Your privacy is important.
Information We Collect
Account and Payment Information: If you sign up for an account with us, we may collect information that you provide to us in connection with setting up the account, such as your username, name and email address. Further, in the course of using your account, you may provide us with additional information through your communications with us.
Payment is required for some of our Services, and we may ask you to provide certain information, including your name, address, email, and credit card information (collectively, “Payment Information”), in connection with processing your transactions.
Information from Our Vendors: We may receive information related to your use of Our Vendor websites and services, including your username, name, email address, shipping address and your interaction with the Our Vendor. (Common examples include signing up for an event or requesting shipment of a product from us.)
Hosted Data: In using your account, you may upload data to us via Mapbox Studio, Mapbox Studio Classic, our Dataset API or our Upload API (“Hosted Data”) so that Mapbox can host it for you as part of providing our Services.
Logs and Cookies: We automatically collect certain information when you access or use our Services. For example, we collect IP addresses of devices accessing our website in our server logs, as well as information like internet domains, the date and time of a visit, and the pages accessed on our websites. In addition, we automatically collect certain technical information whenever a third-party product or service that integrates our Services makes a request to our APIs. This includes, among other things IP address, browser type, the content of the request, the time of the request, usage data, and operating system.
Feedback: You and/or your end users may provide us with feedback regarding our Services (e.g., in the form of email, suggestions for how to improve our maps, etc).
Mobile Data: When a mobile application uses our SDKs, it may send us certain limited location and usage data along with an ephemeral ID. We do not associate the location data or ID with any PII, including names, permanent IDs, email addresses, IP addresses, or phone numbers. We also use a separate randomly-generated ID for the limited purpose of tracking the number of monthly active users using our Services.
How We Use the Information We Collect
Account and Payment Information: We use the account and payment information we collect to provide our Services to you, to maintain your accounts, and to process your transactions. We also may use certain information, such as your email address, to tell you about new Mapbox products or features that may be of interest to you. If you receive promotional emails from Mapbox, you can opt out by following the instructions in those emails. We use payment information solely for billing purposes by our payment provider, Stripe.
Information from Our Vendors: We may use the information you provide to Our Vendors to follow-up with you regarding the information that you provided, in connection with the event or transaction (including shipment of our products), to improve our Services, and to provide you with information about our Services and/or the event or transaction.
Hosted Data: We use Hosted Data to provide our Services to you.
We use the data collected through our Services (1) for internal diagnostic and analytic purposes (2) to improve our mapping products and services and (3) to provide our services to end users of our customers. You can find more information about how we secure and use location data on our telemetry page.
Feedback: We may use the feedback that you provide for any purpose, including improving our Services.
When We Share the Information We Collect With Third Parties
Account Information and Information from Our Vendors: We may share your account information and information we receive from Our Vendors with our vendors, consultants and other service providers who need access to such information to carry out work on our behalf.
Payment Information: We will not disclose Payment Information to any person or entity other than our payment provider, Stripe, as described above in the “Information We Collect” section.
Hosted Data: We do not disclose Hosted Data except as directed by you.
Logs, Cookies and Mobile Data: We use third-party services like Google Analytics to help us collect and process website logs and cookies. We do not share raw location data or usage data with third parties. We use information collected from our Services to create aggregated and anonymized usage statistics that we may share with third parties.
Rare and Limited Disclosures: We may share information in our possession in response to a request if we believe disclosure is in accordance with, or required by, any applicable law, regulation or legal process. For more information, see “Law Enforcement and Transparency,” below.
We may also share the information we collect in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company. We may also share information among our current and future parents, affiliates, subsidiaries and other companies under common control and ownership.
Feedback: We may share your feedback with our third party suppliers and partners who help us provide the Services to you and to third parties.
Your Choices About What We Do With the Information We Collect
Account and Payment Information: Certain account information is optional, and you may choose not to provide it to Mapbox. Note that some of this account information is necessary for related Services to function properly – for example, if you do not provide payment information, you cannot take advantage of features that require payment.
