Privacy notice

Version 1.1 · Effective October 30, 2026. Change from version 1.0: business name only (the service is now called MapKept); nothing else changed. This notice covers mapkept.pages.dev and the MapKept service, run by Zak Taylor, doing business as MapKept ("we"). Contact: boltmetta@gmail.com.

1. What we collect

• Free check-up form (Google Forms; answers are saved to a Google Sheet): your business name, website, Google Business Profile link, services, hours, common customer questions, whether we can use your photos, and the email you give us.
• Checkout (Stripe): your email, business name, billing details, and the plan and price you chose. Stripe processes your card. We never see or store your full card number.
• Billing portal (Stripe): when you sign in to update your card, see invoices or cancel, Stripe records those actions and shows them to us.
• Client permission form (Google Forms; answers are saved to a Google Sheet): the signer's name, title and email, your business's legal name and profile link, the permissions you tick, your posting mode, the date and time, and the agreement version.
• Email: messages you send us or we send you, at boltmetta@gmail.com (Gmail).
• Your Google Business Profile: once you invite us as a Manager, we can see what Google shows a Manager. That includes your profile details, posts, reviews, and Google's performance numbers.
• Reviewer information: the reviewer's public name and the review text, only as needed to draft a reply.
• Website: this site has no ads, analytics or tracking cookies. Our host, Cloudflare, processes basic technical data such as IP addresses to deliver and protect the site.
• Do Not Track: we don't track visitors over time or across other websites, and we don't let other parties do so through our site. Because of that, we don't change anything in response to browser Do Not Track or Global Privacy Control signals.

2. How we use it

We use your information only to:

• prepare your check-up and reply to you;
• provide the service you signed up for (posts, review-reply drafts, reports);
• bill you and handle cancellations;
• keep the written record of your permissions that Google can ask for;
• send the notices the law requires, such as renewal and price-change reminders.

We use Grok Bot, the AI assistant service MapKept runs on, to draft posts, replies and reports from this information. Our client working files (fact sheets, photos, drafts, logs and consent records) are stored on that AI workspace computer. Grok Bot processes this information under its own terms (x.ai/legal/grok-bot-terms). A person at MapKept reads your profile data, reviews and messages to provide the service. We don't send marketing to anyone who hasn't asked for it, and you can reply STOP to any email.

3. Who we share it with

We don't sell your personal information, and we don't share it for targeted advertising. We share it only with the services we use to run MapKept, and only for that purpose:

• Google: Forms, Sheets, Gmail, Drive and Business Profile (and Google's Business Profile API once we're approved to use it);
• Stripe: payments and the billing portal;
• Cloudflare: website hosting;
• Grok Bot: the AI assistant service we run on, which drafts our work and stores our client working files.

We may also disclose information if the law requires it, or to protect our rights in a dispute.

4. How long we keep it

• Client data: we delete your service data within 30 days after the service ends. That includes your fact sheet, photos, drafts and report data, everywhere we hold it: Google Sheets and Drive, Gmail, and the copies on our AI workspace computer.
• Records we must keep: we keep these longer.
  • Payment and tax records: as long as tax law requires.
  • Your consent and permission records (checkout consent, permission form, cancellation): for 3 years or 1 year after your plan ends, whichever is longer. California's automatic renewal law requires this, and it lets us show Google your authorization. We keep them longer only if tax law or an open dispute requires it, and then we delete them.
• Reviewer data: it stays in Google. We copy only what a reply needs and keep it only as long as needed. Our working copies are deleted within 30 days.
• Check-up requests from businesses that don't sign up: deleted within 12 months, or sooner if you ask. That covers the Google Sheet entry, the Gmail thread and any workspace copy.

5. Your choices and rights

Email boltmetta@gmail.com at any time to ask us to:

• tell you what personal information we hold about you;
• correct it;
• delete it, apart from the records we must keep (section 4).

We'll confirm we got your request within 10 business days and reply within 45 days. We may need to confirm the request comes from you.

California residents: MapKept is a small business. We don't currently meet the size thresholds that make the California Consumer Privacy Act (CCPA) apply to a business (for example, $26.6 million or more in annual revenue, or buying, selling or sharing data about 100,000 or more Californians). We still honor the requests above for everyone, and we won't treat you differently for making one. If we ever become subject to the CCPA, we'll update this notice.

The service is for businesses and isn't directed at children under 16.

6. Security

We use reasonable access controls and limit who can access the accounts that hold your data. We never ask for your Google password: access is only through Google's Manager invite, which you can remove at any time. Never send us passwords. If you do, we'll delete them. If a security incident affects your information, we'll tell you promptly and as the law requires.

7. Changes

If we change this notice, we'll post the new version here with a new date. If the change is material, we'll email active clients.