🔐 Privacy Policy

1. Introduction

Geolapis LTD (“we,” “us,” “our”) values your privacy. This Policy explains how we collect, use, store, and share information across our products: LapisAI (mobile app) and the Geolapis Geospatial Web App (app.geolapis.com), together with related APIs and services.

2. What We Collect

• Personal Information: Name, email address, optional profile details.
• Usage Data: Feature usage, clicks, session metadata, device/app version.
• Uploaded Content: PDFs, images, scanned documents, AI prompt inputs/outputs.
• AI Interaction Data: Prompts and results (anonymized or pseudonymized for quality and safety).
• Device & Network Data: IP address, device/OS, language, time zone.
• Geospatial App Data (Web):
  • Location Data (optional): Approximate or precise coordinates if you enable location features (e.g., “use current location”).
  • Map Interactions: Pans/zooms, selected layers, searches, AOI (area-of-interest) bounds.
  • User Content: Notes, markers, drawings, uploaded geospatial files (e.g., GeoJSON, Shapefile, raster/imagery), and exported products (e.g., PDFs).
  • Contextual Data: Weather lookups (via OpenWeather) and optional news summaries tied to your AOI or country selection.

3. How We Use Your Data

• Provide and improve the LapisAI app and Geolapis Geospatial web tools.
• Customize maps, layers, and AI outputs for your AOIs and preferences.
• Deliver AI/ML processing, OCR, translations, and summarizations.
• Generate geospatial insights (e.g., “GeoInsight”) and reports (e.g., “GeoBrief”).
• Communicate updates, product improvements, and support responses.
• Secure the services, detect abuse, and meet legal/regulatory obligations.

4. Third-Party Services We Use

We integrate trusted services to power features. These providers process data only as needed to deliver results.

• OpenAI — content generation/summarization, coding aid.
• OCR/Translation — Tesseract OCR (on-device/server) and optional translation providers.
• Maps & Geospatial — Mapbox for basemaps/tiles; Leaflet as the in-browser map library (Leaflet itself does not collect personal data).
• Weather — OpenWeather API for current conditions and forecasts tied to coordinates/AOI.
• News (optional) — NewsData for country/AOI headlines when enabled.
• Payments — Stripe for subscriptions and purchases.
• Analytics/Crash reports — privacy-respecting telemetry to improve reliability and UX.

We do not sell your data. When possible, requests are pseudonymized and restricted to the minimum required scope.

5. Location, Maps & Weather

• Opt-in: We access device/browser location only if you request location-aware features.
• Precision: You can choose approximate or precise location (subject to OS/browser controls).
• Use While Active: Location may be used to center maps, fetch context (e.g., local weather), or seed analysis.
• Map Tiles (Mapbox): Your IP and tile requests may be visible to Mapbox to serve basemaps and cache assets efficiently.
• Weather (OpenWeather): Coordinates and general request metadata are sent to OpenWeather when you view weather for an AOI or your location.

6. Data Retention

• Uploads (default): Files and transient AI artifacts are deleted within ~24 hours.
• Premium Storage: Paid accounts may choose persistent storage (“Geolapis Cloud”) for saved projects, layers, and briefs.
• Logs/Telemetry: Aggregated analytics retained for service quality and security, with limited granularity.
• Legal Holds: Data may be retained longer where required by law, fraud prevention, or dispute resolution.

7. Your Rights

Depending on your region (e.g., UK GDPR/EU GDPR/CCPA), you may:

• Access, correct, update, or delete your personal information.
• Export (port) your data where applicable.
• Object to or restrict certain processing.
• Withdraw consent for optional features (e.g., location).

Contact support@geolapis.com to submit a request.

8. Security

• Encrypted transport (HTTPS) and industry-standard controls.
• Stripe-handled payments with PCI-DSS compliance.
• Least-privilege access, monitoring, and periodic review.

No method is 100% secure. Avoid uploading highly sensitive personal data.

9. Children’s Privacy

Our services are not intended for children under 13 (or the age defined by local law). We do not knowingly collect data from children.

10. International Transfers

We may process data in the UK, EU, US, and other regions via vetted providers. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Policy to reflect product, legal, or security changes. Material updates will be announced in-app or by email.