Privacy Notice

Privacy questions and requests can be sent to privacy@flowmap.city.

Required account, authentication, billing and project data is needed to provide Flowmap City. Without it, we may be unable to create an account, provide a requested feature, or take payment. We do not use personal data for consequential automated decisions or profiling. Optional third-party analytics and error tracking are disabled.

Our Cookie & Storage Notice lists the browser storage used by the marketing site and application.

We disclose data only as needed to service providers, professional advisers, authorities when legally required, or a successor in a properly governed corporate transaction. Current service providers include Cloudflare (website, application delivery, R2 object storage and infrastructure), Supabase (database and authentication), Stripe (billing), Brevo (transactional email), Google Workspace (business, privacy-request and support email), Mapbox (map display), Google and GitHub (when chosen for OAuth), and Google when a user imports a Google Sheet. See our subprocessor list for roles and locations.

GeoVisually is established in Switzerland. Providers may process data in Switzerland, the EEA, the United Kingdom, the United States, or other countries listed in the subprocessor register. Where a destination is not covered by an applicable Swiss or EU adequacy decision, the applicable provider agreement may use contractual safeguards such as the European Commission Standard Contractual Clauses, including the modifications needed for transfers from Switzerland. The safeguard depends on the provider, service and destination. Contact us for the information applicable to a particular transfer.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing and securing Flowmap City, responding to requests, meeting legal obligations, and resolving disputes. The applicable period depends on the data category, the status of the account or contract, the sensitivity of the data, and operational, security, and legal needs.

• Account, profile, team, project, and active billing data is retained while needed to provide and administer the account and complete its closure.
• Invitation, delivery, usage, import, application, access, security, support, and webhook records are retained while needed for the feature, request, reliability issue, or security purpose concerned.
• Database backups are retained on a rolling, access-restricted disaster-recovery lifecycle.
• Invoices and financial records are retained for the period required by applicable accounting and tax law.

When personal data is no longer needed under these criteria, it is deleted or irreversibly anonymised. Narrowly scoped records may be retained longer where required by law or reasonably necessary for a legal claim, documented legal hold, fraud prevention, or active security investigation, with access restricted to that purpose. Contact privacy@flowmap.city if you would like the retention criteria applicable to a particular data category.

Depending on the law that applies, you may request access, a portable copy, correction, deletion, restriction, or object to processing. You may withdraw consent for an optional purpose at any time without affecting earlier processing. Send a request to privacy@flowmap.city. We may verify identity through a signed-in, verified account and request only the additional information reasonably necessary. We target one month for GDPR requests and 30 days for Swiss access requests, subject to lawful extensions and exceptions.

You may complain to the supervisory authority where you live or work, or where an alleged GDPR infringement occurred. In Switzerland, the authority is the Federal Data Protection and Information Commissioner (FDPIC).

Customers must have a lawful basis and provide appropriate notices for personal data they upload, map, share or publish. Avoid direct identifiers and sensitive or precise individual location data unless your use has been assessed and appropriate safeguards are in place. Public links may make content available to anyone with the link; password protection reduces but does not eliminate disclosure risk.

We version this notice and show its effective date. We will provide proportionate advance notice in the service or by email when a change materially affects users’ rights or how we use their data.