Privacy policy

Last updated: October 15, 2026.

This policy describes how CASTILLO Maps processes personal data on castillomaps.com and in the Chrome extension “CASTILLO Maps Scraper”, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). It also serves as the privacy policy for the extension’s Chrome Web Store listing.

1. Controller

• Controller: Andrés Castillo (CASTILLO Maps).
• Email: hola@castillomaps.com
• Website: https://castillomaps.com/

To exercise rights or request additional identifying details for legal purposes, write to that email.

2. What data we process

2.1. Account on castillomaps.com

• Name (if you provide it), email and password (stored hashed).
• Plan (Free or PRO), subscription status, related dates and Stripe identifiers (e.g. customer or subscription) if there is a payment.
• Counted email usage log: timestamp of each counted send for the 24-hour limit. We do not store recipient, subject or message body.
• Session or API tokens needed to authenticate you on the site or in the extension.
• Temporary password-reset tokens if you request them.

2.2. Data that stays in your Chrome (not uploaded to our servers)

• Business lists, notes, email templates, filters and extension preferences are stored in Chrome local storage (chrome.storage / extension storage).
• That data stays on your device unless you export or delete it.

2.3. Data read from Google Maps or business websites

• In your browser, the extension may read publicly visible Google Maps information (name, address, phone, website, etc.).
• If you enable email or SEO lookup, the extension may open the business’s public website to find an email or other public metadata. That needs optional Chrome permissions you can grant or deny.
• CASTILLO Maps is not a cloud-scale indexer of that content: access happens from your browser session.

2.4. Payments

Card data is processed by Stripe as payment provider. We do not store your full card number.

2.5. Transactional email

If you request a password reset, we send email from our configured mailbox (e.g. hola@castillomaps.com) with a temporary link.

3. Purposes and legal bases

• Create and maintain the account, authenticate you and apply plan limits: contract performance (GDPR art. 6.1.b).
• Bill and manage the PRO subscription (Stripe, invoicing, cancellations): contract performance and legal accounting/tax duties where applicable (art. 6.1.b and 6.1.c).
• Send password-reset email: contract performance / pre-contractual steps (art. 6.1.b).
• Security, abuse prevention, shared accounts or fraud: legitimate interest (art. 6.1.f), balanced against your rights.
• Handle rights and complaints: legal obligation (art. 6.1.c).

Commercial emails you send to businesses from Gmail are not sent by us: you choose recipients and content, and you are responsible for that communication toward those recipients.

4. Recipients and processors

• Stripe: payment and subscription processing.
• Hosting / domain mail provider (server hosting castillomaps.com): technical hosting and SMTP for recovery email.
• Google: if you use Gmail or Google Maps, Google processes data under its own policies; CASTILLO Maps does not control that processing.

We do not sell your personal data. We do not share your extension’s business lists with third parties because, by design, we never receive them on the server.

5. International transfers

Some providers (e.g. Stripe or Google) may process data outside the EEA. In those cases GDPR-recognized safeguards are used (standard contractual clauses, adequacy decisions or other valid measures).

6. Retention

• Account data: while the account exists.
• After account deletion: associated user data (account, tokens, email counters) is removed from the operational database, subject to brief technical holds or rotating backups, and limited retention where legally required (e.g. invoicing).
• Reset tokens: expire quickly (about 1 hour) and are invalidated when used.
• Chrome data: until you uninstall the extension, clear storage or clear browser data.

7. Cookies and similar storage

On the website we use an essential technical session cookie to keep you signed in (service session name). We do not use third-party advertising cookies on the CASTILLO Maps site.

8. Security

We apply reasonable measures: hashed passwords, HTTPS, admin access control, Stripe and mail secrets outside the public directory, and usage limits. No system is 100% invulnerable; please do not share your account.

9. Your rights

You may exercise access, rectification, erasure, objection, restriction and portability where applicable by writing to hola@castillomaps.com from the account email, or by deleting the account in Your account.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Children

The service is not directed at anyone under 18. If we detect a minor’s account, we may delete it.

11. Chrome extension — Chrome Web Store transparency

• Single purpose: help search and organize data from public Google Maps listings and, if you enable it, assist contact from your Gmail, within your plan limits.
• Permissions: those declared in the manifest (e.g. access to Google Maps pages, storage, and optional origins for business sites if you enable email/SEO).
• Remote use: the extension calls the castillomaps.com API for auth, plan and counters. We do not sell or monetize by reselling your lists.
• Personal data processed by the developer on the server: account and counters described above; not the content of your local lists.

12. Suspension, outages and account deletion

We may suspend or delete accounts for breach, security or service cessation. If the site is temporarily unavailable, we remain responsible for data we still hold, and you may exercise rights by email when the channel works. If the service ended permanently, we would inform as reasonably possible and delete or lock data per GDPR, except where legal retention applies.

13. Changes

We may update this policy. The applicable version is the one published on this page with its date. For material changes, we will note it on the site when feasible.

14. Contact

Privacy and rights: hola@castillomaps.com. More legal information in the Legal notice.