Privacy Policy
AccidentMap Pro
Effective Date: March 2026 | Last Updated: March 2026
AccidentMap Pro ("AMP," "we," "us," or "our") operates a collision analysis platform at accidentmap.pro and app.accidentmap.pro. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its 10 Fair Information Principles.
This policy applies to all users of the AMP platform, visitors to our website, and individuals who submit information through our demo request or gated video forms.
Principle 1: Accountability
AccidentMap Pro is responsible for the personal information under its control. We have designated the following individual as accountable for our compliance with PIPEDA:
Privacy Officer: The founder(s) of AccidentMap Pro serve as the designated Privacy Officer(s) until a dedicated privacy representative is appointed.
Contact: privacy@accidentmap.pro
Our Privacy Officer is responsible for overseeing compliance with this policy and with PIPEDA, responding to privacy inquiries and complaints, ensuring that third-party service providers handling personal information maintain comparable levels of protection, and reviewing and updating this policy as our platform, practices, or legal requirements change.
Where personal information is transferred to third-party service providers for processing (see Section 5 below), we require that those providers use the information only for the purposes we have specified and maintain appropriate safeguards.
Principle 2: Identifying Purposes
We identify the purposes for collecting personal information at or before the time of collection. Below are the specific purposes for each category of personal information we collect.
2.1 Account Information
What we collect: Name, email address, job title, company name, profile image (from authentication provider).
Purpose: To create and manage your account, authenticate your identity, and communicate with you about your account and our services.
2.2 Collision Data (Report Generation)
What we collect: Collision location (address or intersection), date and time, collision type, vehicle information (year, make, model, VIN, speed, direction, powertrain, tire type), damage areas and severity, occupant information (age, seating position, seatbelt use, airbag deployment, injury severity, medical transport, impairment status), and free-text collision description.
Purpose: To generate your collision analysis report. This data is entered by you and used solely for the analytical outputs you have requested.
2.3 Automatically Retrieved Environmental Data
What is retrieved: Historical weather conditions (temperature, precipitation, wind, visibility, humidity), terrain elevation and grade, posted speed limit, traffic control type (traffic light, stop sign, etc.), and satellite imagery of the collision location.
Purpose: To enhance the accuracy of your collision analysis report with verified environmental context. This data is retrieved from third-party public and commercial data sources based on the location, date, and time you provide.
Important: When AMP retrieves this data, the collision coordinates, date, time, and in some cases VIN information are transmitted to the third-party data providers listed in Section 5. These providers receive only the data necessary to fulfill their function.
2.4 Usage Data
What we collect: Reports generated (type, date, tier), account activity, and general platform usage patterns.
Purpose: To improve our platform, monitor system performance, and support troubleshooting.
2.5 Demo and Marketing Data (Non-Registered Visitors)
What we collect: When you submit our gated demo video form or pilot application form on app.accidentmap.pro/web/demo, we collect your name, work email, company, job title, province or state, monthly claims volume, use case description, and any questions you submit.
Purpose: To follow up on your interest in AMP, schedule demos, and evaluate pilot applications.
2.6 Information We Do Not Collect
We do not collect payment card numbers or banking information (no payment processing is currently integrated). We do not collect IP addresses, device fingerprints, or browser information. We do not use advertising cookies, tracking pixels, or third-party analytics tools on our platform.
Principle 3: Consent
We obtain your consent for the collection, use, and disclosure of your personal information. Given the sensitivity of the information AMP processes (including injury details and collision data), we seek express consent wherever feasible.
How We Obtain Consent
When you create an account on AMP, you are asked to review and agree to this Privacy Policy and our Terms of Service before using the platform. Your consent and the version of the policy you agreed to are recorded.
When you submit information through our demo request form or gated video form, your submission of that form constitutes consent to the collection and use of the information you provide for the purposes stated on the form.
When you generate a report, your action of entering collision data and clicking "Generate Report" constitutes consent to the processing of that data for the purpose of generating your report, including the transmission of location coordinates, timestamps, and VIN data to the third-party data providers listed in Section 5.
Marketing communications: Consent for marketing emails and product updates is collected separately and is optional. You are not required to consent to marketing communications in order to use the platform. You may opt in or out of marketing communications at any time.
Withdrawal of Consent
You may withdraw your consent at any time by contacting us at privacy@accidentmap.pro. Please note that:
Withdrawing consent for essential data processing (account management, report generation) may mean we can no longer provide our services to you.
Withdrawing consent for marketing communications will not affect your ability to use the platform.
We will process your withdrawal request within 30 days.
YouTube Cookies on Demo Page
Our demo page at app.accidentmap.pro/web/demo embeds a video hosted on YouTube using YouTube's privacy-enhanced mode (youtube-nocookie.com). In this mode, YouTube does not set tracking cookies on your browser unless you actively click play. If you do play the video, YouTube (Google LLC) may set cookies for analytics purposes. We do not control or have access to the data YouTube collects through these cookies. You can manage YouTube cookies through your browser settings.
