Privacy Policy

Last updated 2026-06-24 · Waylocate

Introduction

This Privacy Policy describes how Waylocate ("we", "us", or "our") handles information when you use public campus and facility maps at waylocate.com and related pages (the "Service"). Waylocate is an indoor navigation platform developed in the United States for educational, research, and pilot deployments. Campus and facility maps are published by the organizations that manage each location (each a "Campus Publisher"). By accessing or using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

Who operates Waylocate

Waylocate is developed and operated in the United States as a research, pilot, and early-stage technology project. We may update these policies if our organizational structure changes. The Campus Publisher for each map decides which buildings, floors, labels, and routes appear on its public Waylocate pages. For some maps, including demonstration and pilot deployments, we publish content ourselves for evaluation purposes. Questions about a specific campus or facility map should be directed to the relevant Campus Publisher unless they relate to how Waylocate processes information as described here.

What we do not collect

The public Waylocate Service is designed for general wayfinding, not clinical care. We do not require you to create an account to browse public maps. We do not ask for your name, email address, phone number, date of birth, medical record number, insurance information, or other patient or health information to use the Service. We do not use the Service to diagnose, treat, or monitor patients, and the Service is not offered as a HIPAA-covered product. If you are a patient or visitor using a hospital or clinic map, your use of Waylocate does not create a patient relationship with us.

Browsing public maps without an account

When you use Waylocate, our servers and service providers may automatically receive technical information such as your IP address, browser type, device type, operating system, referring URL, pages viewed, approximate region derived from IP, timestamps, and similar diagnostic data. We use this information to deliver the Service, maintain security, measure performance, and understand aggregate usage.

Cookies and local storage

The Service may store small data files on your device, including cookies or browser local storage, to remember preferences (for example, selected building or floor), to keep the map responsive, and to collect aggregated analytics. On some pages, including demonstration maps, we may store a consent flag in local storage after you acknowledge this Policy so we do not ask again on the same browser. We may also store a random analytics client key in local storage to group anonymous visits without requiring an account. You can control cookies through your browser settings and clear local storage through your browser. Disabling cookies or clearing storage may limit some features and may cause consent or preference prompts to appear again.

Demonstration and pilot maps

Some Waylocate URLs (for example, paths such as `/sbu`) show demonstration or pilot maps that we publish for evaluation. These maps may use sample, partial, or outdated data and are provided for evaluation and orientation only. They are not official campus or hospital navigation systems and should not be relied on for safety, access control, clinical decisions, or emergency procedures. Before you use a demonstration map, we ask once per browser for your acknowledgment of this Policy. Additional product analytics practices described below may apply on those pages.

Product analytics

To operate and improve Waylocate, we may collect anonymous usage analytics when you browse public maps. This may include timestamps, page and map interactions (such as search, navigation mode, and summarized map camera movement), browser and device type, app version, referring URL, and approximate region derived from IP address when events are processed on our servers. We use a random client key stored in local storage to associate events from the same browser without requiring your name, email, or account. We use this information to understand aggregate usage, diagnose errors, and improve map performance. We do not use analytics to sell personal information or to build advertising profiles. On demonstration and pilot maps, analytics may be collected after you acknowledge this Policy.

Location information

If you choose to share device location in your browser, the Service may use it only to orient you on a map or suggest a route within the published campus or facility. We design public Waylocate browsing so that we do not need to create a persistent, identifiable record of your movements for ordinary navigation. Campus Publishers may enable additional positioning features under their own policies.

Information from Campus Publishers

Map geometry, room labels, points of interest, and routing data are supplied by Campus Publishers. We host and deliver this content but do not control what each Campus Publisher chooses to publish. Personal information that appears on a map (for example, a room name that identifies a person) is the responsibility of the Campus Publisher.

How we use information

We use information to provide, operate, secure, and improve the Service. We use aggregated and de-identified statistics to understand how maps are used and to fix errors. We may use information to enforce our Terms of Use, comply with law, and protect the rights and safety of users and Campus Publishers. We do not sell personal information collected through the public Waylocate Service, including we do not sell personal information as "sell" is defined under the California Consumer Privacy Act (CCPA) and similar U.S. state laws.

How we share information

We share information with service providers that help us host content, deliver maps over a content delivery network, monitor reliability, and protect against abuse. These providers are authorized to process information only to perform services for us and subject to appropriate confidentiality and security obligations. We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security. If Waylocate is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to this Policy.

Floor plans, map data, and third-party sources

Campus maps may be derived from floor plans, surveys, or other materials provided by Campus Publishers. Some Campus Publishers may incorporate publicly available building information or open map data. We do not claim ownership of underlying building plans supplied by Campus Publishers. Accuracy of maps depends on the Campus Publisher's sources and update practices. If you believe map content is incorrect or should not be published, contact the Campus Publisher or use the contact method on that campus page.

United States users

If you are a resident of the United States, this section applies to you in addition to the rest of this Policy. We process personal information for the business purposes described above, including providing the Service, security, analytics, and legal compliance. Depending on your state of residence, you may have the right to know what personal information we collect, request access or deletion, correct inaccurate information, opt out of certain processing, and not receive discriminatory treatment for exercising privacy rights. To submit a request, email [email protected] with enough detail for us to verify your request. We will respond as required by applicable law. Authorized agents may submit requests on your behalf where permitted by law. California residents may also contact us for information about categories of personal information collected, sources, purposes, and disclosures in the prior twelve months.

Storage location

Information for the public Waylocate Service is processed and stored primarily in the United States. Some service providers may process limited technical data in other countries where they operate. When information is transferred across borders, we take steps designed to provide appropriate safeguards consistent with applicable law.

Retention

We retain information for as long as needed to operate the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Aggregated data that cannot reasonably identify you may be kept longer for analytics and service improvement.

Security

We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is intended for general campus and facility navigation and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us so we can delete it.

Your choices and rights

Depending on where you live, including in the European Economic Area, United Kingdom, or certain U.S. states, you may have rights to access, correct, delete, or restrict certain processing of your personal information, or to object to processing and to data portability. To exercise rights relating to Waylocate's processing, contact us using the details below. We may need to verify your identity before fulfilling a request. Requests about map content or campus-specific data practices should also be sent to the relevant Campus Publisher.

Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy on waylocate.com and revise the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

Contact us

Waylocate Stony Brook, New York, USA [email protected]