Effective August 24, 2026 · Last updated August 26, 2026
You can browse the New Mexico Food Pathways map without giving us anything. We do not use advertising, tracking pixels, or third-party analytics of any kind. We have never sold, rented, or shared personal information with data brokers, and we do not intend to.
The information we do keep is what a website needs to stay online and secure, plus whatever you deliberately send us, like a contact form or an account.
The New Mexico Food Pathways Intelligence Hub is operated by InnovaOps LLC, a New Mexico limited liability company. When this policy says "we" or "us," that's who it means. You can reach us at wesley.espinoza@innovaopsnm.com.
Nothing you have to type. To serve pages and protect the service from abuse, our systems automatically record request information:
We do not use this to build a profile of you, and we do not link it to your identity.
The address text you type is sent to the United States Census Bureau's public geocoding service so we can work out which census tract it falls in. That request is made by our server, not your browser, so the Census Bureau does not receive your IP address, only the address text. We do not store the addresses you search.
We use these to reply to you and to send the updates you asked for. Nothing more.
Accounts are being introduced for the paid tiers of this service. If you create one, we collect:
If you sign in with Google or Microsoft, we receive your name and email address from them. We never receive your password, and we never see it.
Once you are signed in, we record what the account does inside the tool so we can see which parts of it are worth building on, support you when something is not working, and have an honest conversation at renewal about whether the licence is earning its keep. Specifically:
This applies to signed-in accounts only. If you are browsing the free map or the resource finder without an account, none of this is recorded. We do not record the text of the addresses you search, anywhere, ever. We do not record what you type. We build this ourselves and the data stays in our own database, so no analytics company receives any of it.
If your account belongs to an organization, the person who administers that account can see activity for their own team, and we can see it for all accounts. It is used to run and improve the service, and never sold or shared.
We keep the list of outside services deliberately short. These are the only ones involved:
| Service | What it does | What it can see |
|---|---|---|
| Supabase | Database and application hosting | Everything stored here, as our processor |
| Cloudflare | Website hosting, content delivery, security filtering | Your IP address and request metadata |
| OpenStreetMap Foundation | Supplies the background map imagery | Your IP address and which map tiles you view |
| unpkg | Delivers the open-source mapping library the page uses | Your IP address and browser |
| US Census Bureau | Turns a typed address into a census tract | The address text only, not your IP address |
| Google / Microsoft | Optional sign-in, only if you choose it | That you signed in to our service |
Map tiles and the mapping library are loaded directly by your browser, which necessarily reveals your IP address to those providers. That is how the web works, and it is true of nearly every map on the internet. We have no other relationship with them and send them nothing about you.
Links to Google Maps for driving directions appear next to food resources. Those only contact Google if you click them.
If we ever add a payment processor, it will handle your card details directly and we will not store or see them.
| Information | Kept for |
|---|---|
| Rate-limiting records | Minutes, cleared automatically every 15 minutes |
| Request/security logs (IP, user agent) | 90 days, then deleted automatically |
| Feature usage counts | 24 months, then deleted automatically |
| In-tool activity for signed-in accounts | 180 days, then deleted automatically |
| Contact messages and newsletter sign-ups | Until you ask us to delete them |
| Account details | While your account is open, then deleted on request |
| Record of licence terms you accepted | For the life of the agreement and as long as the law requires afterwards |
Email us at wesley.espinoza@innovaopsnm.com and we will:
We will not charge you for this, and we will not make you create an account to ask.
Access to the underlying data is restricted at the database level, not just in the application. The credentials that can read raw data live only on the server and are never sent to your browser. Accounts can be protected with sign-in through Google or Microsoft, which means we never hold a password for you at all, and with authenticator-app two-factor codes. We test our permission rules against deliberate attempts to bypass them.
No system is perfect. If we ever discover a breach affecting your personal information, we will tell affected people promptly and directly.
This service is built for planners, researchers, organizations and residents looking for food resources. It is not directed at children under 13 and we do not knowingly collect their information.
Our systems are operated in the United States. If you use the service from elsewhere, your information will be handled in the United States.
If we change how we handle your information, we will update this page and change the "last updated" date at the top. If a change is significant, for example if we ever started collecting something new, we will say so clearly rather than quietly editing the text.
Questions about this policy, or about information we hold:
InnovaOps LLC · New Mexico
wesley.espinoza@innovaopsnm.com