| Version | 2026-09-26 |
| Effective date | 26 September 2026 |
| Controller | MAVEN VERSE S.R.L. |
This Privacy Policy explains how MAVEN VERSE S.R.L. ("Maven Verse", "we", "us" or "our") collects, uses, stores, shares and deletes personal data when you use your MavenPilot account and the services linked to it: MavenRoute, MavenCloud, MavenShare and MavenScene (together, the "Services"), as well as our mobile apps and the website www.mavenpilot.com.
In short. We use your data to run your account and the Services you use, and nothing else. Your missions, photographs and results are yours: we do not sell them, we do not use them for advertising or profiling, and we do not use them to train artificial-intelligence models. We send promotional emails only if you ask for them. Our account databases and your uploaded files are stored in the European Union; some providers also process limited data elsewhere as explained below. You can delete your account at any time, subject to the retention exceptions below.
For the processing described in this Policy, the controller is:
MAVEN VERSE S.R.L.
Str. Biharia nr. 26, Etaj 3, Ap. BIR3F, Sector 1, 013981 București, Romania
Trade Register no. J2024045170009 — CUI 50958671
Email: info@mavenpilot.com
We have not appointed a Data Protection Officer. Send any privacy question or request to info@mavenpilot.com.
Missions, photographs and other content you upload may contain personal data about other people, for example people, number plates or properties visible in images, or locations linked to someone. When a business customer uploads such content for its own purposes, that customer is the controller and we act as its processor: we handle the data only on its instructions and to provide the Services, and a data processing agreement can govern that relationship. The customer is then responsible for informing the people concerned and for having a legal basis. We help as the law and that agreement require.
Account data. Email address, name if you provide it, the sign-in method you use (email and password, Google, or email code), your account identifier, whether your email is verified, and sign-in, registration, verification and password-reset events.
Your legal acceptance and preferences. The version of these documents you accepted, when you accepted it, from which Service and in which language; whether you agreed to receive promotional emails, and every later change to that choice. We keep these records to prove what you agreed to.
Missions and MavenCloud data. Mission names and tags; waypoints, polygons, routes and their coordinates; altitude, speed, camera, overlap, action and export settings; previews and thumbnails of your missions.
Sharing data. Your shared and public missions, their links and settings, and the email addresses of the people you invite to a restricted share. For those people, we use the address only to send the invitation and to let them open what you shared.
MavenScene content. Uploaded photographs, file names and sizes; their metadata, which can include GPS position, time, camera and aircraft details; ground control data and coordinate systems; project and job names and settings; notes, measurements and other review objects; the Generated Outputs; share settings, including a one-way hash of any share password you set.
Plans and payments. Your plan, subscription status, renewal and expiry dates, and usage measured against your plan limits. Payments are handled by Paddle, which acts as seller of record (see section 9): we receive the information needed to manage your subscription, such as the plan, status, country and invoices, but never your full card details.
Maven app ownership (where available). If you link a Maven mobile app purchase to your account, we receive from Apple or Google the information needed to verify that purchase, such as transaction identifiers, the product purchased and the purchase date. We store purchase tokens only in a one-way hashed form.
Messages. Emails you send us and our replies; delivery information for the emails we send you, such as sign-in codes, verification, password reset, invitations, notices and, if you asked for them, promotional emails.
Usage and technical data. Like any website, our servers and our providers receive your IP address and browser information with each request. MavenRoute also sends us basic usage events: the start and end of a planning session, missions created, imported or exported and in which format, map and mission type changes, overlay imports, the chosen language, guest export limits being reached, and the creation and deletion of an account together with the sign-in methods it used. These events do not contain your name, email address or account identifier. We also keep security, error and operational logs.
Places and coordinates you look up. To show maps, satellite imagery and terrain heights, and to search for places, the Services send the map area you are viewing, the coordinates of your mission points and the text you search for to the map and elevation services described in section 9.
We do not intentionally collect special categories of data, such as data about health, religion or political opinions. Please avoid putting such information in mission names, notes or other free text.
