Privacy Policy

1. Overview

Maplan is a feedback and public roadmap tool operated by ByteCrafters. This policy explains what personal data we collect, why we collect it, how we protect it, and what rights people have under applicable UK and EU data protection law, including the GDPR and UK GDPR.

This policy applies to workspace owners, team members, and people who submit feedback or interact with public boards powered by Maplan.

2. Information we collect

2.1 Information you provide

• • Name
• • Email address
• • Account and login details
• • Company or workspace information
• • Feedback, ideas, comments, and other content you submit
• • Billing details handled by Stripe

2.2 Information collected automatically

• • IP address
• • Browser and device information
• • Request, audit, and security logs
• • Usage activity within the app
• • Rate-limit and abuse-prevention events

2.3 Analytics and cookies

We use Plausible Analytics, which is privacy-friendly and cookie-free. We may also use essential cookies for authentication and security.

3. How we use personal data

• • To provide and operate Maplan
• • To manage accounts and workspace access
• • To process billing through Stripe
• • To display public boards and changelogs where customers enable them
• • To secure the service and prevent spam, abuse, or misuse
• • To respond to support requests
• • To improve the product and monitor reliability

We do not sell personal data or share it for advertising.

4. Legal bases

Depending on the context, we process personal data on one or more of these bases:

• • Performance of a contract
• • Legitimate interests, such as securing and improving the service
• • Legal obligations
• • Consent, where consent is the appropriate basis

5. Public content

Some Maplan workspaces are public by design. If a customer enables public visibility, feedback, ideas, votes, comments, changelog entries, and roadmap items may be visible to other people.

Customers are responsible for deciding what they publish and for moderating their own public boards.

6. Hosting and international transfers

Maplan is intended for UK and EU customers and is hosted in Europe. If we use service providers or infrastructure that involve cross-border processing, we aim to use appropriate safeguards required by applicable law.

7. Third-party providers

We rely on a small number of third-party providers to run the service, including:

• • Stripe for billing
• • Cloudflare for edge security and abuse protection
• • Plausible Analytics for privacy-friendly analytics
• • Hosting and infrastructure providers used to run the application in Europe

These providers may process personal data only as needed to provide their services to us.

8. Retention

We keep personal data only for as long as needed to provide the service, maintain security, comply with legal obligations, and resolve disputes. Customers may request deletion, subject to those obligations.

9. Your rights

Depending on where you are located, you may have the right to:

• • Access your personal data
• • Correct inaccurate data
• • Request deletion
• • Restrict or object to certain processing
• • Request a portable copy of your data
• • Withdraw consent where processing relies on consent
• • Lodge a complaint with a supervisory authority

To make a request, contact [email protected].

10. Security

We use reasonable technical and organisational measures to protect personal data, including:

• • Encrypted HTTPS/TLS connections
• • Access controls
• • Audit and security logging
• • Rate limiting and abuse protection
• • Infrastructure and application monitoring

No system is perfect, and customers are still responsible for securing their own accounts and devices.

11. Children’s privacy

Maplan is not intended for children under 18, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. If the changes are material, we will take reasonable steps to let customers know.

13. Contact

If you have questions about privacy or want to exercise your rights, contact:

[email protected]