CRE Retail Maps ("we", "our", "the Service") is operated out of Phoenix, Arizona. This Privacy Policy explains what information we collect when you use creretailmaps.com or app.creretailmaps.com, how we use it, and the choices you have about it.
Information We Collect
- Account data: Name, email, password hash, company, title, phone, office address, license number, and optional profile photo / company logo.
- Map content: Maps, overlays, saved points of interest, and exports you create.
- Payment data: Processed by Stripe. We store subscription status and transaction IDs, not card numbers.
- Usage data: Pages viewed, features used, browser and device info, approximate location (from IP).
- Contact data: Information you submit through our contact form, including your name, email, company, topic, and message.
- Marketing attribution: With your consent, first- and last-touch UTM parameters, landing path, referrer, Google click identifiers (gclid, gbraid, and wbraid), and Google Analytics client and session identifiers. These fields may be attached to your account, checkout, subscription, and payment records so we can connect marketing activity to signups and purchases.
How We Use Your Information
- Provide and operate the Service (authentication, map storage, export, billing).
- Send transactional email (payment receipts, password resets, service notices).
- Send marketing email (drip sequences, product updates) - you can unsubscribe at any time.
- Measure performance through Google Analytics 4 and Google Ads conversion tracking.
- Attribute signups and purchases to marketing campaigns and prevent duplicate conversion reporting.
- Improve the product and troubleshoot issues.
Third Parties We Share Data With
- Supabase - Authentication and database hosting.
- Stripe - Payment processing. Consented campaign-attribution fields may be included in checkout and subscription metadata. Subject to Stripe's privacy policy.
- Vercel - Application hosting and edge delivery.
- Google - Analytics (GA4), Ads conversion tracking, Maps API, and Fonts. Analytics may receive a pseudonymous account identifier along with the client, session, page, and event data described above. After consent, conversion measurement may include normalized and SHA-256-hashed email, phone, name, and address fields; Google receives the hashes rather than the plain-text fields through that conversion feature.
- Logo.dev, Brandfetch - Brand logo CDN used for map overlays. We only send a brand domain lookup; we do not send your account data.
- Amazon Simple Email Service - Transactional and marketing email delivery.
We do not sell your personal information.
Cookies and Tracking
We use cookies and similar technologies to keep you signed in, remember preferences, and measure marketing performance. Analytics and advertising cookies only fire after you consent via the cookie banner. You can change your consent any time by clearing your browser cookies for this site.
Your Rights
You have the right to:
- Access, correct, or download the personal information we hold about you.
- Request deletion of your account and personal data, subject to records we must retain for legal, security, fraud-prevention, or accounting purposes. Email support@creretailmaps.com or use the in-app Settings page.
- Opt out of marketing email (every marketing email has an unsubscribe link).
- Withdraw consent for analytics/advertising cookies.
Residents of the EEA, UK, and California have additional rights under GDPR and CCPA, including the right to object to certain processing and to file a complaint with a supervisory authority.
Data Retention
Account data is retained while your account is active. We process account-deletion requests within 30 days, except where specific records must be retained for legal, security, fraud-prevention, or accounting purposes. Public contact-form submissions are scheduled for deletion two years after receipt. Payment and receipt records may be retained for up to seven years. Analytics and advertising data is retained according to our configured vendor settings and is deleted or aggregated when no longer needed for the purposes described above.
Security
We use safeguards including TLS in transit, managed database encryption at rest, and server-side authorization checks on endpoints that handle protected account data. No system is perfectly secure; we encourage strong, unique passwords.
Children
The Service is intended for commercial real estate professionals and is not directed to children under 16. We do not knowingly collect data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date and, where appropriate, communicated by email.
Contact
Questions or privacy requests: support@creretailmaps.com or (888) 723-6345.