Dotmap

Privacy Policy

Last updated: May 28, 2026

This Privacy Policy explains how Dotmap handles information through the Dotmap mobile app and the Dotmap web companion at dotmap.co. Dotmap is designed for floor-plan based field documentation without user accounts, subscriptions, advertising, or cross-app tracking.

Information We Collect

Floor-plan uploads may include the PDF file you choose, converted page images, upload identifiers, QR token metadata, and timestamps needed to make the plan available to the mobile app for a limited time.

Export activity may include a project name, exported plan images, photos, optional photo titles or descriptions included in your export bundle, ZIP file metadata, download counts, device identifier, email address, authorization type, and timestamps needed to deliver and protect the export.

Purchase and entitlement checks may include RevenueCat purchase identifiers, transaction metadata, product identifiers, app user identifiers, and records showing whether a free or paid export was authorized and consumed.

Operational data may include IP address when available, an anonymous visitor token, request metadata, rate-limit counters, email delivery attempts, provider message IDs, error logs, and diagnostics needed to run, secure, troubleshoot, and support Dotmap.

How We Use Information

We use information to provide the core Dotmap service:

  • Convert uploaded floor-plan PDFs into images that the mobile app can import.
  • Create QR codes, signed upload URLs, and signed download URLs.
  • Prepare, finalize, deliver, and re-send export download links.
  • Verify free export eligibility and paid export authorization.
  • Prevent abuse, enforce rate limits, debug failures, and improve reliability.
  • Respond to support, privacy, security, and legal requests.

How We Share Information

We do not sell personal information, use it for third-party advertising, or track you across apps and websites owned by other companies.

We share information with service providers that help us operate Dotmap. Supabase provides database and private file storage. Resend sends export emails. Upstash supports rate limiting and short-lived operational counters. RevenueCat helps verify purchase and entitlement status. Apple App Store and Google Play may process app install, purchase, crash, review, and store listing information under their own terms and privacy policies.

We may also disclose information if required by law, to protect Dotmap or our users, to investigate abuse or security issues, or as part of a merger, acquisition, or transfer of the service.

Retention And Deletion

Dotmap keeps uploaded floor-plan files and converted pages only as long as needed for the short-lived QR import flow. Abandoned prepared uploads expire quickly, QR tokens expire after about 24 hours, and scheduled cleanup removes expired upload files and records.

Export download links expire after about 7 days, and scheduled cleanup removes expired export bundles. We may keep limited export records, email delivery attempts, purchase authorization records, free export consumption records, logs, and diagnostics for support, fraud prevention, accounting, security, and legal compliance.

Because Dotmap does not use accounts, there is no account deletion flow. You can ask us to access, correct, or delete information associated with your email address, device identifier, upload, or export by contacting support@dotmap.co.

Security

Dotmap uses technical and organizational safeguards designed to protect uploaded plans and exports, including private file storage, limited access controls, expiring links and tokens, encrypted connections where supported, and abuse-prevention controls.

No internet service can guarantee perfect security, so please avoid uploading files that you are not comfortable processing through Dotmap.

Children

Dotmap is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided information to Dotmap, contact us and we will take appropriate steps to delete it.

International Processing

Dotmap and our service providers may process information in the United States and other locations where they operate. By using Dotmap, you understand that information may be processed outside your state, province, or country.

Changes To This Policy

We may update this Privacy Policy as Dotmap changes. When we do, we will update the date above. Material changes will be reflected on this page before or when they take effect.

Contact Us

For privacy questions, data requests, or security concerns, contact Dotmap at support@dotmap.co.