Principle 4: Limiting Collection
We limit our collection of personal information to what is necessary for the purposes identified above. Specifically:
Account information is limited to what is needed for authentication and communication. We do not require additional personal details beyond name, email, job title, and company.
Collision data is limited to what is needed to generate the requested report tier. We collect only the fields required for the analytical outputs. We do not collect Social Insurance Numbers or financial information.
Demo and marketing data is limited to what is needed to evaluate your interest, schedule a demo, or process a pilot application.
We collect information by fair and lawful means. All data is either entered directly by you, or retrieved from public and commercial data sources based on inputs you provide.
Principle 5: Limiting Use, Disclosure, and Retention
5.1 Use
We use personal information only for the purposes identified in Section 2. We do not use your collision data for any purpose other than generating the report you requested. We do not sell, rent, or trade personal information.
5.2 Disclosure to Third-Party Service Providers
We disclose personal information to the following third-party service providers, solely for the purposes described. Each provider receives only the minimum data necessary to perform its function.
| Service Provider | Data Transmitted | Purpose | Location |
|---|---|---|---|
| Replit Auth (OIDC) | Login credentials, identity | User authentication | United States |
| Google Maps API | Street address / intersection text | Primary geocoding (location lookup) | United States |
| Mapbox | Lat/lng coordinates, VIN-decoded vehicle data | Satellite imagery, road speed data | United States |
| OpenStreetMap / Nominatim | Lat/lng coordinates, address text | Geocoding fallback | International (open source) |
| Overpass API (OSM) | Lat/lng coordinates | Road geometry, traffic control detection | International (open source) |
| Open-Topo-Data | Lat/lng coordinates | Terrain elevation analysis | International (open source) |
| Meteostat | Lat/lng coordinates, accident timestamp | Historical weather data | Germany / International |
| NHTSA vPIC API | Vehicle Identification Number (VIN) | VIN decode (year, make, model) | United States (US Gov) |
| Resend | User email address | Transactional email delivery | United States |
| MailerLite | Name, email, company, job title, province | Marketing / subscriber communications (with separate consent) | EU / United States |
| YouTube (Google LLC) | Visitor browser data (privacy-enhanced mode) | Demo video embed on website | United States |
We do not disclose personal information to any other third parties except as required by law (see below).
5.3 Disclosure Required by Law
We may disclose personal information without your consent where required by law, regulation, court order, or enforceable government request. We may also disclose personal information where necessary to protect the rights, property, or safety of AccidentMap Pro, our users, or the public.
5.4 Business Transfer
In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity. We will notify affected users before any such transfer occurs and will provide the option to have personal information deleted prior to transfer.
5.5 Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected:
Account information: Retained for as long as your account is active. Upon account deletion, all account data is permanently removed.
Collision data and reports: Retained for the lifetime of your account or seven (7) years from the date of report generation, whichever is longer, consistent with Ontario insurance record-keeping requirements. Upon account deletion, personal information is anonymized within 30 days unless the data is subject to a legal hold related to active litigation or regulatory proceedings. After the retention period, data is securely deleted or anonymized.
Demo and marketing data: Retained until you unsubscribe from communications or request deletion, whichever comes first.
Internal validation logs: Internal validation logs are retained for quality assurance and system improvement purposes. These logs contain report metadata, field-level validation data, and issue descriptions (see Section 7 for details on what these logs contain).
Principle 6: Accuracy
We take reasonable steps to ensure that personal information we hold is accurate, complete, and up to date where necessary for the purposes for which it is used.
Account information: You may update your name, email, job title, and company information through your account profile at any time.
Collision data: The accuracy of collision data in reports depends on the information you enter. Reports are generated from the inputs you provide and from verified third-party data sources. To correct collision data in a generated report, you may generate a new report with the corrected inputs at any time. The original report will remain in your history for your records. To flag a data error for our team or request manual correction, contact support@accidentmap.pro.
If you believe any personal information we hold about you is inaccurate or incomplete, contact us at privacy@accidentmap.pro and we will correct it within 30 days.
Principle 7: Safeguards
We protect personal information with security safeguards appropriate to the sensitivity of the information.
7.1 Technical Safeguards
Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
Encryption at rest: Our infrastructure runs on Google Cloud Platform via Replit, which provides AES-256 encryption at rest as a platform default for data storage.
Authentication: User authentication is handled through Replit Auth (OpenID Connect), supporting Google, GitHub, and email/password login. Application-level multi-factor authentication is not currently enforced; however, users whose identity providers support MFA (Google, GitHub) benefit from that protection.
Session management: User sessions are managed with a secure session cookie (Secure, HttpOnly, SameSite=Lax) with a 24-hour lifetime.
7.2 Organizational Safeguards
Access controls: Access to the platform's administrative functions is restricted to authorized personnel only. Report PDFs and collision diagrams can only be downloaded by the user who generated them.
