Privacy Policy
Effective date: March 22, 2026
Locus Maps (operating as LocusMapsAI) is a map poster e-commerce service based in Virginia, United States. This policy explains what data we collect when you use our site, why we collect it, and how we handle it. We keep this straightforward — no walls of legalese.
What We Collect
We collect only what we need to fulfill your order and improve your experience:
- Email address — provided at checkout, used to confirm your order and send shipping updates.
- Shipping address — required for print orders; forwarded to our print fulfillment partner (Gelato) to produce and ship your poster.
- Payment information — collected and processed entirely by Stripe. We never see or store your card number, CVV, or full billing details.
- Location data — addresses or place names you type into the search bar, and your browser’s geolocation if you grant permission. This is used only to center your map.
- Map configuration — the style, size, title, and other design choices you make in the editor. This is stored temporarily to render your poster and is included in your order record.
- Occasion and personalization text — the occasion type (e.g., “new home”, “marathon”) and any custom title or subtitle you enter; used by our AI personalization feature to suggest copy and styles.
- Basic usage data — standard server logs (IP address, browser type, pages visited) collected automatically via our hosting infrastructure (Vercel and Google Cloud Run).
How We Use It
- Fulfilling and shipping your print order
- Sending order confirmation and delivery status emails
- Rendering the map poster image you designed
- Providing AI-powered title and style suggestions (optional feature)
- Geocoding the location you searched to generate map tiles
- Detecting and preventing fraud or abuse
- Improving site performance and user experience
We do not sell your personal data. We do not use your data for advertising or share it with data brokers.
Third-Party Services
We use the following third-party services to operate Locus Maps. Each receives only the data necessary for its function:
| Service | Data received |
|---|---|
| Stripe | Payment card details, billing name, email. Governed by Stripe's privacy policy. |
| Gelato | Your name, shipping address, and the rendered poster image file — to print and ship your order. |
| Mapbox | Location search queries (the place name or address you type) for geocoding and autocomplete. |
| Nominatim / OpenStreetMap | Location search queries — used as a geocoding fallback when Mapbox is unavailable. |
| Anthropic (Claude) | Occasion type and the location or title text you enter — used to generate personalized poster copy and style suggestions. Not used to train Anthropic's models. |
| Cloudflare R2 | Rendered poster image files (stored for order fulfillment and download). |
| Upstash Redis | Temporary order and render-job state (job ID, status, configuration). Not personally identifiable on its own. |
| Vercel | Frontend hosting; may collect standard web server logs (IP, browser, referrer) per their privacy policy. |
| Google Cloud Run | API hosting; standard server logs are retained per Google Cloud's data practices. |
Data Retention
We retain your order information (email, shipping address, map configuration, and poster image) for as long as reasonably necessary to fulfill your order, handle returns or disputes, and meet legal obligations — typically no longer than 3 years.
Render job state in Upstash Redis is temporary and expires automatically, typically within 24 hours of order completion.
Rendered poster images stored in Cloudflare R2 are retained for order fulfillment and to allow you to re-download your purchase. You may request deletion at any time (see Contact below).
Server logs are retained for up to 90 days for security and debugging purposes.
Your Rights
Depending on where you live, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — request that we delete your personal data, subject to legal retention requirements.
- Portability — receive your data in a structured, machine-readable format.
- Opt out of sale — we do not sell personal data, so this right is already satisfied.
California residents (CCPA): You have the right to know what categories of personal information we collect, the right to delete, and the right to opt out of sale. We do not sell personal information.
EEA/UK residents (GDPR): Our lawful basis for processing is contract performance (fulfilling your order) and legitimate interests (fraud prevention, service improvement). You have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at privacy@locusmapsai.com. We will respond within 30 days.
Children's Privacy
Locus Maps is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@locusmapsai.com and we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. For significant changes, we will make reasonable efforts to notify customers who have active orders or accounts.
Your continued use of Locus Maps after a policy update constitutes acceptance of the revised terms.
Contact Us
Questions, requests, or concerns about this privacy policy? Reach us at: