Privacy Policy

01Who we are

This policy covers drivearth.com. Our owner is responsible for personal information. Privacy requests and complaints: [email protected].

02What we collect

• Account information: email, account ID and, when you use Google or Discord sign-in, the name and profile picture they provide.
• Orders: selected area or road, map name, options, price, status and build history.
• Payments: Stripe transaction reference, checkout email and payment status. Stripe collects payment details directly; we do not receive your card number.
• Support: messages and information you send us.
• Technical information: IP addresses and request logs processed by Cloudflare, plus filtered error reports with a hashed user ID.

Map selections can reveal places connected to you. Providing account and order details is necessary for the corresponding service; without them, we may be unable to process the order or provide the account.

03Why we use it

We use information to manage accounts, take payment, build and deliver maps, provide support, secure the service, resolve disputes and meet legal and accounting obligations. Our emails concern accounts and orders; we do not send marketing emails.

Where UK data protection law applies, our bases are performance of the contract for accounts, orders and support; legal obligations for required records; and legitimate interests in security, fraud prevention and technical fault diagnosis, balanced against your rights. We obtain consent where it is required.

AI-assisted failure reports help us diagnose technical problems; they do not make final refund or publication decisions.

04Who we share it with

• Cloudflare: hosting, API, database, files and security.
• Amazon Web Services: build servers, transactional email and operational alerts.
• Clerk: sign-in and accounts; Google or Discord also handle sign-in if you select them.
• Stripe: payments.
• Mapbox: map display and place search; it receives your IP address and search text.
• Anthropic: technical logs, including order details but not payment data, when repeated build failures need diagnosis.
• Google Gmail: support messages.
• Discord: operational alerts containing order IDs.

If you choose a public-sharing feature on our sites, the map, its title and the locations it contains become public. Private sharing with friends is your choice.

Providers may process data outside Québec, including in the United States and elsewhere in Canada, where different laws apply. Contact us for information about a transfer or its protections. Providers also act under their own privacy notices for activities they control independently. We may disclose information when legally required or necessary to address a dispute.

05How long we keep it

• Map files: 14 days after the build.
• Order event logs: 90 days.
• Error reports: 30 days.
• Order and payment records: for the legally required retention period, generally 6 years from the end of the relevant Canadian tax year, or longer where required.
• Other account information: until account deletion; support and security information: only as long as needed for the relevant request, security issue or legal obligation.

Deleting an account does not delete records we must legally retain.

06Your rights

You can export your account data and delete your account from the site. Contact us to request access or correction and, where applicable, deletion, portability, restriction, objection or withdrawal of consent. Withdrawal does not invalidate earlier lawful processing. We may need to verify your identity and retain legally required records.

We respond within applicable legal deadlines. You may complain to Québec’s Commission d’accès à l’information, the Office of the Privacy Commissioner of Canada, the UK Information Commissioner or another competent authority, as applicable.

07Changes and contact

We publish updates here and give any additional notice or request any consent required by law. Contact: [email protected].