Logs, Cookies and Mobile Data: You may delete cookies from your computer, and most browsers provide the option to block cookies. Note that if you block cookies, portions of our Services, including our website, may not work as intended.
If you are an end user of a product or service that integrates our Services, your privacy options will be largely determined by the developer of the product or service. In addition to any privacy options that the developer may have provided you with, you may also be able to control the applications that can collect information about your precise location by using the settings available on your device.
Your Access to and Control of the Information We Collect
In General: If you believe that we hold information that would allow us to correct, amend, or delete inaccurate information about you or if you believe that information about you has been processed in violation of the EU-U.S. Privacy Shield Principles or the Swiss-U.S. Privacy Shield Principles, please email us at email@example.com.
Account Information, Hosted Data, and Payment Information: You may correct or change certain account information in the account pages we’ve made available to you, and you may update, correct or delete other Account Information, Hosted Data or Payment Information that you have provided to us at any time by emailing us at firstname.lastname@example.org. If you wish to delete or deactivate your account, please email us at email@example.com, but note that we may retain certain information as required by law or to protect our rights and property.
Logs and Mobile Data: We temporarily retain IP addresses associated with requests to our Services from our developers’ applications for security and accounting purposes. Given the temporary nature of this storage, it is generally not feasible for us to provide information that is tied to end users of our developers’ applications.
Feedback: You may request that we update, correct or delete any feedback that you have provided to us by emailing us at firstname.lastname@example.org, however we may have deleted or anonymized the feedback you had previously provided to us in a way that makes it infeasible for us to associate a particular piece of feedback with a particular user.
Law Enforcement and Transparency
In General: Although we acknowledge that government sometimes must act to protect citizens' safety and security, we strongly believe that current laws regulating surveillance of individuals and access to user information need to be reformed. We have signed the Stop Watching Us petition and supports the principles of the Reform Government Surveillance open letter to Congress.
We post anonymized information about all law enforcement requests in our transparency report. Mapbox has never received a national security letter, FISA court order, or any other classified request for user information. If we ever receive such a request, we will review it carefully and make sure it follows the law (including the Fourth Amendment). If we believe a request is overly broad, we will seek to narrow it.
If we have a good faith belief that there is an emergency involving the danger of death or severe physical injury, we may disclose limited information necessary to prevent that harm.
Account Information, Hosted Data, Store Data and Payment Information: We require a subpoena or court order to provide information about your account, such as the name associated with the account, means of payment, and length of service. If we are ever forced to share identifiable information about you, we'll notify you with the full details of the request before we disclose it unless we are legally prohibited from doing so by law or court order.
Logs and Mobile Data: We will only disclose information collected through our Services, including maps and associated data and location information, in response to a subpoena or court order.
U.S.-EU Privacy Shield and Swiss-U.S. Privacy Shield
In compliance with the Privacy Shield Principles, we are committed to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us using the information in the "Contact Us" section below. We have further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Under certain conditions, you may be able to invoke binding arbitration to resolve your complaint. Mapbox is subject to the investigatory and enforcement powers of the Federal Trade Commission.
If we share personal data transferred to the U.S. under the Privacy Shield with a third-party service provider that processes such data on our behalf, then we will be liable for that third party’s processing in violation of the U.S. Privacy Shield Principles, unless we can prove that we are not responsible for the event giving rise to the damage.
November 16, 2017: Added clarifying language regarding corporate emails, removed online merchandise store, and updated policy to cover information submitted to Our Vendors.
May 12, 2017: Added language regarding data collected through our soon to be launched online merchandise store.
May 2, 2017: Updated the Privacy Shield certification language.
April 14, 2017: Re-wrote the policy for the purposes of Privacy Shield certification.
January 20, 2016: Updated to reflect EU Safe Harbor invalidation.
July 24, 2015: We now participate in the EU Safe Harbor program.
July 6, 2015: Added clarification regarding third party services, mobile data collection and user age requirements.
March 27, 2015: Added guarantee that we will require a warrant for access to location information. Added exception to legal process requirements for life-threatening or similarly dire emergencies.