MyMaps — Privacy Policy
Effective Date: June 10, 2025
1. Introduction
Momentum CE Inc. ("we," "us," or "our") is committed to protecting the privacy of individuals who use the MyMaps platform (the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, and your rights with respect to that information.
This Policy applies to all users of the Service, including tribal government staff, small business clients and their employees, contractors, and members of the public with access to publicly available map content. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
For tribal government clients, we recognize that data sovereignty and the protection of culturally sensitive information are of particular importance. We handle all such data with heightened care and in accordance with any applicable tribal data governance requirements and the terms of your service agreement.
2. Information We Collect
2.1 Account Information
When you register for a MyMaps account, we collect:
- Full name
- Email address
- Organization name and affiliation
This information is used to create and manage your account and to assign you to your organization within the Service once your setup has been completed by Momentum CE Inc.
2.2 Device and Location Data
When you access the Service, we may automatically collect certain technical information about your device and connection, including:
- IP address and general geographic location derived from it
- Browser type and version
- Device type and operating system
- Pages accessed and time spent within the Service
This data is collected to maintain Service performance, security, and to diagnose technical issues. It is not used to identify or track individual users beyond what is necessary for these purposes.
2.3 Field-Collected Data
Certain MyMaps applications include field data collection features that allow users to submit information directly from the field. This may include:
- Form submissions and survey responses
- GPS coordinates and location data captured during field use
- Photos, notes, or other media attached to field records
Field-collected data is submitted on behalf of the client organization and is treated as Client Data (see Section 4). Users should be aware that location data may be captured when using field applications and should ensure they have appropriate authorization to collect and submit such data.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage user accounts and assign users to their organization within the Service
- To provide, operate, and maintain the Service and its features
- To communicate with users regarding their account, access status, or service updates
- To monitor and maintain the security, integrity, and performance of the Service
- To diagnose and resolve technical issues
- To comply with applicable legal obligations
We do not use your personal information for advertising, marketing to third parties, or any purpose unrelated to the delivery of the Service.
4. Client Data and Our Role as Data Processor
Data submitted to the Service by client organizations — including field-collected data, map layers, records, and any other organizational content ("Client Data") — belongs to the client. Momentum CE Inc. acts as a data processor with respect to Client Data, meaning we process it only as directed by the client and as necessary to provide the Service.
We do not access, use, or share Client Data for any purpose beyond delivering and supporting the Service, except as required by law. Retention and deletion of Client Data is governed by the client's instructions and the terms of the applicable service agreement. When a contract ends, we follow the client's instructions regarding what happens to their data.
Tribal clients retain full data sovereignty over their Client Data, including any culturally sensitive, trust land, environmental, or sovereign information submitted through the Service.
5. How We Share Information
We do not sell, rent, or trade personal information or Client Data to third parties. Information may be disclosed only in the following limited circumstances:
5.1 Infrastructure and Hosting Providers
We use third-party cloud hosting and infrastructure providers (such as Amazon Web Services or similar platforms) to operate the Service. These providers store and process data on our behalf under contractual data protection obligations. They are not permitted to use your data for their own purposes.
5.2 Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Momentum CE Inc., our users, or the public. We will make reasonable efforts to notify affected clients of any such request where permitted by law.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of our assets, user information and Client Data may be transferred as part of that transaction. We will provide notice to affected users and ensure the receiving party is bound by privacy obligations no less protective than those in this Policy.
6. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect the information we hold against unauthorized access, loss, misuse, or disclosure. These measures include access controls, encrypted data transmission, and regular review of our security practices.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. Users are responsible for maintaining the security of their own account credentials and for promptly notifying us of any suspected unauthorized access.
7. Data Retention
7.1 Account Information
We retain your account information for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will remove your personal information within a reasonable timeframe, except where retention is required by law or legitimate business necessity.
7.2 Client Data and Field-Collected Data
Retention of Client Data — including any data collected through field applications — is determined by the client's instructions and the terms of the applicable service agreement. Clients are responsible for establishing retention policies appropriate to their regulatory and operational requirements.
8. Your Privacy Rights
Depending on your location and applicable law, you may have rights with respect to your personal information, including the right to access, correct, or request deletion of information we hold about you.
Because our access management processes are currently handled manually, we ask that any privacy-related requests be submitted to us directly by email. We will respond to all requests in a reasonable timeframe and work with you to address your needs. Contact information is provided in Section 10.
Please note that rights with respect to Client Data (organizational and field-collected data) are governed by the applicable service agreement and are generally exercised by the client organization, not individual users.
9. Sensitive and Culturally Protected Data
We recognize that tribal government clients may use the Service to manage information that carries cultural, legal, or sovereign significance — including data related to sacred sites, natural resources, trust lands, environmental conditions, and community health. We treat such information with the highest level of care and discretion.
We do not share, publish, or disclose tribally sensitive data without explicit authorization from the relevant tribal government. Where a tribal data governance policy or data sharing agreement is in place, those terms govern our handling of such data and take precedence over the general provisions of this Policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify active users via the Service or by email prior to the change taking effect. Your continued use of the Service after any update constitutes acceptance of the revised Policy.
We encourage you to review this Policy periodically. The effective date at the top of this document indicates when it was last revised.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:
Momentum CE Inc.
320 E Vine Dr #316 Fort Collins, CO 80524
privacy@momentumce.com