Security and data protection
Your customer list is one of the most valuable things your business has. Here's how GeoMaps keeps it safe, and how you stay in control of it.
Encrypted in transit
Every connection to GeoMaps, from the web app, the mobile apps and the API, uses HTTPS (TLS).
Encrypted integration tokens
Access tokens and credentials for the CRMs, spreadsheets and databases you connect are stored encrypted, and only used to sync the data you chose.
Protected sign-in
Passwords are hashed with bcrypt and never stored in plain text. You can also sign in with Google, or with Apple in the iPhone app.
Your workspace only
Every record, list, layer and route belongs to one workspace, and only the people you invite can see it. Owners and admins manage the team and billing.
Sharing on your terms
Maps are private until you share one. A shared map is read-only, shows only the lists, layers and panels you pick, and can be password-protected.
Payments through Stripe
Subscriptions are handled by Stripe. Your card details go straight to Stripe and never touch GeoMaps' servers.
Share a map without sharing your data
When you share a map, visitors get a live, read-only view of exactly what you chose: specific lists and layers, the starting view, and whether they can search or open the table. They can't edit records, see other lists, or reach your workspace. Add a password for client-only maps, and stop sharing at any time.
We count visits to shared maps without storing visitors' IP addresses: only a one-way hash that changes every day.
You stay in control of your data
- Export any time. Download any list as a CSV from the table view, and routes as CSV or PDF.
- Delete any time. Owners and admins can delete the workspace from the app. Account data is deleted or anonymised within 30 days, as described in the deletion policy.
- Never sold, never used for training. We don't sell personal data, and your data isn't used to train AI models.
- Free tools stay on your device. The file converters, viewers and batch geocoder run in your browser; your files are never uploaded.
Infrastructure and providers
- The app and database run on Railway's cloud platform in the United States.
- A small set of providers help run the service (payments, email, maps, geocoding and routing). Each gets only what it needs. The current list is in our Privacy Policy.
- For customers in the EU and UK, see GeoMaps and the GDPR for our role as processor, data transfers and your rights.
Security questions or a vulnerability to report?
Email [email protected] with "Security" in the subject. We read every report and reply quickly.