Privacy Policy

1. Information We Collect

a. Information You Provide to Us

• Account Information: When you register, we collect your name, email address, and optionally your company name and profile details.
• Payment Information: Billing details are collected for subscription management. Card processing is handled by our third-party payment processors — we do not store your full card number.
• Content Data: Articles, social media posts, media files, and other content you create or upload while using the Platform.
• Communications: Messages you send to us via contact forms, support requests, or email.
• Connected Account Credentials: OAuth tokens for CMS platforms and social media accounts you connect to the Platform. These are encrypted at rest.

b. Information We Collect Automatically

• Usage Data: Information about how you interact with the Platform, including pages visited, features used, actions taken, and timestamps.
• Log Data: IP address, browser type and version, operating system, referrer URL, and error logs.
• Device Information: Hardware model, operating system, and unique device identifiers.
• Cookies and Tracking Technologies: We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Platform is used. See Section 9 for details.

c. Information from Third Parties

If you connect third-party services (e.g., social media accounts, WordPress, Shopify), we may receive profile information, content, and analytics data from those platforms as authorised by you. We only request the permissions necessary to provide the features you use.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Platform and its features
• Process your subscription and manage billing
• Authenticate your identity and keep your account secure
• Personalise your experience and remember your preferences
• Power AI content generation features on your behalf
• Publish and schedule content to connected platforms as instructed by you
• Send transactional emails (account confirmations, receipts, password resets)
• Send product updates, tips, and marketing communications (where you have opted in or where we have a legitimate interest)
• Respond to your enquiries and provide customer support
• Monitor usage to detect and prevent abuse, fraud, or security incidents
• Comply with our legal obligations and enforce our Terms of Service
• Analyse aggregate, anonymised usage patterns to improve our service

3. How We Share Your Information

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: We share data with trusted third-party vendors who assist us in operating the Platform, such as cloud hosting providers, payment processors, email delivery services, and analytics tools. These providers are contractually required to protect your data and use it only for the purpose of providing services to us.
• AI Providers: Content you submit for AI generation may be sent to our AI service providers (e.g., Anthropic, OpenAI) to fulfil your request. We select providers with strong privacy commitments and do not permit them to use your content to train their models.
• Connected Platforms: When you instruct us to publish or retrieve content from a connected CMS or social media platform, we share the necessary data with that platform on your behalf.
• Legal Compliance: We may disclose your information if required by law, court order, or government authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Magic Quill Ai, our users, or the public.
• Business Transfers: If Magic Quill Ai is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information is subject to a different privacy policy.
• With Your Consent: We may share your information with other third parties when you give us explicit permission to do so.

4. Your Data Rights

Depending on your location, you may have rights under applicable privacy laws (including GDPR, CCPA, and similar regulations). These rights may include:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data about you.
• Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Portability: Request that we provide your data in a structured, machine-readable format.
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Opt-Out: Opt out of marketing emails at any time by using the unsubscribe link in our emails or updating your notification preferences in your account settings.

To exercise any of these rights, please contact us. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods include:

• Account data: Retained for the lifetime of your account and deleted within 90 days of account closure unless we are required to retain it longer by law.
• Content data: Retained as long as your account is active. You can delete content at any time from within the Platform.
• Payment records: Retained for 7 years to comply with financial and tax obligations.
• Log and security data: Typically retained for up to 12 months.

After the applicable retention period, data is securely deleted or anonymised.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption of sensitive data at rest (including third-party API tokens and credentials)
• Encryption of data in transit using TLS/HTTPS
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security reviews and dependency updates

No security system is completely foolproof. If you believe your account has been compromised, please contact us immediately.

7. International Data Transfers

Magic Quill Ai operates in the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the US or other countries where our service providers operate. These countries may have different data protection laws than your own. By using the Platform, you consent to such transfers. Where required by law, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses for transfers from the EEA).

8. Children's Privacy

The Platform is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Platform and understand how it is used. Types of cookies we use:

• Strictly Necessary: Required for the Platform to function (e.g., session management, CSRF protection). These cannot be disabled.
• Preference: Remember your settings and preferences (e.g., dark/light mode).
• Analytics: Help us understand how users interact with the Platform so we can improve it. Analytics data is aggregated and anonymised where possible.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

10. Third-Party Links and Services

The Platform may contain links to third-party websites or allow you to connect third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be reflected by the "Last updated" date at the top of this page. For significant changes, we will provide additional notice (such as an in-app notification or email). Your continued use of the Platform after any changes indicates your acceptance of the updated policy.