a contract (to deliver the Service you request); legitimate interests (to run, secure and improve the Service and to do proportionate B2B outreach, balanced against your rights); consent where required (for example certain marketing); and legal obligation where applicable. You can withdraw consent at any time.

We use trusted providers to run the Service, each under contract and only for these purposes:

• Supabase — database, authentication and storage
• Vercel — hosting and serverless infrastructure
• Anthropic (Claude) — the AI models that generate audits and strategy
• Era and Otterly — AI-visibility measurement data
• Serper — web search used for research and grounding
• Resend — transactional and notification email
• Upstash — rate limiting and caching
• Calendly — booking calls, where you choose to

We do not sell your personal data. Our AI providers do not use the prompts and content we send them to train their public models, per their business terms. We may disclose data where required by law or to protect our rights and users.

Some providers are based outside the UK/EU (for example in the US). Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent approved mechanism.

We keep personal data only as long as needed for the purposes above: audit and account data for as long as your account is active and a reasonable period afterwards, and longer where the law requires. You can ask us to delete your data (see your rights below).

Subject to law, you can request access to, correction or deletion of your personal data; object to or restrict certain processing; withdraw consent; and request portability. Contact privacy@thenewmap.ai. You also have the right to complain to the UK Information Commissioner’s Office (ICO) or your local data-protection authority.

We use only the cookies needed to run the Service, primarily a secure session cookie to keep you signed in. We do not use third-party advertising cookies.

We use industry-standard measures including encryption in transit, hashed passwords, access controls and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a qualifying breach as required by law.

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect data from children.

We may update this policy; if a change is material we will give reasonable notice. The “last updated” date above shows the current version.

Privacy questions or requests: privacy@thenewmap.ai.