Mapize
Data Processing Addendum
This Data Processing Addendum ("DPA") forms part of the agreement between you ("Controller") and Mapize, Inc. ("Processor") for Mapize, and applies to the processing of personal data contained in the datasets you upload.
1. Roles
For the personal data of third parties inside your uploaded datasets, you are the Controller and we are the Processor. You are responsible for having a lawful basis to upload and map that data.
2. Scope and instructions
We process dataset personal data only to provide the Service and on your documented instructions, including geocoding, rendering, sharing, and export as you configure them.
3. Security and confidentiality
We apply appropriate technical and organisational measures, encrypt data in transit, and restrict access to authorised personnel bound by confidentiality.
4. Sub-processors
You authorise us to engage the following sub-processors. We maintain this list under a version and will notify you of material changes so you can object:
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Stripe | Subscription billing and payment processing. | Account email; Billing and payment metadata | United States |
| Geocodio | Converting uploaded addresses to coordinates (primary US geocoder). | Uploaded addresses (may contain third-party personal data) | United States |
| U.S. Census Bureau Geocoder | Address geocoding and aggregate demographic lookups. | Uploaded addresses; Aggregate (non-identifying) demographics | United States |
| Pelias (self-managed open-source geocoder) | Fallback geocoding on operator-controlled infrastructure. | Uploaded addresses (may contain third-party personal data) | Operator-controlled infrastructure |
| Protomaps | Vector basemap tiles for map rendering. | No personal data (basemap tiles only) | United States |
| Amazon Web Services (S3 object storage and content delivery) | Storage of uploaded dataset files, generated map assets, and their delivery. | Uploaded dataset files; Generated map and export assets | United States |
| Large-language-model provider (natural-language query parsing) | Parsing your natural-language map instructions into structured operations. | Natural-language query text; Dataset column names and schema (not row values) | United States |
| Transactional email provider | Delivery of account, billing, and service-notice emails. | Account email | United States |
| Application hosting provider | Running the application and its database. | All application data at rest | United States |
5. Data-subject requests and deletion
We assist you in responding to data-subject requests and, on termination or your request, delete or return dataset personal data, subject to the retention windows in the Privacy Policy.
6. Contact
DPA and data-protection matters: support@mapize.com, Mapize, Inc., 8117 Rockport Circle, Las Vegas, NV 89128, USA.