Privacy notice
Draft for counsel, 2026-09-25. Each open point starts with For counsel, with its code in our records where it has one.
Mapped Margin runs mappedmargin.com and our setup site at app.mappedmargin.com. This notice sets out what each part collects, where it keeps it, and for how long, as the code stands today.
For counsel (G02): the legal entity that runs both sites, its address, and who signs for it.
This site
Cloudflare Pages serves mappedmargin.com, and each page loads its two typefaces from Google Fonts, so your browser's requests reach both Cloudflare and Google.
The site sets no cookie and runs no analytics.
For counsel: whether this notice names Google's terms for the font request, or the fonts move onto our own site.
The demo builder
The demo builder runs in your browser. It keeps your answers, the step you reached and any tool you typed in your browser's local storage, under the name mm-demo-v2, so a return visit picks up where you left off. Restart clears them.
Your answers leave your browser only when you send them: in the contact form, with Email me this demo, or through Start your setup once our setup site opens.
The dashboard demo runs on sample data and sends nothing. The link to it carries your answers after a # in the address, a part your browser sends to no server.
Notes and demo requests
The contact form sends your name, your email address, your company size and your note to our mailbox, a Google account, with the time it arrived. Email me this demo sends your email address, your size, the demo's summary and your name if you give one. Our server keeps no copy of either and emails you nothing, and we answer from our mailbox.
Each request leaves one line in Cloudflare's logs: the time, the result, the request's size and your country, with no name, email address, note or IP address. Cloudflare keeps these lines for three days, or seven on its paid plan.
To slow down spam, the server counts requests from each IP address in its memory for ten minutes and writes the count nowhere. Mail you send to our contact address passes through Cloudflare's email routing to the same mailbox.
The setup site
Our setup site runs on Cloudflare. You sign in with a link we email to the address you give, so you set no password, and each link works once, for 15 minutes.
It keeps your answers to each step, from your name and business to your tools and workflows, the files you upload, a record of each payment, and a log of what happened when. The answers and the log sit in a Cloudflare database and the files in Cloudflare's file storage, both in our account. The log holds no email body, sign-in token or file contents.
A file leaves the setup site only as a download, through a link that works for five minutes, to you or to an admin on our side.
Each request to its server leaves one line in Cloudflare's logs, with no email address, name, answer or IP address, kept for three days, or seven on the paid plan. To slow down abuse, the server counts requests by IP address, and sign-in requests by email address, in its memory for up to an hour.
The setup site sends our mailbox a notice when you connect Google, upload files or make a payment, and the notice for the mapping fee carries your name, email address and answers.
It emails you the sign-in link. Our other emails about your setup go from our mailbox today: a confirmation once you pay, up to two reminders while steps are left, a note after the mapping session, and a note the day before Google ends your connection. Once we switch on the setup site's own sending, they go through Cloudflare's email service. Ask us to stop, and they stop.
Your Google connection
On the tools step you can connect Gmail or Google Workspace. Google's own screen asks for your approval, and your password goes to Google, never to us.
We ask only to read: your Google address, your Gmail messages, your calendars, and the names and details of your Drive files, without their contents. Google calls these scopes openid, email, gmail.readonly, calendar.readonly and drive.metadata.readonly.
We use that access to size your workflows from your real mail and calendar for the mapping session, and no agent runs on it. The setup site itself reads only your Gmail profile, when we check that the connection works.
The setup site encrypts the tokens Google issues before it stores them. You can end the connection at any time: Disconnect on the tools step removes our access at Google and deletes what we stored, and your Google Account's security settings remove it too.
While our Google app is in testing, Google ends each connection seven days after you approve it. Your status page shows the date, we email you the day before, and you can connect again on the tools step. The setup site keeps an ended connection, which no longer works, until you connect again or disconnect.
For counsel: this section, checked against Google's API Services User Data Policy before Google verifies our app. The policy asks a privacy policy to disclose how an app accesses, uses, stores or shares Google user data.
Payments
You pay the mapping fee, the first agent's fee and the monthly retainer on Stripe's own page, so your card number goes to Stripe and never to us. The setup site keeps the amount, the currency, the status and Stripe's references for each payment, and the retainer's status as Stripe reports it. Stripe keeps its own record under its own terms.
Your agents
For a business under about 50 people, we host your agents on Google Cloud, in our own project.
For counsel (G08): the region our hosting runs in.
To build your first agent, we export your enrollment, your answers and your files, into a folder kept for your company alone, and an AI coding tool we run reads it there. The export carries no token and no password.
For counsel (G08): where that folder sits, and the provider behind the coding tool, with its terms.
Each agent logs what it read and did in pointers and hashes, never the text: an entry names the system and the record, with a hash of what the agent read. During the parallel run an agent also keeps each draft it proposed in your agents' own storage, so you can compare it with the reply you sent, and those drafts hold your text.
An agent sends the text of each case, such as an email, an invoice or a lead's message, to an AI model provider, which processes it under terms your agreement names.
For counsel (G08): the provider, how long it keeps case text, and its terms on training. Until they close, this notice promises nothing on training.
For counsel (G08): whether our own AI tools read client data: the one that drafts our replies from our mailbox, and the build tool above.
For counsel (G14): who owns the log and what the agents produce.
For counsel (G16): our written position on patient records and a business associate agreement. Until it exists, we accept no patient data.
Leaving us
If another firm or your own team takes over, we hand over the files and complete control within 24 hours, and the agents keep running.
Your tool connections are grants to our registered app, so we cannot export them. Within the 24 hours you approve the same permission screens again for your next host.
For counsel (G08): what we delete after a handoff, and when: our copy of your deployment, our working copies, and the log's archive.
Deleting your data
The setup site keeps your enrollment until we delete it. Deleting it revokes your Google connection at Google first, then removes your files and every record of your enrollment and your sign-in, and the setup site's log keeps one line that records the deletion, with no name or address in it.
Stripe keeps its own record of your payments, and a retainer still running in Stripe has to end there first.
You can download your answers from your status page. To ask a question or ask for a deletion, write to hello@mappedmargin.com.
For counsel: how long the setup site keeps an enrollment, its log and its files, how long our mailbox keeps notes, requests and notices, and who deletes a client's files after the build. We have not set these periods.
For counsel: the default period the agents' log keeps its entries, which a client can change.
For counsel: the privacy laws that apply to us and to our clients, and what each adds to this notice.