In plain language: your personal data is not a product. We use what is needed to provide and secure Extractor Maps and, only with your permission, to understand product use or measure campaigns.
01Who is responsible for your data
Extractor Maps is the service described here. Grupo Gesemit, CNPJ 29.624.944/0001-11, based in Garopaba, Santa Catarina, Brazil, is responsible for the personal-data processing used to operate Extractor Maps.
This policy covers our website, product, checkout, support and service-related communications, including visitors, account holders and buyers.
02What data we use
We use account and authentication data, such as name, email and sign-in identifiers, to create and maintain access. If you sign in with Google, we receive only the basic information you allow Google to share for that purpose.
We also use the data needed to provide the service, answer support requests, manage subscriptions or orders and meet applicable obligations. Payment providers process the information needed to complete a payment; we do not use payment information to build advertising profiles.
To protect accounts and prevent abuse, we may use limited technical and security data, such as access records, browser or device signals. This is for platform security, not to follow you around the internet.
03Why we use it
We use data to provide the service, protect it and, only where permitted, improve it or measure how people find it. Account access, support, payments and security are necessary to provide the service, meet legal duties or protect users and the platform proportionately.
Analytics, advertising and personalisation are optional. They are not required to create an account or use essential functions. Where consent is required, they remain off until you choose the relevant category.
04Cookies and your choices
Essential cookies help us keep your session secure and remember indispensable settings. Analytics cookies measure aggregate product use; marketing cookies measure campaigns. You can accept, refuse or change optional categories in the cookie settings at any time. Simply browsing does not mean accepting optional cookies.
When you withdraw permission, we stop new optional transmissions and remove platform-controlled attribution data where technically applicable. Data already processed by a provider, or retained because law requires it, remains subject to the applicable safeguards and retention rules.
05Google, Meta and new-account events
When marketing consent is active, a real new-account creation may be measured as a Lead conversion. Meta may receive that event through the browser and our server. The two Meta deliveries share an event identifier so Meta can recognise one conversion, rather than count it twice.
Google Analytics may receive the same new-account measurement through browser and server channels for product and campaign analysis. Reports identify those channels so a real account creation can be treated as one business conversion. Signing in again, even many times, does not create another Lead. Without the required consent, these marketing and analytics transmissions are not made.
06Who may receive data
We do not sell personal data. We may share the minimum needed with providers that host or operate the service, authenticate users, process payments, send email, provide support, prevent fraud or, with your permission, provide analytics or advertising. Some providers may process data in other countries; we seek appropriate contractual, technical and organisational safeguards for such transfers.
07How we protect information
Our controls include access restrictions, separation of permissions, authentication, relevant operation records, session protection, integration review and abuse detection. Tracking data and logs are minimised, and sensitive personal information must not be included in marketing or analytics events.
No internet-connected system can eliminate all risk. If an incident could create a material risk or harm, we investigate, contain and document it, and notify people or authorities when the law requires us to do so.
08How long we keep data
We retain data only as long as needed to provide the service, resolve support or security issues, meet legal duties or exercise rights. When an account is closed, we begin deleting account and platform-controlled tracking data. We keep only the minimum where law, fraud prevention or legal claims require it.
09Your rights and how to contact us
Depending on applicable law, you can ask for confirmation, access, correction, sharing information, anonymisation, blocking or deletion where applicable, portability, withdrawal of consent or objection to certain processing.
To start a privacy request, email help@extractormaps.com with the subject “Privacy”. We may ask for a reasonable identity check before disclosing data or changing an account, to protect you and other users.
10Changes to this policy
We may update this policy when the service, providers, security controls or law changes. The current version and its date remain available on this page. For material changes, we will use a notice appropriate to their impact.
Last updated: 9 September 2026. This policy was written with Brazil's LGPD and, where applicable, the European Union's GDPR in mind.