Summary
MapsScraper.dev stores account and workspace metadata in a database and research result artifacts in private object storage, both hosted on Cloudflare. Live Maps business queries are sent to a business data supplier. Homepage audits send bounded, credential-free HTTP requests to the requested public website.
Operator and contact
MapsScraper.dev is a trade name of Adgnbw (Giftuper), which operates this service. Send privacy requests, support questions and legal notices to dev@mapsscraper.dev.
What this product stores
Account email, name, hashed passwords managed by Better Auth, sessions, workspace membership, API key hashes, job inputs and outputs, saved business lists and audit events. Clear API keys are displayed only at creation.
It also stores OAuth client registrations and connection grants for MCP clients you authorize, messages sent from the Contact page, and the branch location profiles, hours and operations your team maintains. Photos uploaded for listing photo audits are stored in private object storage.
Processing services
Cloudflare hosts application and database services. A business data supplier receives live business queries and task parameters. A compatible AI client receives the tool output you request through it. This website does not receive your complete AI conversation automatically.
When an owner or admin enables AI review analysis or listing photo audits, the selected review excerpts or uploaded photos are sent to an AI processing service on our cloud infrastructure for that analysis. Both are off by default.
Optional report sharing
Workspace members with write permission can publish selected report content to expiring links. A share can require a verified account from an explicit email allowlist; the allowlist is stored in workspace metadata and excluded from the recipient snapshot. Link capabilities are stored only as hashes. Branded snapshots are private Cloudflare objects served after fresh access checks. Revocation stops future reads but cannot remove downloaded copies. Owner exports include share metadata, and account deletion removes retained report artifacts and metadata.
Optional webhook destinations
A verified workspace administrator can explicitly enable signed job receipts to a public HTTPS receiver. Receipts contain job ID, kind, status, charged units and result count. Receiver URLs and signing secrets are encrypted; delivery metadata is retained for the configured 7–90 days. Pausing or removing a destination stops pending deliveries, but cannot recall already received copies. Workspace exports include redacted receipts, and account deletion removes retained destination and delivery data.
Optional website measurement
Marketing measurement is disabled by default. When enabled, it requires your explicit choice in Privacy preferences, available in the footer. Browser Global Privacy Control and Do Not Track signals block collection. Only aggregate event counts, page names and configured campaign/source labels are stored; no visitor identifier, query string, raw referrer or form content is collected. Your browser stores your choice and, after consent, a tab-scoped campaign label. You can withdraw permission at any time. Aggregates expire after the operator-configured retention period, at most 90 days. Infrastructure security logs follow separate Cloudflare retention.
Shared snapshots
Publishing a snapshot exposes selected fields to holders of its link who satisfy any share-password and verified-account restrictions. Share passwords use unique salted verifiers and cannot be recovered. Link secrets and entered passwords stay in the current browser tab; they are not stored in browser storage or included in shared files. Links are optional and read-only. Expiry and revocation stop future access but cannot recall downloaded copies.
Current limitations
Processing agreements, region guarantees and verified email delivery remain launch requirements. Self-service data export and cancellable account deletion are implemented. Checkout is not enabled. No advertising trackers are installed.