Mapillary United States Regional Privacy Notice

Effective July 1, 2024

About this Notice

This United States Regional Privacy Notice (“Notice”) is for people living in the United States and supplements the Mapillary Privacy Policy. This Notice explains how we, Mapillary, collect, use, and disclose your Personal Information. It also describes how to exercise your rights under various U.S. privacy laws. We call those laws collectively the “U.S. Privacy Laws” (full list defined below).

When we say “Personal Information” in this Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you, directly or indirectly. Personal Information does not include information that cannot be reasonably linked to you. When data is deidentified (as defined under the U.S. Privacy Laws), we maintain it in deidentified form and do not attempt to reidentify the information.

How we collect, use, and disclose Personal Information

To provide the websites, mobile applications, and other online products and services we offer (collectively, “Services”), we process information about you, including Personal Information, whether or not you have an account or are logged in. The best way to learn about the types of information we collect and how we use them is to review the Mapillary Privacy Policy.

Subject to the limitations we describe in the Mapillary Privacy Policy, we may disclose your Personal Information for business purposes, with strict restrictions on how our partners can use and disclose the data we provide. We may also disclose it at your direction or in other ways that are in accordance with the U.S. Privacy Laws. We may use data that is considered Sensitive Personal Information under the U.S. Privacy Laws to perform as part of the Services we provide. We don’t “share” your Personal Information, as defined in the California Consumer Privacy Act (“CCPA”). We don’t sell any of your Personal Information, and we never will.

The information we collect, use and disclose about you will vary depending on how you interact with Mapillary. Here is a summary of:

The categories of Personal Information we may have collected about you over the past 12 months
How we may use your Personal Information
To whom we may have disclosed that information

Categories of Personal Information we collect may include:	Examples of how Personal Information may be used include:	Parties with whom each category of Personal Information may be disclosed include:
Identifiers;	Providing, maintaining, personalizing, and improving our products and services, and to improve the technology and algorithms that power our Services, as well as to develop new products and services;	Other Mapillary users and the public for any content you post publicly on our Services;
Characteristics of protected classifications;	Providing measurement, analytics, and other business services;	Integration partners, such as Mapbox and OpenStreetMap, if you choose to use integrations we offer on our Services;
Commercial information;	Promoting safety, integrity, and security;	New owners in the event of a change of ownership or control of all or part of our products or their assets changes;
Photos and videos;	Providing marketing communications to you;	Vendors, companies, and affiliates that provide services to us, including services for web hosting, image blurring, annotation and processing, email delivery, and customer service. Such sharing occurs between and among Mapillary and our current and future parents, affiliates, and subsidiaries, and other companies under common control and ownership; and
Internet or other electronic network activity information, including browser and app logs, content you view or engage with, and app, browser and device information;	Communicating with you; and	Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm.
Location-related information;	Researching and innovating for social good.
Visual information including images and mapping content;	For categories of sensitive personal information that we collect, we will only use or disclose it either with your specific consent when required, or as otherwise permitted by law, including the CCPA.
Professional or employment information;
Education information;
Information derived from other Personal Information about you, which could include your preferences, interests, and other information used to personalize your experience;
Other information you provide; and
Precise geolocation information, which may be considered Sensitive Personal Information under the U.S. Privacy Laws.

Children’s Personal Information

Our Services are general audience services not directed at children under the age of 18. We do not knowingly collect, share, or sell any information from children under the age of 18. If we learn that any information we collect has been provided by a child under the age of 18, we will promptly delete that information.

Sources of Personal Information

Depending on how you interact with our Services, the categories of sources from which we’ve collected Personal Information about you may include:

You: We receive Personal Information from the information that you provide. For example, we collect information you provide when you use our products, including when you sign up for an account, and create or share content. We collect information about how you use our products, including ads we serve on and off our products, such as the types of content you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
Your device(s):We collect information from and about the computers, phones, and other web-connected devices you use that integrate with our products, and we combine this information across different devices you use.
Partners, vendors and third parties: Advertisers, app developers, and publishers and other partners can send us information for business purposes. These partners provide information about your activities on and off our products—including information about your device, websites you visit, apps you use, games you play, and purchases you make. We also receive information about your online and offline actions who have the rights to provide us with your information. These partners collect your information when you visit their websites or use their services or through third parties they work with. We require each of these partners to have rights to collect, use, and disclose your information before providing any information to us. We also obtain information from publicly available sources, research institutions and professional and non-profit groups, including companies or organizations that provide content including videos, photos, or audio.

How long do we keep your Personal Information?

We keep content you have posted to the Services (like imagery you share, forum posts, or comments you post about other users’ content), but upon request, we can remove your username and other identifying information from this content. We keep other Personal Information for as long as we need it to provide our services, comply with legal obligations, or protect our or other’s interests. We decide how long we need information on a case-by-case basis.

Here’s what we consider when we decide:

If we need it to operate or provide our products.
The feature we use it for, and how that feature works.
How long we need to retain the information to comply with certain legal obligations.
If we need it for other legitimate purposes, such as to prevent harm; investigate possible violations of our terms or policies; promote safety, security and integrity; or protect ourselves, including our rights, property or products.

How can you exercise your rights provided under the U.S. Privacy Laws?

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights:

Right to Know: The right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.
Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.
Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.
Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.

To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please visit this webform.

Please note that to protect your information and the integrity of our products, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.

Under certain U.S. Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information. In most cases, we will facilitate your request through automated tools available through your password-protected account.

For information on the CCPA requests we have received, please see here.

Contact for more information

If you have additional questions about this Notice or how to exercise your rights under applicable U.S. Privacy Laws, please email us at support@mapillary.zendesk.com.

Scope of U.S. Privacy Laws

“U.S. Privacy Laws” includes the:

California Consumer Privacy Act
Colorado Privacy Act
Connecticut Act Concerning Personal Data Privacy and Online Monitoring
Florida Digital Bill of Rights
Montana Consumer Data Privacy Act
Oregon Consumer Privacy Act
Texas Data Privacy and Security Act
Utah Consumer Privacy Act
Virginia Consumer Data Protection Act.