Terms of Use & Privacy Policy

1. INTRODUCTION

Welcome to Rymba Maps ("Platform", "we", "us", "our"). This document constitutes our Terms of Use and Privacy Policy, governing your access to and use of our geospatial information system (GIS) platform for conservation, forestry, and environmental monitoring projects.

By using this Platform, you agree to these Terms. If you do not agree, do not use the Platform.

2. ACCEPTANCE OF TERMS

2.1 How You Accept These Terms

For Registered Users:

By creating an account on the Platform, you accept these Terms
By logging into the Platform, you accept these Terms
Important: If you previously withdrew consent and log in again, this constitutes a new acceptance of these Terms and Privacy Policy

For Guest Users:

By clicking "Accept & Continue" on the guest access screen, you accept these Terms
Guest access is session-based and time-limited

2.2 Changes to Terms

We may modify these Terms at any time. Continued use of the Platform after changes constitutes acceptance of the modified Terms. We will notify you of material changes via email (Registered Users) or on-screen notice (Guest Users).

3. DEFINITIONS

"Platform": means the Rymba Maps geospatial information system, including all features, applications, and services.
"Registered User": means a user who has created an account and accesses the Platform via login authentication.
"Guest User": means a user who accesses the Platform via a QR code or shareable URL without creating an account.
"Personal Data": means any information relating to an identified or identifiable individual, including but not limited to IP addresses, as defined under Malaysia's Personal Data Protection Act 2010.
"Organization": means the entity (conservation organization, forestry company, land manager) that owns or manages projects on the Platform.
"Project": means a geospatial dataset representing a specific conservation, forestry, or environmental monitoring initiative.

4. SERVICES DESCRIPTION

4.1 Platform Features

The Platform provides geospatial data visualization and analysis tools, including:

Interactive maps with satellite imagery and drone-captured images
Vector feature layers (trees, conservation areas, monitoring zones)
Biomass and vegetation indices analysis
Project-specific data visualization
Analytics and reporting

4.2 Access Types

Registered Users:

Full access to projects within their Organization
Account management and preferences
Persistent access (subject to subscription/authorization)

Guest Users:

Limited access to specific projects via shareable links
Time-limited sessions (typically 15 minutes, configurable)
Restricted layer access (configurable per project)
No account creation required

5. DATA COLLECTION & PRIVACY

5.1 What Data We Collect

From Registered Users:

Account information (name, email address, organization affiliation)
Authentication credentials (encrypted passwords)
IP addresses
Browser user agent
Device information
Geographic location (derived from IP address)
Platform usage data (pages viewed, features accessed, timestamps)
Session information

From Guest Users:

IP addresses
Browser user agent
Device type (mobile, tablet, desktop)
Geographic location (country, city derived from IP address)
Referrer URL (how you arrived at the Platform)
Access timestamps
Session duration
Number of requests per session

5.2 IP Address Collection & Security Monitoring

We collect IP addresses for the following critical purposes:

Security Monitoring:

Detecting and preventing unauthorized access attempts
Identifying malicious activity and attack patterns
Geomonitoring potential security risks and threats
Preventing brute-force attacks on access tokens
Detecting token tampering or forgery attempts

Abuse Prevention:

Rate limiting to prevent platform abuse
Detecting and blocking automated scraping or data harvesting
Preventing distributed denial-of-service (DDoS) attacks
Identifying suspicious access patterns
Enforcing session limits and access controls

Analytics & Platform Improvement:

Understanding geographic distribution of users
Analyzing usage patterns to improve performance
Generating aggregate statistics (total visits, unique visitors)
Optimizing content delivery and caching

Legal & Compliance:

Maintaining audit trails for security incidents
Complying with legal obligations and law enforcement requests
Investigating violations of these Terms
Protecting our legal rights and interests

5.3 How We Use Your Data

Registered Users:

To provide and maintain your account
To authenticate your access to the Platform
To communicate with you about your account and projects
To provide customer support
For security monitoring and threat detection
For analytics and platform improvement
To comply with legal obligations

Guest Users:

To validate access tokens and create sessions
For security monitoring and threat detection
To enforce rate limits and prevent abuse
For analytics (aggregate statistics only)
To comply with legal obligations

5.4 Legal Basis for Processing (Malaysia PDPA)

Consent:

Your acceptance of these Terms constitutes consent for data collection
Registered Users: Consent given at registration/login
Guest Users: Consent given by clicking "Accept & Continue"

Legitimate Interest:

Security monitoring and threat detection
Fraud and abuse prevention
Platform performance optimization
Legal compliance and audit requirements

Contractual Necessity:

To provide the services you've requested
To enforce these Terms

7. YOUR RIGHTS UNDER MALAYSIA PDPA

7.3 Right to Withdraw Consent

Effect of Withdrawal:

What Stops Immediately:

Further collection of new personal data
Further processing for the purposes you consented to
Marketing communications (if applicable)

What May Be Retained:

Despite withdrawal of consent, we may retain certain data where we have a legitimate interest or legal obligation:

Security & Fraud Prevention: Access logs with IP addresses, failed validation attempts, attack patterns
Legal & Compliance: Records required by law, data needed for legal claims
Anonymized Analytics: Fully anonymized and aggregated data

Important Note on Re-Login:

If you are a Registered User who has withdrawn consent and subsequently log in to the Platform again, this login constitutes a new acceptance of these Terms and Privacy Policy. Data collection and processing will resume under this new consent.

8. DATA SECURITY

We implement industry-standard security measures including encryption, HMAC-SHA256 token signing, HTTP-only cookies, rate limiting, and IP-based access controls.

14. GOVERNING LAW & DISPUTE RESOLUTION

14.1 Governing Law

These Terms are governed by the laws of Malaysia, without regard to conflict of law provisions.

14.3 Compliance with Malaysia PDPA

This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (Act 709) and all subsequent amendments.

15. CONTACT INFORMATION

Data Protection Inquiries

Email: privacy@rymba-maps.com

Security Incidents

Email: security@rymba-maps.com

General Support

Email: support@rymba-maps.com

17. ACKNOWLEDGMENT

By using the Platform, you acknowledge that:

1. You have read and understood these Terms
2. You agree to the collection and use of your IP address for security monitoring and geomonitoring threats
3. You understand your rights under Malaysia PDPA
4. You understand the limitations and disclaimers regarding data accuracy
5. If you are a Registered User who previously withdrew consent, logging in again constitutes new acceptance of these Terms

Last Updated: January 19, 2025

Document Version: 1.0