Privacy policy

Last updated 13 September 2026

This policy explains the information MarketGround collects when you use the service, how we use it, the providers involved and your choices about that information.

What we collect

Account details. Your email address, the name you give us, and a hashed form of your password. We never store the password itself. We record when your email was verified and when you last signed in.

Organization and membership. The organization your account belongs to, your role in it, and invitations sent to or from it.

Your work. We store the projects and areas you create, including their names, geographic shapes and drawing settings. This content belongs to you. We treat it as confidential and access it only to operate the service or help you at your request.

Sessions. When you sign in we set one cookie, pop_session, which identifies your session. Alongside it we record the browser (user agent) and the IP address the session was created from, when it was last used, and when it was ended. Sessions expire after 30 days.

Billing. For paid plans we keep the organization's Stripe customer and subscription identifiers, the plan and billing interval, the number of seats billed, the subscription's status and its renewal date, and a record of each Stripe event we processed. Card details never reach us.

Usage counts. We record usage counts to apply your plan limits. These include projects, saved areas, daily and monthly assistant questions, and the amount of text processed by the assistant. These records contain counts rather than copies of your activity.

Assistant conversations. If you use the assistant, the messages you send it, and the results of the lookups it runs on your behalf, are sent to the model provider to generate a reply (see below). Your conversations are kept for you: the messages you sent, the assistant's replies and the names of the lookups it ran, so you can return to them later. They are visible to you alone, not to other members of your organization, and you can delete any conversation or all of them from the assistant panel at any time. The results of the lookups are not kept. When you ask the assistant to save a shape or create a project, nothing is saved until you confirm it yourself in the interface.

Request logs. Our servers keep short-lived logs of requests, including IP addresses, for security, rate limiting and diagnosing faults. Rate-limit counters keyed by IP address are kept for at most one hour.

Where to open the map. When you open the map we look up the approximate location of your IP address (typically a city or region) so the map starts near you rather than at a fixed default. The lookup uses a database held on our own server, your address is not sent to anyone, and the result is not stored.

Site analytics. Both the public pages and the application use Cloudflare Web Analytics to count page views and measure page speed. It sets no cookies, does not follow you across sites, and reports pages, referrers, browser type and country, not who you are. An application address can contain an identifier for one of your projects, which is a random string that means nothing outside your account, and no name, shape or figure from your work is ever sent. A report shared by link is not measured at all; the service records the time of each view of a shared report, without the viewer's address, and the owner of the report can see how many times it was opened.

Decisions you record. A decision recorded on a project, with its reason, client and outcome, is your organization's content and is read by its members alone. An owner or administrator may switch on a consent that lets outcomes be counted into aggregate figures by outcome kind and concept, as counts only. No site, client, reason or figure from your work is included in any aggregate, and the switch is off unless you turn it on.

What we do not collect. We do not run advertising pixels or tracking scripts. We do not sell or share information about you for marketing. We do not build profiles of you from other sources.

Why we use it

We use your information to sign you in, store projects, run analyses and apply plan limits. We also send transactional emails you trigger, including verification messages, password resets and organization invitations. We use request information to maintain security and service availability, including detecting abuse. We do not send marketing emails.

Who else is involved

We use a small number of providers to run the service. Each receives only what it needs for its job.

Hetzner hosts MarketGround on a server in Ashburn, Virginia, United States. Resend delivers transactional emails and receives your email address and message content. Cloudflare receives page-view and performance information for site analytics.

Anthropic receives assistant messages and the data retrieved to answer them. We use its API under terms that do not permit training on customer content.

Stripe processes payments and receives your name, email address, billing address, any tax ID you provide and payment card details. MarketGround stores Stripe customer and subscription identifiers, plan information, seat counts and renewal details. We do not receive or store card numbers. Stripe's privacy policy is available at stripe.com/privacy.

Map tiles for population and places are served publicly and carry no information about you. The basemap is served by us from Protomaps data.

How long we keep it

Your account and your projects are kept for as long as your account exists. If you close your account, we delete them. Because we keep database backups for disaster recovery, a deleted record can persist in backups for up to four weeks before those backups are rotated out. Backups are never used to restore individual deleted data.

Your choices

You can change your name and password in settings and end a session by signing out. Plans with export tools let you download your saved areas and analysis. You can also request a copy or correction of your information, or deletion of your account and its contents. Email contact@marketground.io from your account address. We will respond within 30 days.

If you are in a jurisdiction that grants you further rights over your personal data, such as the European Union, the United Kingdom or California, those rights apply and the same address is the way to exercise them.

Security

Traffic is encrypted in transit. Passwords are stored only as salted hashes. Session and reset tokens are stored only as hashes, so a copy of the database does not contain usable credentials. Access to one organization's data from another is denied by design and tested on every release.

Children

The service is for businesses and professionals. It is not directed at children under 16 and we do not knowingly collect information from them.

Changes

If we make a material change to this policy, we will update this page and its date and notify account holders by email. The current policy will remain available at this address.

Contact

Questions about privacy go to contact@marketground.io. Our terms of service cover the rest of the relationship.