Data Driven Maps

Privacy Policy

Effective September 4, 2026

This Privacy Policy explains how Data Driven Maps ("DDM", "we", "us", or "our") handles information when you visit our websites, join the launch list, create or use an account, contact support, or use DDM software and hosted services.

1. Information we collect

We collect information you provide directly to us and limited technical information generated when you use our services.

Information you provide

Launch-list information. The launch form may collect your email address, role, primary use case, current data sources, and the mapping plugins or tools you use.
Account information. If you create an account, we may collect your name, email address, organization, account preferences, licence or subscription information, and related account records.
Support and communications. We keep messages and information you send when you contact us, request support, report a problem, or otherwise communicate with DDM.
Billing information. If you purchase a paid product or service, payment information is processed by our payment provider. We may retain transaction identifiers, product, plan, amount, status, and billing contact details needed to administer the purchase, but we do not need to store your full payment-card number.

Information generated by use

Service and security logs. Our servers may record IP address, browser or client information, request time, requested path, response status, and operational or security events needed to run, secure, diagnose, and improve the service.
Licence and entitlement activity. Hosted licensing features may process site identifiers, activation information, entitlement status, software version, and related technical information needed to provide the product you requested.
Connector and OAuth activity. If you choose a connected service, DDM may process authorization metadata, tokens or token envelopes, connector configuration, sync state, and the data necessary to perform the connection. We do not access a connected service unless you configure or authorize that connection.
Email delivery and interaction. When we send you launch-list email, our email provider reports back what happened to that message, and we record it: that it was sent, delivered, delayed, bounced, suppressed, or reported as spam, and whether it was opened or a link in it was clicked. What we store is the message identifier, the event, and when it happened. We do not store the device, browser, IP address, or location that our provider makes available with open and click events, and we do not use this information to build a profile of you.

2. Information handled by the WordPress plugin

DDM is designed to work with data in your WordPress installation and with data sources you choose. The free plugin and locally installed paid components may process datasets, records, fields, locations, map configuration, presentations, filters, and other configuration on your WordPress site. Data stored and rendered by your WordPress site remains subject to your own hosting, security, retention, and privacy practices.

Some features use third-party services you configure, such as mapping providers or connectors. When you enable those features, information required for the feature may be sent to the provider you selected. Their privacy practices and terms apply to their services.

Shopify connector. If a merchant authorizes Shopify customer or order access, DDM may read the Shopify records and fields the merchant selects, including protected customer data such as name and address when that access has been approved. Those records are imported directly by the merchant's WordPress site into that site's DDM datasets for the merchant's chosen data and mapping workflows. DDM's hosted OAuth broker handles authorization credentials and connection metadata; it is not used as a warehouse or proxy for Shopify customer or order record bodies. DDM does not use those records for advertising, sale, unrelated profiling, or automated decisions about individuals. Imported records remain under the merchant's WordPress hosting, security, backup, retention, deletion, and publication controls, subject to any provider-required privacy or deletion request DDM is responsible for carrying out.

3. How we use information

We use information to:

provide, operate, maintain, secure, and improve DDM;
process launch-list requests, accounts, licences, subscriptions, and support requests;
authenticate users and authorized software clients;
run connector, OAuth, licensing, and other hosted functionality you request;
diagnose failures, prevent abuse, and protect DDM and its users;
send service, transactional, support, and product communications that relate to your relationship with DDM; and
comply with applicable law and enforce our agreements.

For the current launch list, the stated purpose is to keep your answers and send the launch update described beside the form. We do not treat a launch-list submission as consent to unrelated bulk marketing.

Email delivery and interaction information is used to confirm that a message we sent actually arrived, to stop sending to an address that bounces or reports us as spam, and to tell whether the launch announcement reached the people who asked for it. It is not used for advertising, for profiling, or to target you elsewhere.

4. How we share information

We do not sell personal information. We may share information only as reasonably necessary with:

service providers that help us host, secure, communicate, process payments, monitor, or operate DDM;
third-party services you choose to connect, when sharing is required to perform the connection or feature you requested;
professional advisers where reasonably necessary for legal, accounting, security, or business purposes;
authorities or other parties when required by law or when reasonably necessary to protect rights, safety, security, or prevent abuse; and
a successor in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to appropriate confidentiality and legal requirements.

5. Cookies and similar technologies

DDM may use first-party cookies or similar browser storage when needed for sessions, security, authentication, access to protected preview environments, preferences, or other service functionality. We do not need third-party advertising cookies to operate the public launch page.

6. Data retention

We keep information only for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining account and transaction records, resolving disputes, enforcing agreements, protecting security, and satisfying legal obligations. Retention periods vary by type of information and the feature involved.

You may ask us to delete or correct personal information associated with you. We may retain information when required by law or when a limited record is reasonably necessary for security, fraud prevention, accounting, or enforcement purposes.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the service and information involved. No internet service, transmission method, or storage system can be guaranteed to be completely secure.

8. Your choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. You may also unsubscribe from optional marketing communications using the method provided in the message.

To make a privacy request, email support@datadrivenmaps.com. We may need to verify your request before acting on it.

9. Children

DDM is a business and developer product and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the DDM website or hosted services.

10. International use

If you access DDM from outside the country where our systems or service providers are located, your information may be processed in other countries. Those countries may have different data-protection laws from your own.

11. Changes to this policy

We may update this Privacy Policy as DDM evolves. When we make a material change, we will update the effective date and, when appropriate, provide additional notice.

12. Contact

Questions or requests about privacy can be sent to support@datadrivenmaps.com.

Product-specific notices. A feature may provide a more specific privacy or third-party-service notice where needed. If a more specific notice conflicts with this general policy for that feature, the more specific notice controls for that feature.