Privacy Policy

Who we are

Locaia is a discovery platform for local places, operated by MapPulse, a sole proprietorship (the "data controller"). This policy describes what we collect and how we use it.

What we collect

• Account info you provide (name, email, profile photo)
• Places you save, follow, or submit
• For verified business owners: the social accounts you choose to connect

Instagram & social account data

If you connect an Instagram Business or Creator account as a verified owner, we request only the permissions needed to compute your place's public "pulse" score:

• Your linked Instagram Business account ID and handle
• Public follower count and media count
• Recent posts' like and comment counts (last 30 days) for engagement calculation

We do not read DMs, post on your behalf, or share your access token. You can disconnect at any time from your owner dashboard, which immediately deletes the stored token.

How we use it

We use this data to operate Locaia: show your listing, compute pulse scores, surface trending places, and improve recommendations. We do not sell your data.

Who we share data with

We share limited personal data only with the categories of recipients required to operate the Service:

• Service providers — hosting, database, analytics, and email delivery providers acting as our processors under contract.
• Paddle.com — our Merchant of Record for all paid subscriptions. Paddle processes payments, calculates and collects taxes, handles billing-related customer support and refunds, and issues invoices on our behalf. See Paddle's Privacy Policy.
• Professional advisers — legal, accounting, and tax advisers, where needed.
• Authorities — where required by law or to protect rights.

Legal basis

We process personal data on the legal bases of performance of a contract (providing the Service you requested), our legitimate interests (security, fraud prevention, product improvement), consent (where you have given it), and compliance with legal obligations.

Data retention & security

We retain personal data only as long as needed to provide the Service or as required by law, after which it is deleted or anonymised. We use appropriate technical and organisational measures (encryption in transit, access controls, audit logging) to protect your data.

Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing or withdraw consent. To exercise these rights, email hello@locaia.app. You also have the right to lodge a complaint with your local data-protection authority.

Data deletion

Email hello@locaia.app to delete your account or any connected data. Owners can disconnect Instagram instantly from their dashboard.

Contact

Questions? hello@locaia.app