Privacy Policy

Last updated: 14 November 2026

Information we process

MapsScout processes account identifiers, email and sign-in details through Firebase Authentication. Subscription records include Stripe customer/subscription identifiers, payment status, plan and expiry. The backend stores monthly search counts, random reservation identifiers and short request-limit counters. MapsScout does not store plaintext passwords or full payment-card details.

Research projects on your device

Business names, public contact details, ratings, review counts, Maps links, source context, notes and stages are saved in Chrome extension local storage. Website reports are also saved locally. They are not automatically synchronized across devices. Local projects belong to the browser profile, so signing into another account in that same profile does not automatically erase existing projects. Exports and backups are files on your device.

Pro processing

For opportunity scores, market summaries and route optimization, selected business fields are sent to authenticated Firebase functions: business name, Maps link, rating, reviews, category, address, phone, listed website and detail-check time. Notes, stages and search keywords are excluded from these requests. The backend computes results without intentionally logging or storing research payloads in its database. Google Cloud may process technical request metadata as part of hosting and security.

Website analysis

Website checks require your action and Chrome domain permission. A temporary background tab loads each website, which may use existing browser cookies and ordinary third-party resources. The audit does not click consent buttons, log in or submit forms. It reads metadata, structured-data signals, label/element counts, layout observations and limited timing. Listing details are temporarily supplied to the isolated probe to derive local matching flags.

The probe makes up to three extra credential-free same-origin requests for robots.txt, a sitemap and document headers. It does not follow cross-origin redirects for these extra requests or crawl sitemap entries. Observations are sent to Firebase in batches for deterministic scoring and predefined suggestions; no LLM provider is used. Form values, credentials, full page text and HTML are not sent in the observation payload. Matching complete reports can be reused locally for 24 hours unless you choose Recheck.

Purposes and legal bases

We process account, subscription and requested feature data to provide the service and perform our agreement with you. Billing and tax records may be processed to comply with legal obligations. Authentication security, fraud prevention and request limiting support our legitimate interest in protecting the service. Optional website access is requested through Chrome and can be revoked.

Service providers and third-party sites

Google Firebase/Google Cloud provide authentication, hosting, databases and backend processing. Stripe provides checkout, billing, invoices and tax-related payment processing. These providers process information under their applicable terms and privacy arrangements. Infrastructure may involve international data transfers under applicable safeguards. Google Maps and visited websites receive normal browser requests. Opening a directions link sends the included coordinates to Google.

Retention and security

Local projects and reports remain until you delete them or remove the extension/browser storage. Authentication, billing, usage and security records are retained as needed to operate the account, handle disputes, prevent abuse and meet applicable legal requirements. Technical logs follow the hosting provider retention settings. Secrets are stored on the backend and are not included in the extension package. No system can guarantee absolute security.

Your controls and rights

You can stop collection, delete local results/projects, export records, revoke optional domain access, sign out and cancel your subscription through the billing portal. Uninstalling removes extension storage but does not automatically delete the cloud account or payment records. Subject to applicable law, you may have rights of access, correction, deletion, restriction, portability and objection, and may complain to your data protection authority, including Spain's AEPD.

No advertising tracking

MapsScout does not include advertising trackers or sell account information. It does not read unrelated browsing history or email contents. Diagnostic exports may contain business information; review them before sharing.

Privacy contact

For privacy questions, account deletion or requests to exercise your data protection rights, email maabussines@gmail.com.