Last updated: March 2026
GlocalPin is a product operated in Spain. For privacy matters: info@glocalpin.com.
What we collect and why
Account data — Your email address, used to send verification codes to log you in. Legal basis: contract performance.
Map and layer configuration — Names, descriptions, CSV URLs, field mappings, and display settings you create. Core data the service needs to function. Legal basis: contract performance.
Cached CSV data — When you connect a CSV source, we fetch and temporarily cache its contents to render your map. Cached data is stored as long as the layer exists and deleted when you delete the layer. We do not analyse it for any other purpose. Legal basis: contract performance.
Session data — We use a server-side session cookie to keep you logged in and to track usage of free AI questions on the draft page. This cookie is functional and necessary — it does not track you across other websites. Legal basis: contract performance / legitimate interest.
IP address — On the draft map page, your IP is used server-side to approximate your location and centre the map. It is not stored. Legal basis: legitimate interest.
AI features
The AI chat is powered by Claude, developed by Anthropic (San Francisco, USA). When you use it:
- Your question and a summary of your map data (row counts, layer names, geographic areas) are sent to Anthropic's servers for processing.
- On the draft page, GlocalPin's own API key is used. On a saved map, your own Claude API key is used directly.
- This constitutes a transfer of data outside the EEA. It is covered by Anthropic's standard contractual clauses. See anthropic.com/privacy.
- The AI feature is experimental. Do not rely on it for business-critical decisions.
Analytics
We use cookieless product analytics.
Third-party service providers
We use trusted third-party providers for hosting, email delivery, and analytics. These providers process data only as necessary to provide their services and are bound by appropriate data protection agreements. All hosting is within the European Union. The only named exception is Anthropic, detailed above, due to the cross-border data transfer involved.
Data storage and retention
- All data is stored within the European Union.
- Account and map data is retained until you delete your account.
- Cached CSV data is stored as long as the layer exists and deleted when you delete the layer.
- Sessions expire when your browser session ends or after inactivity.
Your rights (GDPR)
You have the right to access, correct, delete, restrict, port, or object to processing of your data. Contact info@glocalpin.com — we will respond within 30 days. You may also lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.
Changes
We will notify registered users by email of material changes. Continued use constitutes acceptance.