Mostly from you: when you create an account, plan and save missions, upload content, share it or contact us. Some data is generated by the Services as you use them, such as outputs, logs and usage events. Some comes from third parties: Google, if you sign in with Google; Paddle, for subscriptions; Apple or Google, to verify app purchases. A person who shares content with you, or invites you by email, gives us your email address or the content they share.
| Purpose | Legal basis under the GDPR |
|---|---|
| Create, secure and run your account, and let you sign in | Performance of our contract with you |
| Plan, store, process, share and deliver your missions and content | Performance of the contract; for customer-controlled content, the customer's instructions (section 3) |
| Send the emails the Services need: sign-in codes, verification, password reset, invitations, notices about your content or plan | Performance of the contract |
| Record your acceptance of our Terms and Policy | Legitimate interest in proving the agreement; legal obligation where applicable |
| Apply plans, limits and fair-use rules, including guest export limits | Performance of the contract; legitimate interest in fair and sustainable operation |
| Manage subscriptions and keep accounting records | Performance of the contract; legal obligation |
| Keep the Services secure and prevent abuse | Legitimate interest in protecting users and infrastructure; legal obligation where applicable |
| Understand how the Services are used and fix problems, using the usage events and logs described above | Legitimate interest in maintaining and improving the Services |
| Answer your requests | Performance of the contract; legitimate interest in customer service |
| Send you news about features and offers | Your consent, which you can withdraw at any time |
| Establish, exercise or defend legal claims | Legitimate interest; legal obligation |
Where we rely on legitimate interest, you can object at any time (section 16).
We use them only to provide what you ask for: to validate and store uploads, generate previews, exports and outputs, keep them according to your plan, run the shares you configure, give the support you request, keep the Services secure and comply with the law. We do not:
We may use aggregated operational figures that do not contain your content, such as numbers of jobs, processing times and error rates, to run and improve the Services.
Our staff do not routinely look at your content. Authorised staff may access it only when necessary to provide support you requested, investigate a technical or security problem, prevent abuse, restore the Services or meet a legal obligation, and only as far as needed.
We send news about features and offers only if you tick the dedicated box, when you create your account, in the acceptance window, or later in your account settings. That box is never pre-ticked and is separate from the acceptance of our Terms.
We do not sell your email address or share it for another company's marketing, and we do not send spam. Every promotional email includes a link to unsubscribe in one click without signing in, and you can switch the preference off in your account settings at any time. We record when and where you gave or withdrew consent. Service emails your account needs, such as sign-in codes or notices about your content, are not promotional and are not affected by this choice.
We share personal data only as needed for the purposes above.
| Recipient | What for | Where |
|---|---|---|
| Google (Firebase) — Authentication, Cloud Firestore, Cloud Storage, Cloud Functions; Google Sign-In if you choose it | Accounts and sign-in, storage of missions, previews, shares and account records; the function that erases your data when you delete your account | Firestore and Storage: Belgium, EU. Authentication runs on Google's global infrastructure. The deletion function runs in the United States (see section 14). |
| Aruba S.p.A. | Hosting of www.mavenpilot.com, MavenRoute and our account services | Provider location and backup schedule can be requested from us |
| Hetzner Online GmbH | MavenScene servers, processing and S3-compatible object storage for your photographs and outputs. Your files normally travel from your browser straight to that storage; our processing servers hold temporary copies during processing and for the cleanup period described in section 12 | Germany and Finland (EU): coordinator, storage and one processing server in Falkenstein, Germany; a second processing server in Helsinki, Finland |
| Mapbox | Maps, satellite imagery and place search. Your browser contacts Mapbox directly, which receives your IP address, browser information, the map area viewed and search text | United States and other countries |
| ElevationAPI.com, through our own endpoint | Terrain heights for your mission points; it receives the coordinates of those points from our server, not your IP address | Provider location available on request |
| OpenStreetMap Foundation | Map tiles in MavenScene's photo classification map. Your browser contacts it directly and it receives your IP address, browser information and the map area viewed | United Kingdom |
| Content-delivery networks: unpkg, jsDelivr, Google (gstatic.com) | Delivery of software libraries; they receive your IP address and browser information | Worldwide |
| Email delivery provider: Aruba S.p.A., Italy | Sending service emails and, if you opted in, promotional emails, from separate mailboxes | European Union; precise data centre available on request |
| Paddle (selling entity identified at checkout) | Checkout, payment, taxes, invoicing and refunds for paid plans. Paddle is the seller of record and processes payment data as an independent controller under its own privacy policy | See Paddle's buyer privacy notice for processing locations |
| Apple and Google (app stores) | Verification of Maven mobile app purchases you link to your account, where available | United States and other countries |
| Professional advisers | Legal, accounting, tax or security advice, limited to what is necessary | EU |
| Authorities and others | Where the law requires it, to protect rights and safety, or in a business transfer subject to confidentiality | Where applicable |
The processing engine behind MavenScene runs as part of our own service and is not a separate platform you interact with. We choose our providers carefully and bind them to protect your data. An up-to-date list of our providers is available on request at info@mavenpilot.com.
