Privacy Policy

Effective date

This policy is effective as of 17 April 2026 and applies to both the website and API services provided under the Map Zena brand.

What we collect

• Account communication profile: name and email for billed account communications.
• Authentication credential: password hash for account login security.
• API usage counters: request count totals by API key and UTC day.
• Billing metadata: top-up amount, transaction references, and account balance events.
• Support messages: only if you contact us directly via email.

What we do not collect

• Request query payloads or geocoding search text.
• Requesting IP addresses as stored logs.
• Identity documents, KYC records, or government ID scans.
• Ad IDs, trackers, analytics beacons, or third-party cookie profiles.

Retention

• Account name and email: retained while account billing is active and for required support/audit windows.
• Daily API usage counters: retained for up to 90 days, then deleted.
• Billing and top-up records: retained as needed for reconciliation, fraud prevention, and financial compliance obligations.
• Support messages: retained for up to 30 days after resolution unless legal obligations require longer storage.

Website behavior

Map Zena serves local assets only. We do not load third-party analytics scripts, social tracking pixels, external font networks, or embedded behavioral profiling tools.

Security

All endpoints are HTTPS only. We use strict transport, content, and framing headers where supported by your server runtime. API keys are random tokens and should be handled as secrets.

Jurisdiction and rights

Depending on your jurisdiction, you may have rights to request access or deletion of personally identifying records. Because we keep minimal records, our response may indicate that no personal profile exists.

Contact

For privacy-specific requests, contact our contact page and use the subject line PRIVACY.