Legal

Privacy Policy

Last updated: 6 September 2026

This policy explains what Cooter Labs ("we", "us", "Cooter Labs") collects through PaisaMap (paisamaps.com and its Workspace app), why, and what choices you have. It's written to describe what the product actually does today — we'll revise it whenever we add a feature that changes what we collect.

What you can use without an account

The public map at paisamaps.com works without signing in. Browsing it and searching for a place doesn't create an account or a profile of you. Two things happen server-side while you use it:

• Location scores, benchmarks, and signals shown on the map are pincode-level aggregate data — government and public datasets plus our own modeled estimates. None of it identifies you or any other individual.
• When you search for a place, or when we resolve an address you've typed to a location, the search text is sent to OpenStreetMap's Nominatim service to look it up. We don't keep a log of what you searched for beyond what's needed to show you the result.

What we collect if you sign in

Signing in uses Google Sign-In. We never see or store your Google password — Google authenticates you and hands us a token confirming who you are. From that token we store:

• Your name, email address, and profile picture URL, as provided by Google.
• A Google account identifier, used only to recognize you on your next visit.

We set one functional session cookie (signed, and marked so it's only sent over HTTPS and never readable by page scripts) to keep you signed in. It's not used for advertising or cross-site tracking, and we don't use any advertising or tracking cookies anywhere on the site.

What Workspace features store

Feature	What's stored
Projects	Project name, description, and the business profile fields you enter (business type, target customer segment, average transaction size, website).
Saved Locations	Pincodes you've bookmarked, an optional label, status, and notes you write.
Reports	The PDF reports you generate, and the scores/benchmarks used to build them.
Store Data upload	Whatever store-level data you upload — see below.
Activity & credits	A log of actions you've taken in Workspace, and your credit balance, so you can see your own usage history.

If you upload your own store data

The Store Data feature lets you upload a CSV or Excel file of your own store locations (address, revenue, rent, CapEx) so we can join it against PaisaMap's signals. We use this data for exactly that — building the report you asked for — and nothing else:

• We never blend your uploaded data into PaisaMap's shared, cross-customer location-intelligence model. It stays scoped to your own account and reports.
• If a row's address isn't already a pincode, we send that address text to OpenStreetMap's Nominatim (the same service the map search uses) to resolve it to a location.
• You're responsible for having the right to share whatever you upload. Please don't upload personal data about identifiable individuals (e.g. your own customers' names or contact details) unless you have a lawful basis to do so — this feature is meant for store-level business data, not customer records.

Who else sees data, and why

Who	What they see	Why
Google	Nothing beyond what Google Sign-In already knows about you.	Authenticating you.
OpenStreetMap / Nominatim	Search text and addresses you (or your uploaded file) ask us to resolve.	Turning a place name or address into coordinates.
Amazon Web Services	Everything stored in our database and application servers.	Our hosting provider — they don't access your data except to keep the infrastructure running.

We do not sell your data, and we do not share it with advertisers or data brokers. If we ever add a feature that connects your own Google Analytics or Search Console account (planned, not yet built), that data will be covered by an update to this policy before it ships — including which Google API scopes we request and why.

How long we keep it

We keep your account and Workspace data for as long as your account is active. If you ask us to delete your account, we'll delete your account data — not just revoke access to it — within 30 days, except where we're required to keep something for legal or security reasons.

Your rights

You can ask us to access, correct, export, or delete the personal data we hold about you, or withdraw consent where we rely on it, at any time — see Contact below. If the Digital Personal Data Protection Act, 2023 applies to you, Cooter Labs acts as the Data Fiduciary for the account data we collect directly (your name, email, and Workspace activity), and as a Data Processor for any business data you upload about your own operations, acting only on your instructions.

Security

All traffic to PaisaMap is encrypted (HTTPS). We use access controls to limit who can reach production data. No system is ever completely secure, and we can't guarantee absolute security — but if we become aware of a breach affecting your data, we'll notify you.

Who this is for

PaisaMap is built for business and professional use — market research and site selection. It isn't directed at children, and we don't knowingly collect data from anyone under 18.

Changes to this policy

We'll update the date at the top of this page whenever this policy changes. For a change that materially affects how we use your data, we'll also email you or show an in-app notice before it takes effect.

Contact