Privacy

Last updated: [date]

This policy explains what personal information cuantomap.com (the "site") collects and how we use it. The site is run by [OWNER] ("Cuantomap," "we," "us").

In short

You can use the site without an account and without telling us who you are.
We collect personal information only when you send us a form or an email.
We do not store IP addresses with what you send us.
Our analytics do not use cookies and do not follow you to other sites. [Confirm provider.]
We do not sell your personal information or share it for advertising.

What we collect

When you browse

We do not store information that identifies you. Cloudflare, which hosts the site and protects it from attacks, processes your IP address and basic browser details to deliver pages and block abuse. Cloudflare handles that data under its own privacy policy.

We use [Cloudflare Web Analytics] to count visits in total: pages viewed, the site that sent you, country, and device and browser type. [Cloudflare says this tool does not use cookies or local storage to track visitors and does not fingerprint them.]

When you send a form

We store what you type, the date, and which business or city the form was about.

Report a price or a closure: the business, the item if you chose one, what is wrong, the price you saw and your note. This form does not ask for your name or email.
Suggest a place: the business name, its address and website, and your note. This form does not ask for your name or email.
Claim a business page: the business, your name, email address, your role at the business and your message. We also keep the steps we used to verify your claim.

To stop spam, the site limits how many forms can be sent from one IP address in an hour. It counts them under a scrambled code made from the address with a key that changes every day, never the address itself, and never saves the code or the address with your submission. Each count is deleted once its hour is over, the next time anyone sends a form or at our nightly check, whichever comes first.

When you email us

We keep your email and our reply.

On your device

The site does not set cookies or save anything in your browser. Your search and filters are kept in the page address, so you can share a search by sharing its link.

Location

If you tap "Near me" and allow it, your browser gives the page your location so it can sort places by distance. This happens on your device. We do not send your location to our servers or keep it.

Information about businesses

The site lists businesses with their prices, hours, address and phone number, as the businesses publish them. Some businesses are run by one person, under that person's name or from a home. If that is you, you can ask us to hide your street address or change how the business is named. See our Corrections and removals policy.

We do not collect information about a business's customers or staff.

How we use information

To answer you and to act on your report, suggestion or claim
To check that a person claiming a page can act for the business
To correct errors and keep prices accurate
To prevent spam, fraud and abuse
To understand how the site is used, in total numbers only

We do not send marketing emails unless you ask for them.

We use service providers to run the site. They handle data for us and only for that purpose:

Cloudflare: hosting, security, form storage and analytics
[Email provider for [email protected]]
[Server host for our data systems, for example Contabo]

We send menu text and images to an AI service (Ollama) to read prices. We do not send form submissions to it.

We may also share information when the law requires it, to protect someone's safety or our rights, or as part of a sale or transfer of the site. If the site changes hands, this policy will still cover the information we hold.

We do not sell personal information. We do not share it for targeted advertising.

How long we keep it

Price reports and suggestions: [12 months], then deleted. A price we corrected because of a report stays on the site.
Business claims and verification records: as long as the page stays claimed, plus [2 years].
Emails: [2 years].
Removal records: we keep the business name, address and the date it asked to be removed, so it stays removed.

Your choices and rights

You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. Email [[email protected]]. We will reply within [30 days]. We may need to confirm who you are first. We offer these choices to everyone, wherever you live.

We do not sell or share personal information, so there is nothing to opt out of. If that ever changes, we will update this policy first, offer a way to opt out, and honor browser signals such as Global Privacy Control.

Children

The site is for a general audience. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you think a child has sent us information, tell us and we will delete it.

Security

We protect what we hold with reasonable measures, such as limited access and encrypted connections. No system is perfectly secure.

Where data is processed

We run the site from the United States. [Our providers may process data in other countries. Confirm server locations.]

Changes

If we change this policy, we will post the new version here with a new date. If a change is significant, we will also say so on the site. If we publish this policy in Spanish or another language, the English version controls.

Contact

[email protected] [not yet set up] [Postal address]

Drafting notes for counsel (remove before publishing)

This draft assumes the Florida Digital Bill of Rights, the CCPA and the Texas TDPSA do not apply (brief, question 8), but follows their basic notice items anyway.
Still to confirm: the analytics provider, and whether service listings drop staff names (for example "haircut with Maria"). Checked in the code: the forms API uses the IP address only for the hourly rate limit, as a salted hash, and never writes the address to the database (worker/src/handler.js and its tests); no cookies or browser storage; "Near me" uses the location only on the device; report and suggestion forms collect no name or email.
Florida's sensitive-data rule (Fla. Stat. 501.715) lists precise geolocation as sensitive data. We do not sell any, but keep visitor location on the device.
In-person photos: the contractor app records each photo's time and location. That is the contractor's data and belongs in the contractor agreement. Photos that catch a person by accident are deleted (see contractor_checklist.md).
If we add business logins with passwords, Florida's breach law (Fla. Stat. 501.171) covers an email address combined with a password. Add a breach section then.
Revise before adding ads or paid listings.