When you share a mission or job, whatever you choose to share becomes available to the people who receive the link or who are invited by email. Public missions can be seen by anyone who visits the public area. For password-protected MavenScene shares we store only a one-way hash of the password. People who open a share do not need an account, but we process their IP address and technical data to deliver and protect it.
Revoking a share, or deleting the mission or job, stops access through our Services but cannot erase copies that recipients have already downloaded or recorded.
Our web applications store in your browser only what they need to work:
The web applications do not use advertising or tracking cookies. If we ever add optional analytics or similar technology, we will ask for your consent first where the law requires it. You can clear this data in your browser; doing so may sign you out, delete missions you had not saved and reset your settings. The cookies of www.mavenpilot.com are described in our Cookie Policy.
| Data | How long |
|---|---|
| Account data | While your account exists; deleted when you delete your account |
| Legal acceptance and preference records | While your account exists; deleted with your account |
| MavenCloud missions and their previews | Until you delete them or your account |
| Shared missions and invited email addresses | Until you revoke the share, delete the mission or delete your account |
| Public missions | Until you unpublish or delete them, or delete your account |
| MavenScene photographs and outputs | For the retention periods of your plan shown in the Service, or until you delete them, whichever comes first |
| Photographs of an upload that was never completed | Removed automatically within about a day |
| Temporary copies on our processing servers (photographs, intermediate files and results of a processing run) | Deleted automatically within about two days after the run ends, whether it finished, failed or was stopped |
| MavenScene review objects and job details | For the life of the job |
| MavenScene product statistics and admin telemetry | 12 months from the event |
| Other usage events and technical logs | Kept for operational, security and legal needs; the period varies by system |
| Support messages | Up to three years after your request is closed |
| Subscription and invoice records | For the periods required by accounting and tax law (Paddle keeps its own records as seller of record) |
| Payment notifications received from Paddle (transaction and subscription identifiers, status and dates; no card details) | 12 months from receipt, also after the account is deleted |
Backups and deleted files. Deleted files in our Firebase storage remain recoverable for 7 days and are then permanently removed. The MavenScene database, which holds your account details and job records, is backed up in encrypted form every six hours. Scheduled copies are kept daily for a week, weekly for a month and then monthly for three months, so normally for about four months; up to three monthly copies are retained until newer monthly copies replace them, so they can remain longer if the backup schedule is interrupted. A copy is also taken before each software release; these are deleted after 120 days, except recovery copies protected for the current or previous release, unfinished deployments, and the two newest release backups. These remain until replacement or resolution of the deployment. MavenScene photographs and outputs are not backed up: once deleted they cannot be recovered. Backup copies are kept isolated, are not used for ordinary purposes and are restored only to recover from a failure or where the law requires; before restored MavenScene data is made available again, we reconcile deleted accounts against our account service and reapply Job deletions using verified deletion records. Missing files alone are not proof that a Job was deleted. If deletion records are unavailable or incomplete, restored data is kept unavailable while we reconcile it manually.
