Effective Date: December 15, 2025
Last Updated: December 15, 2025
PermitMapper ("we", "our", "us") is committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020 and the 13 Information Privacy Principles (IPPs).
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our heavy vehicle permit mapping service.
Our Details:
When you create an account, we collect:
| Data | Purpose | Legal Basis |
|---|---|---|
| Username | Account identification and login | Necessary for service provision |
| Email address | Account recovery and notifications | Necessary for service provision |
| Password (hashed) | Account security | Necessary for service provision |
When you upload permit documents:
We store the following metadata for registered users:
We collect limited usage data to improve our service:
If you enable location tracking:
When you create a shared map link:
We use your personal information for the following purposes:
| Purpose | Data Used |
|---|---|
| Provide the mapping service | Uploaded documents, extracted coordinates |
| Manage your account | Username, email, password |
| Maintain permit history | Stored permit files, metadata |
| Enable map sharing | Coordinates, bridge details |
| Improve our service | Anonymised usage statistics |
| Ensure security | Session data, server logs |
We will not use your information for:
We may share your information in the following circumstances:
We use the following third-party services that may process data:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| OpenStreetMap | Map display | Your IP address (via map tile requests) | Global |
| OSRM | Route calculation | Coordinates for route calculation | Global |
| Nominatim | Address lookup | Search queries | Global |
| Replit (hosting) | Cloud hosting and storage | All service data | United States |
Your data may be transferred to servers located outside New Zealand (primarily the United States for hosting). By using our service, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data.
We may disclose your information if required by law, court order, or government request, or to protect our legal rights.
| Data Type | Retention Period |
|---|---|
| Guest uploads (temporary) | Deleted immediately after processing |
| Account information | Until you delete your account |
| Stored permit files | Until you delete them or your account |
| Shared maps | Until deleted by creator or 12 months of inactivity |
| Server logs | 30 days |
| Usage statistics | Anonymised and retained indefinitely |
Under the New Zealand Privacy Act 2020, you have the following rights:
You can request access to any personal information we hold about you. We will respond within 20 working days.
You can request that we correct any inaccurate personal information.
You can request deletion of your personal information, including:
To exercise any of these rights, contact us at [Your Contact Email]. Please provide sufficient information to verify your identity.
We implement the following security measures to protect your data:
In the event of a privacy breach that poses a risk of serious harm:
If you believe there has been a privacy breach, please contact us immediately.
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | User authentication and CSRF protection | Browser session |
| Terms acceptance | Remember that you accepted terms | Browser session |
We do not use:
PermitMapper is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a notice on our website. The "Last Updated" date at the top indicates when changes were made.
If you have concerns about how we handle your personal information:
For privacy-related inquiries or to exercise your rights:
PermitMapper
Privacy Officer: [Privacy Officer Name]
Email: [Your Contact Email]
New Zealand
Last updated: December 15, 2025