Privacy

JourneyMap is operated by People Work Life Ltd, a company registered in the United Kingdom. We are the data controller for the personal data described in this policy. For any question, email hello@journeymap.ai.

Account details: your name and email address, and any profile fields you choose to fill in (display name, title, pronouns, bio, time zone). Content: the canvases, journey maps, projects, clients, notes, and transcripts you create inside your workspace. Usage and device data: how you use the app and basic technical information such as browser and IP address, gathered to keep the service reliable and secure. Billing data: Stripe processes your payments, and your card details never touch our servers, but we retain your subscription status and billing event records, which can include your name, email, and billing address from Stripe receipts.

We use this data to run the service (signing you in, storing your work, sending transactional emails such as invitations and password resets), to bill you for Pro subscriptions, to provide support, and — where you haven't opted out — to send product emails. Our legal bases are performance of our contract with you, our legitimate interest in operating and improving JourneyMap, and, for marketing emails, your consent.

When you use an AI feature — insight extraction, transcript analysis, codebase analysis — the relevant content is sent to our AI provider, Anthropic, to generate the response. Anthropic does not use your inputs to train its models, and we don't share your data with any other AI provider. Workspace owners can optionally connect their own Anthropic API key so that usage is billed to their Anthropic account; prompts still pass through JourneyMap, then to Anthropic or to an enterprise gateway they configure.

Data is stored in Supabase (Postgres), hosted in the EU (eu-central-1), with encryption in transit and at rest. We use a small number of subprocessors to run the service: Supabase, Vercel, Stripe, Resend, Anthropic, Upstash, and Cloudflare — plus Microsoft, where your workspace connects the Microsoft Teams integration.

We keep your data for as long as your account is active. If you delete a project, canvas, or journey map, it moves to Trash and can be restored for 30 days before permanent removal. If you delete your account, we delete your data 30 days later. To request an export or an earlier deletion, email hello@journeymap.ai.

You can ask us to access, correct, export, or erase your personal data at any time — email us and we'll act on it. If you're not satisfied with how we've handled a request, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).

We support passkeys and two-factor authentication on accounts, encrypt data in transit and at rest, and enforce per-workspace isolation at the database level using row-level security, so one workspace can never see another's data.