We may keep limited records longer where the law requires it, for accounting or to establish or defend a legal claim.
You can delete your account at any time from your account settings, or by writing to info@mavenpilot.com. Because the account is shared, deletion removes your account and your content from all MavenPilot Services, including your MavenCloud missions and previews, your shares and public missions, the email addresses you were invited with in other people's shares, your MavenScene photographs and outputs, and your legal acceptance and preference records, subject to the backup period in section 12.
One exception, because a job code and its cost history are permanent for each project: the record of a MavenScene job is anonymised rather than deleted. What survives is a row carrying no reference to you, with the dataset name replaced by a placeholder, holding only the job code, counts, sizes, dates and timings, the kind of processing and quality chosen and which outputs were requested and produced, and unreachable from every part of the Service; the record of each processing start (dates, number of photographs and whether it counted towards the allowance) is kept the same way. File names, mission names, processing settings and engine options, which may include the boundary of the area, and messages are cleared once your files have been removed from storage. Your photographs and the results generated from them are removed.
Removal from every Service happens without undue delay and in any case within 30 days, and we keep only what the law requires us to keep, such as accounting records of past payments.
We are established in the European Union, and our account data in Firebase is stored in Belgium. Some providers, such as Google for authentication and for the account-deletion function, Mapbox and the content-delivery networks, may process data outside the European Economic Area, including in the United States. Your missions, photographs and results are stored in the European Union: Firebase in Belgium; MavenScene storage in Germany, with temporary processing copies in Germany and Finland. Where this happens we rely on an adequacy decision, such as the EU–US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses, with additional safeguards where appropriate. Ask us at info@mavenpilot.com for details.
We use technical and organisational measures suited to the risk, including encrypted connections, access controls and ownership checks for private data, protected sharing options, expiring tokens, rate limiting and deletion workflows, and we review them as the Services evolve. No online service can be completely secure: protect your sign-in methods, share links carefully and tell us promptly if you suspect unauthorised access. If a personal-data breach occurs, we assess it and notify the supervisory authority and, where required, the people affected, as the law requires.
We do not take decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic features, such as applying plan limits or proposing how to group photographs, do not have that kind of effect, and proposals require your confirmation.
Under the GDPR, and subject to its conditions, you can:
Write to info@mavenpilot.com. We may ask you to confirm your identity. We reply within one month, which the law allows us to extend in complex cases, and we will tell you if we do. If we act only as processor for a customer's content (section 3), we may pass your request to that customer or help it answer.
Our lead supervisory authority is Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro. You may also complain to the authority of the EU country where you live, work or where the alleged infringement took place.
You must be at least 16 to create a MavenPilot account, and at least 18 to buy a paid plan. We do not knowingly collect data from children below these ages. If you believe a child has given us personal data, contact us and we will take appropriate steps.
We may preserve or disclose information where we reasonably believe it is required by a valid legal process or necessary to protect rights, safety and the Services. We check requests for their legal basis and limit what we disclose; where the law allows, we inform the person concerned.
If Maven Verse is involved in a merger, acquisition, financing, reorganisation or sale, data may be disclosed under confidentiality and transferred subject to this Policy. Your content is never sold on its own for advertising or data-broker purposes.
We may update this Policy to reflect legal, technical or service changes. We publish each new version with its version date and keep previous versions available. Version of 15 May 2026. If a change is material, we tell you in advance through the Services and, where appropriate, by email, and we ask you to confirm that you have read the new version before you continue using your account. If a change requires your consent for a new purpose, we ask for it separately.
For privacy questions, requests to exercise your rights or complaints:
MAVEN VERSE S.R.L.
Str. Biharia nr. 26, Etaj 3, Ap. BIR3F, Sector 1, 013981 București, Romania
Email: info@mavenpilot.com