Last updated: April 15, 2026
This Privacy Policy describes how Topologis VCC ("Topologis," "we," "us," or "our") collects, uses, and protects your personal information when you use the Topologis platform at topologis.com (the "Service").
Topologis is operated by Topologis VCC, registered in Bulgaria. Our data infrastructure is hosted in Germany (Hetzner).
If you have questions about this policy, contact us at contact@topologis.com.
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
| Processing activity | Lawful basis |
|---|---|
| Providing the Service (authentication, data storage, map rendering, sharing, embedding) | Performance of a contract (Art. 6(1)(b)) |
| Processing payments and managing subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (verification, password resets, product updates) | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud detection, abuse prevention, session management | Legitimate interest (Art. 6(1)(f)) |
| Anonymized usage logs and privacy-friendly analytics | Legitimate interest (Art. 6(1)(f)) |
| Google Sheets integration (storing refresh tokens) | Consent (Art. 6(1)(a)) |
| Responding to contact form submissions | Legitimate interest (Art. 6(1)(f)) |
| Retaining invoice records for tax compliance | Legal obligation (Art. 6(1)(c)) |
We use your information to:
We do not sell your personal information. We do not use your geodata for any purpose other than providing the Service to you.
We share personal information only with the following third-party subprocessors, and only to the extent necessary to operate the Service. We have data processing agreements in place with each subprocessor.
| Subprocessor | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe | Payment processing | Email, name, Stripe customer ID, payment amounts | United States |
| OAuth sign-in and Sheets integration | OAuth tokens; name and email received from Google during sign-in | United States | |
| Hetzner | Infrastructure hosting | All data is hosted on Hetzner servers in Germany | Germany (EU) |
| Plausible Analytics | Privacy-friendly website analytics | No personal data (aggregate pageview data only) | Germany (EU) |
We may also disclose information if required by law or to protect the rights, safety, or property of Topologis, our users, or the public.
We do not share, sell, or provide your geodata to any third party.
If Topologis is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you by email and/or by a prominent notice on our website before your personal data becomes subject to a different privacy policy.
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at contact@topologis.com.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay, as required by GDPR Article 34.
Topologis uses only essential session cookies for authentication. These cookies are necessary for the Service to function and cannot be disabled.
We do not use advertising cookies, tracking cookies, or third-party cookies. Plausible Analytics is cookie-free.
Under the General Data Protection Regulation (GDPR) and other applicable laws, you have the right to:
To exercise any of these rights, contact us at contact@topologis.com. We will respond within 30 days.
When you delete your account, we delete your personal data, including your geodata, workspaces, projects, and layers, within 30 days. Some data may be retained where required by law (for example, invoice records for tax purposes).
All data is stored and processed within the European Union (Germany). If you access the Service from outside the EU, your data will be transferred to and stored in the EU.
We share limited data with Stripe (headquartered in the United States) and Google (headquartered in the United States) for payment processing and authentication respectively. Both are certified under the EU-U.S. Data Privacy Framework, which provides a legal mechanism for transferring personal data from the EU to the United States in compliance with GDPR. See Stripe's privacy policy and Google's privacy policy for full details.
If you require a Data Processing Agreement (DPA) for your organization's compliance needs, please contact us at contact@topologis.com and we will provide one.
Given the nature and scale of our data processing activities, we have not appointed a Data Protection Officer (DPO) at this time. For any data protection inquiries, contact us at contact@topologis.com.
Topologis is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.
Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Email : contact@topologis.com
Topologis VCC
Bulgaria