Privacy Policy
Your privacy matters to us. This Privacy Policy explains what information OcuMap Inc. collects, how we use it, and your rights. Please read it carefully.
Introduction
OcuMap Inc. (“OcuMap,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who use our visual documentation platform (“Service”). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use the Service at ocumap.com and related applications.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.
Scope
This Privacy Policy applies to information collected through:
- The OcuMap website at ocumap.com and any subdomains
- The OcuMap web application and any desktop or mobile applications
- Published Viewers created and shared through the Service
- Communications between you and OcuMap by email or other means
This Policy does not apply to information collected by third-party services, websites, or applications that you may access through links on the Service. We encourage you to review the privacy policies of those third parties.
Information We Collect
Information You Provide Directly
- Account information: Name, email address, password, company name, and job role when you create an account
- Payment information: Billing address, card type, and last four digits of your payment card. Full card details are collected and stored by Stripe, Inc. — OcuMap does not store full payment card numbers
- User Content: Photos, videos, 360 imagery, point clouds, drawings, documents, GPS data, and all other files you upload to the Service
- Communications: Messages you send to us by email or through support channels
- Profile information: Any optional information you add to your account profile
Information Collected Automatically
- Usage data: Pages visited, features used, actions taken, session duration, and interaction patterns within the Service
- Device information: Browser type and version, operating system, device type, screen resolution, and language settings
- Log data: IP address, access timestamps, referring URLs, and error logs
- Cookies and similar technologies: As described in Section 7
Information from Third Parties
If you choose to sign in using a third-party identity provider — Google, Microsoft, or LinkedIn — we receive basic profile information from that provider (typically your name and email address) as permitted by your settings with them. We do not receive or store your identity provider password. Your use of those providers is also subject to their own privacy policies.
GPS and Location Data
If you upload media that contains GPS metadata, that location data will be stored and used to place your content on maps within the Service. You are responsible for ensuring that the capture and sharing of GPS-tagged content complies with applicable law and respects the privacy of any individuals whose location may be reflected in the data.
How We Use Information
We use the information we collect to:
We do not use your User Content to train machine learning or artificial intelligence models. We do not sell your personal information to third parties.
Subprocessors
OcuMap uses the following third-party service providers to operate the Service. Each is bound by contractual obligations to protect your data:
OcuMap may update its list of subprocessors from time to time. We will notify users of material changes to this list by updating this Privacy Policy and, where appropriate, by email.
Data Security
OcuMap implements commercially reasonable technical and organizational security measures to protect your information against unauthorized access, loss, destruction, or alteration. These measures include:
- Encryption of data in transit using TLS/HTTPS
- Encryption of data at rest on AWS infrastructure
- Access controls limiting employee access to customer data
- Regular security reviews and monitoring
- Secure payment processing through Stripe (OcuMap does not store full payment card details)
However, no method of transmission over the internet or electronic storage is completely secure. OcuMap cannot guarantee absolute security and is not responsible for security breaches beyond our reasonable control.
If you become aware of any security vulnerability or breach related to the Service, please contact us immediately at legal@ocumap.com.
You are responsible for maintaining the security of your account credentials. Do not share your password with others. OcuMap will never ask for your password via email or support channels.
Data Retention
We retain your personal information and User Content for as long as your account is active and as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
- Active accounts: Data is retained for the duration of your account
- After account closure: User Content is retained for 30 days, after which it may be permanently deleted
- Billing records: Retained for 7 years as required by applicable tax and accounting laws
- Support communications: Retained for up to 3 years
- Log data: Retained for up to 90 days for security and operational purposes
You may request deletion of your personal information at any time by contacting legal@ocumap.com. We will fulfill deletion requests within 30 days, subject to legal retention obligations.
We strongly recommend exporting any User Content you wish to retain before closing your account, as deleted data cannot be recovered.
Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Access
Request a copy of the personal information we hold about you.
Correction
Request that we correct inaccurate or incomplete information.
Deletion
Request that we delete your personal information, subject to legal retention requirements.
Portability
Request a machine-readable copy of your personal information.
Opt-Out of Marketing
Unsubscribe from marketing communications at any time via the unsubscribe link in emails or by contacting us.
Restriction
Request that we restrict processing of your information in certain circumstances.
To exercise any of these rights, contact us at legal@ocumap.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. To submit a CCPA request, contact legal@ocumap.com.
GDPR (EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to object to processing, the right to withdraw consent, and the right to lodge a complaint with your local data protection authority. OcuMap’s primary processing activities occur in the United States. By using the Service, you acknowledge that your information will be transferred to and processed in the United States.
Children's Privacy
The Service is not directed to children under the age of 18. OcuMap does not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided personal information to OcuMap, please contact us at legal@ocumap.com and we will promptly delete such information.
International Data Transfers
OcuMap is based in the United States, and the Service is operated on infrastructure primarily located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
By using the Service, you consent to the transfer of your information to the United States as described in this Privacy Policy. OcuMap takes reasonable steps to ensure that transfers of personal information receive an adequate level of protection.
Changes to This Policy
OcuMap may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify you by:
- Updating the “Last updated” date at the top of this page
- Sending an email notification to the address associated with your account
- Displaying a prominent notice within the Service
Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.
Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
OcuMap Inc. — Privacy
Houston, Texas, USA
Privacy & legal inquiries: legal@ocumap.com
General support: support@ocumap.com
We will respond to privacy requests within 30 days of receipt.