Internal validation logs (Coherence Monitor): Our system includes an internal validation tool that flags data inconsistencies in generated reports. When a validation issue is detected, authorized administrators can view the severity level, case number, report type, user email, the specific field name involved, the issue description, and a timestamp. Administrators cannot view the full report content, collision narrative, injury records, or PDF through this tool. This access exists for quality assurance and system reliability purposes.
7.3 Data Location
Your data is stored on Google Cloud Platform infrastructure operated by Replit Inc., located in Oregon, United States. Generated PDF reports and collision diagrams are stored in Replit Object Storage, also in the United States.
By using this platform, you acknowledge that your data is processed and stored in the United States, subject to applicable U.S. laws including the USA PATRIOT Act and the CLOUD Act. We require that our infrastructure providers maintain data protection standards comparable to those required under PIPEDA.
PIPEDA does not prohibit the transfer of personal information outside Canada. However, we are transparent about where your data is stored so you can make an informed decision about using our services.
7.4 Breach Response
In the event of a breach of security safeguards involving personal information under our control, we will:
Assess whether the breach creates a real risk of significant harm to affected individuals.
If the breach creates a real risk of significant harm: report the breach to the Office of the Privacy Commissioner of Canada, notify affected individuals as soon as feasible, and notify any other organizations that may be able to reduce the risk of harm.
Maintain a record of every breach of security safeguards involving personal information, regardless of whether the breach met the threshold for reporting.
Investigate the root cause and take corrective action to prevent recurrence.
Principle 8: Openness
We make this Privacy Policy readily available to all users, visitors, and the public. This policy is published at accidentmap.pro/privacy-policy/ and is accessible from our platform at all times.
This policy describes what personal information we collect and why (Section 2), how we obtain consent (Section 3), what we collect and why we limit it (Section 4), who we share information with and how long we keep it (Section 5), how we keep information accurate (Section 6), how we protect your information (Section 7), and how to access your information or file a complaint (Sections 9 and 10).
If you have any questions about this policy or our practices, contact our Privacy Officer at privacy@accidentmap.pro.
Principle 9: Individual Access
You have the right to access the personal information we hold about you, and to request corrections if it is inaccurate or incomplete.
9.1 Accessing Your Information
You can view a summary of your personal information, download all of your data as a JSON file, and access your generated reports directly from the Privacy & Your Data page in your account dashboard.
To request additional details about your personal information, submit a written request to privacy@accidentmap.pro. We will respond within 30 days. Upon request, we will provide confirmation of whether we hold personal information about you, a description of the personal information we hold, an explanation of how it has been used, and a list of the third-party service providers to whom it has been disclosed (as listed in Section 5).
9.2 Correcting Your Information
You may update your account information (name, email, job title, company) directly through your profile. To correct collision data in a generated report, you may generate a new report with the corrected inputs at any time. The original report will remain in your history for your records. To flag a data error for our team or request manual correction, contact support@accidentmap.pro.
9.3 Deleting Your Information
You may request deletion of your account and all associated data from the Privacy & Your Data page in your account dashboard, or by contacting privacy@accidentmap.pro. Upon receiving and verifying your request, we will permanently delete or anonymize your account, all generated reports, and all associated collision data. Deletion will be completed within 30 days of your verified request, unless the data is subject to a legal hold related to active litigation or regulatory proceedings.
Please note that once your data is deleted, it cannot be recovered.
Principle 10: Challenging Compliance
You have the right to challenge our compliance with this Privacy Policy and with PIPEDA.
10.1 How to File a Complaint or Inquiry
If you have questions, concerns, or complaints about how we handle your personal information, contact our Privacy Officer:
Email: privacy@accidentmap.pro
Subject line: Privacy Complaint or Privacy Inquiry
We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days.
10.2 Investigation Process
All complaints will be investigated by our Privacy Officer. We will record the date and nature of the complaint, investigate the matter and gather relevant information, and notify you of the outcome, any remedial action taken, and any further recourse available to you. If our investigation reveals deficiencies in our practices, we will take corrective action including amending this policy or our procedures as necessary.
10.3 Office of the Privacy Commissioner
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:
Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our platform, or legal requirements. If we make material changes, we will notify you by email and by posting a notice on our platform at least 30 days before the changes take effect.
Your continued use of the platform after changes take effect constitutes acceptance of the updated policy. If you do not agree with any changes, you may request deletion of your account and data as described in Section 9.3.
We will maintain an archive of previous versions of this policy and make them available on request.
Contact Us
If you have any questions about this Privacy Policy, our data practices, or your rights under PIPEDA, contact us at:
AccidentMap Pro
Privacy Officer
Email: privacy@accidentmap.pro
Website: accidentmap.pro
Not ready for a demo?
Join the list for product updates and launch announcements.
AccidentMap Pro – Collision clarity in ~30 seconds.
Patent Pending 2026