Legal
Privacy Policy
mapiyo shows where a brand's Klaviyo profiles are located. It is built so that it never needs to keep personal information about the people in your Klaviyo account. This policy explains what mapiyo reads, what it stores, and how you control it. "mapiyo", "we" and "us" mean mēmotiv, which operates mapiyo at mapiyo.app.
What mapiyo reads from Klaviyo
When you connect an account, mapiyo uses read-only access to these Klaviyo resources:
- Account: the account's ID, organization name and website, so we know which account is connected.
- Profiles: only each profile's location fields (country, state or region, city, ZIP or postal code, time zone, latitude and longitude, and IP address), the date the profile was created, and its email marketing consent status. mapiyo does not request names, email addresses, phone numbers, street addresses or custom properties.
- Lists and segments: their names and IDs, and their members' location fields when you choose to map one.
mapiyo cannot send email, change profiles, or edit anything in your Klaviyo account.
What mapiyo stores
- Counts, not people. Profile data, including IP addresses, is processed in memory and turned into totals, such as "961 profiles in New York" or "48 profiles in ZIP 10001", split by month created and by email consent. The individual profile records are not saved.
- Your connection. The Klaviyo account ID, name and website, and the access credential you gave us (an OAuth token or a private API key). Credentials are encrypted with AES-256 before they are stored.
- Snapshots. One set of counts per day for your full audience and for any list or segment you map, so you can see change over time.
- Sync records. When each sync ran, how many profiles it read, and any error message.
Cookies
mapiyo sets one essential cookie to keep you signed in, and a short-lived one during the "Connect Klaviyo" step. We do not use advertising or analytics cookies. Your browser may remember display preferences, such as map colors, in local storage on your own device.
Service providers
- Netlify hosts the website, runs mapiyo's servers and stores its database, in the United States.
- Klaviyo is the source of the data you connect.
- Google Fonts and cdnjs (Cloudflare) deliver fonts and open-source code to your browser, which means they see your IP address when the page loads.
We do not sell data, share it with advertisers, or use it to train AI models.
How long we keep data
Counts and snapshots are kept while your account is connected. When you click Disconnect and delete data in Settings, mapiyo immediately deletes the connection, the stored credential, every snapshot and every sync record for that account. Server backups held by our hosting provider expire on their normal schedule. You can also revoke mapiyo's access at any time from your Klaviyo account's integration settings.
Your rights
Depending on where you live, you may have the right to access, correct or delete data about you, or to object to how it is used. Because mapiyo stores only totals, it usually holds nothing that identifies an individual shopper. Account owners can delete everything themselves in Settings. For any other request, email steve@memotiv.agency.
Security
Data moves over HTTPS. Stored credentials are encrypted, access to mapiyo's data is limited to the people who operate it, and mapiyo only ever asks Klaviyo for read access.
Children
mapiyo is a business tool and is not directed at children.
Changes
If this policy changes in a meaningful way, we will update the date above and tell connected account owners before the change takes effect.
Contact
Questions about privacy: steve@memotiv.agency.