Privacy Policy

1. Who we are

Owned Map (“we”, “us”) operates this website and the Owned Map app. For any privacy question or request, write to support@ownedmap.com.

2. What we collect

If you join the early-access list

• Your email address (required).
• Optional details you choose to give: first name, size of your portfolio, the types of assets you own, and what kind of investor you are.
• The time you agreed and the exact consent text you accepted, so we can show that you agreed.

If you create an account and use the app

• Your email address, used to sign you in with a link (there are no passwords).
• The assets you enter: names, type, location, estimated value, purchase cost, yearly income and expenses, status, purchase date, notes, any mortgage or loan balance and payment, and the history of value changes. This can be sensitive financial information, so we treat it that way.
• The share of each asset you own and who holds it, the value and debt history of each asset, and the labels and settings of any read-only share links you create (a hash of the link secret, never the secret itself).
• Files you choose to upload to an asset (for example deeds, insurance papers, invoices, or photos) and the reminders you set (title, type, and due date).
• Technical data needed to keep you signed in, such as a session token stored in your browser.

Automatically, when you visit

Our hosting provider records standard server logs (for example IP address, browser, pages requested, and time) to deliver the site and keep it secure.

3. How we use it

• To provide the app: sign you in, save your assets and documents, show them back to you, and send you the reminders you set.
• To contact you about Owned Map early access and launch updates, if you joined the list.
• To show your portfolio, in read-only form, to the people you give a share link to. Anyone who has the link can see the figures you chose to include until it expires or you turn it off. Notes, documents, and reminders are never included.
• To give your partner or family access to your portfolio, if you invite them. We store the email you enter and the access you choose (view or edit). A person you invite sees your assets, and, with edit access, can also change them, until you remove their access. They cannot create share links or invite others.
• To let a trusted person open your emergency sheet, if you set one up. We store their name, their email if you give it, and the time you chose. They hold a private link that opens only after you have not signed in for that time, or when you release it. They then see your assets with their values and debts, the names of your documents (never the files), your reminders, and the emergency contacts and note you wrote. We email you before it opens, and we email them once that it is open (the email never contains the link). Any visit of yours closes it again, and you can pause, replace or remove it at any time.
• To keep the service secure, prevent abuse, and fix problems.

We do not sell your information, we do not show advertising, and we do not use your assets to profile you or to train advertising systems.

4. Who else handles your data

We use a small number of providers that process data on our behalf:

• Supabase: database, sign-in, and private file storage. Your account, assets, documents, and reminders are stored here.
• Stripe: payments and subscriptions, only if you start a plan. Stripe receives your email and the payment details you type on its own page; we receive the status of your plan and the number of assets it covers, never your card number. If you start a free trial from our website, we create your account from the email you typed on Stripe’s page, and you then choose your own password.
• OpenAI: only when you choose “Upload an invoice, deed or contract” while adding an asset. That one file is sent to OpenAI so it can read it and fill in the form. We do not keep it unless you choose to keep it with the asset, and under OpenAI’s API terms it is not used to train their models.
• Frankfurter (European Central Bank rates): when you use the app, your browser asks this free service for the day’s exchange rates, so it sees your IP address like any website you visit. It receives no information about your assets.
• NHTSA vehicle database: when you look up a VIN, our server asks this public US government service about that VIN. Only the VIN is sent.
• OpenStreetMap (Nominatim): when a document includes an address, the address text is sent to this public map service to find its coordinates.
• Resend (or a similar email service): only when email reminders are switched on, to send you the reminder emails you asked for. It receives your email address and the reminder text.
• Vercel: hosting of the website and its server functions.
• Google Fonts: the Inter typeface is loaded from Google, which means your browser contacts Google servers (and shares your IP address) when a page loads.

These providers may process data in countries other than your own. We share information beyond them only if the law requires it.

5. Cookies and similar storage

We do not use advertising or tracking cookies. The app stores a sign-in session in your browser, and, when it runs without an account, your assets in your browser’s local storage. This is needed for the app to work and stays on your device.

The website has hooks for privacy-friendly usage analytics, but they stay switched off unless you consent, and none is active today. If that changes we will update this page first.

6. How long we keep it

• Your assets, documents, and reminders stay until you delete them or ask us to delete your account. Deleting an asset also deletes its documents and reminders.
• Early-access details stay until you ask us to remove them or the early-access program ends.
• Server logs are kept for a short period by our hosting provider.

7. Your choices and rights

You can delete any asset in the app at any time, and you can download your assets as a CSV file. To get a copy of your information, correct it, delete your account, or remove your email from the list, write to support@ownedmap.com from the email address on the account. We aim to reply within 30 days.

Depending on where you live (for example the European Economic Area, the United Kingdom, or California), you may also have the right to object to or restrict certain processing, to move your data elsewhere, and to complain to your local data protection authority. We honor these requests where the law applies.

8. Security

Data travels over encrypted connections. Each account can only read and change its own assets, and this is enforced in the database itself. No online service can promise perfect security, so please protect your email account well, because anyone who can open your sign-in email can open your workspace.

9. Children

Owned Map is not meant for people under 18, and we do not knowingly collect their information.

10. Changes

If we change this policy in a meaningful way, we will update the date above and, when the change affects how we use your data, tell you in the app or by email.