Privacy Statement

Last updated: November 2026

At RoadMap Technologies, Inc. (RMT) we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws in all jurisdictions in which RMT operates.

This Privacy Statement describes RMT’s general privacy practices that apply to personal information we collect, use, and share about visitors to our websites, our clients, business partners, suppliers, and other organizations with which RMT has or contemplates a business relationship, as well as the individuals working for them. This Privacy Statement does not apply to the extent RMT processes personal or commercial data on behalf of clients for their benefit and under their control (as a “processor” or “service provider”), such as through our Consulting Services, Data Services, or Forecasting Software applications (including RoadMap TrailBlazer, the Geneva Forecasting™ API, RoadMap GPS, and RoadMap GPS 360). It does apply to account, billing, and usage information related to authorized users of our websites and services to the extent RMT processes that information as a “controller.” For merchants using the RoadMap StoreCast Shopify application, please also see our supplemental StoreCast Privacy Policy.

For any questions or concerns regarding our Privacy Statement or your data privacy in general, send an email to privacy@roadmap-tech.com.

We may collect your personal information as an individual for various purposes, such as the following:

Access and use of websites or other online services (including applications)

When you visit one of our websites or use an online service (including our web portals, APIs, desktop software, or mobile applications), we record technical information necessary to provide you with access, operate the service, and comply with security and legal requirements, such as IP addresses, browser and device metadata, authentication credentials, and request logs. We also collect aggregate statistics to help us monitor performance, maintain security, and improve our websites, products, and services.

Website analytics, cookies, and security infrastructure

Our primary website (roadmap-tech.com) does not use advertising, behavioral tracking, or profiling cookies:

• Cookieless Analytics: We use Plausible Analytics, a privacy-first, cookieless analytics service, to measure aggregate website traffic, referral sources, and page engagement. Plausible does not set cookies, does not use persistent identifiers across days or sites, and does not collect personally identifiable information.
• Edge Hosting & Security (Cloudflare): Our websites and online services are delivered and protected by Cloudflare. Cloudflare processes IP addresses and HTTP request headers at the network edge to route traffic and defend against distributed denial-of-service (DDoS) attacks and malicious bots. Cloudflare does not set tracking cookies on standard page views, but may set strictly necessary security cookies (such as __cf_bm or cf_clearance) if automated abuse detection or a security challenge is triggered.
• Application Authentication: If you sign in to a RoadMap application or developer portal (such as app.roadmap-tech.com or portal.roadmap-tech.com), strictly necessary session tokens or cookies are used solely to authenticate your account and maintain your session.

Responding to your request for information, order, or support

When you contact us (online or offline) in connection with a request for information, a consultation or demo request, an order for a product or service, or technical support, we collect the information necessary to fulfill your request, grant you access to the product or service, provide support, and contact you. For instance, when you submit an inquiry through our website contact form (processed via our form delivery provider, Formspree) or email us directly, we collect your name, work email address, company name, telephone number (if provided), and the details of your inquiry. We also collect details related to your agreement with us and the fulfillment, delivery, and invoicing of your order, and may include client satisfaction survey information. We retain such information for administrative purposes, defending our rights, and managing our relationship with you.

Your use of RoadMap software, APIs, and Data Services

When you use RoadMap software platforms, APIs, or Data Services, we collect operational and account usage metadata (such as API key usage volume, rate-limit metrics, feature utilization, and error logs) to enable product features to operate, enforce plan limits, provide technical support, inform enterprise clients on overall service utilization, and improve and develop our products and services.

Contacting employees of our clients, prospects, partners, and suppliers

In our relationship with clients, prospects, partners, and suppliers, they also provide us with business contact information (such as name, business contact details, position, or title of their employees, contractors, advisors, and authorized users) for purposes such as contract management, fulfillment, delivery of products and services, provision of support, invoicing, and management of the services or the business relationship.

Visitor information

We register individuals visiting our physical offices and facilities (name, identification, and business contact information) and may use camera supervision for reasons of security and safety of persons and belongings, as well as for regulatory and compliance purposes.

Marketing

Most information we collect about you comes from our direct interactions with you. When you register for an event, briefing, or webinar, we may collect information (online or offline) in relation to the event organization and your participation. We may use business contact information we collect to share updates about our products, services, or research by email, telephone, or postal mail. You can always opt out from receiving marketing communications from RMT by emailing privacy@roadmap-tech.com with the subject line set to Opt-Out.

Legal basis for processing

Where we reference that we use your personal information in connection with a request, order, transaction, or agreement (or preparing for the same), or to provide you with services that you requested (such as accessing our website, applications, or API), we do so because it is necessary for the performance of an agreement with you or to take steps at your request prior to entering into an agreement.

Where we reference that we use your personal information in relation to marketing, improvement or development of our products or services, for reasons of safety and network security, or regulatory requirements other than in connection with your agreement or request, we do so on the basis of our or a third party’s legitimate interests, or with your consent where required by applicable law.

Sharing of Personal Information

RMT does not sell your personal information or share your personal information for cross-context behavioral advertising.

As an organization offering software, consulting, and data services with technical systems that may operate across jurisdictions, RMT has implemented policies, standards, and procedures for consistent protection of personal information.

Where appropriate, RMT may share personal information with vetted service providers, cloud infrastructure providers, and business partners (such as Cloudflare for network delivery and security, Formspree for contact form routing, Plausible Analytics for aggregate cookieless metrics, and cloud hosting or payment processors for our software applications) solely to help us operate our websites, provide products or services to you or the company you work for, or fulfill your requests. When selecting our suppliers and service providers, we require appropriate data protection and security commitments.

If RMT decides to sell, buy, merge, or otherwise reorganize its business, such a transaction may involve the disclosure of personal information to prospective or actual purchasers, or the receipt of such information from sellers. It is RMT’s practice to require appropriate confidentiality and protection for personal information in these types of transactions.

Please be aware that in certain circumstances, personal information may be subject to disclosure to government agencies pursuant to a judicial proceeding, court order, or valid legal process. We may also share personal information to protect the rights, security, or property of RMT, our business partners, suppliers, clients, or others when we have reasonable grounds to believe that such rights or property have been or could be affected.

Information Security and Accuracy

We intend to protect your personal information and to maintain its accuracy. RMT implements reasonable physical, administrative, and technical safeguards—including encryption in transit (TLS/HTTPS and SSH/SFTP), encryption at rest, role-based access controls, and multi-factor authentication—to protect personal information from unauthorized access, use, and disclosure. We also require that our suppliers protect such information from unauthorized access, use, and disclosure.

Retention Period

We will not retain personal information longer than necessary to fulfill the purposes for which it is processed, including maintaining the security of our systems, complying with legal and regulatory obligations (e.g., audit, accounting, and statutory retention terms), handling disputes, and for the establishment, exercise, or defense of legal claims in the jurisdictions where we do business.

How to Contact Us

If you have a question related to this Privacy Statement, please contact us by email at privacy@roadmap-tech.com. Your message will be forwarded to the appropriate member of RMT’s Data Privacy Team.

For any data security matter or concern, contact: security@roadmap-tech.com.

Where relevant under applicable data protection laws, the controller of your personal information is RoadMap Technologies, Inc., 100 Cummings Center (P.O. Box 7023), Beverly, MA 01915, United States, unless indicated otherwise.

RMT is not the controller in situations where personal information is processed on behalf of a client in connection with a contractual service or software engagement; in those cases, the controller is the client organization with which RMT has the contract.

Your Rights

Depending on your jurisdiction, you may have the right to request access to, update, correct, port, restrict, or delete your personal information, as well as the right to object to direct marketing. You can submit a privacy request at any time by emailing privacy@roadmap-tech.com. You will not be discriminated against for exercising your privacy rights.

Right to Lodge a Complaint

In the event you consider our processing of your personal information not to be compliant with applicable data protection laws, you can lodge a complaint directly with RMT at privacy@roadmap-tech.com or with the competent data protection supervisory authority in your jurisdiction.

Changes to Our Privacy Statement

We may update this Privacy Statement from time to time to reflect changes to our services, infrastructure, or data governance practices. When we make changes, we will update the “Last updated” date at the top of this page.