Privacy Policy

Last updated: November 3, 2026

MagikStack ("we", "our", or "the app") is an AI marketing tool for social media, email, advertising and commerce analytics, operated by MagikStack LLC. This Privacy Policy explains what information we handle when you use the app and magikstack.ai, why, who we share it with, how long we keep it, and your choices. For your account and your use of the app, we decide how the data is used. For data about your customers and audience that reaches us through the accounts you connect (for example your store's orders), we handle it on your behalf and on your instructions.

1. Information We Collect

Your account

• Your email address and name, from registration or from Google when you sign in with Google, and a profile photo if you add one. A profile photo is stored at an unguessable public address.
• Your password is held by Firebase Authentication; we never see it. When you choose a new password, the first five characters of a one-way hash of it are checked against the Have I Been Pwned breached-password service, which never receives the password itself.
• Your portfolios, brands and team roles, the name and color you give your mage, and your preferences (for example how long you want its answers).

Requesting a demo

• The Get a demo form asks for your name, work email, company, and where you heard about us. We email you the demo video from cs@magikstack.ai and send the same details to our team inbox so we can follow up. The form is not saved in MagikStack, only in those two emails. Until November 2026 a Request access form also asked for your name, email, business, website, and a note. Those requests stay stored until 365 days after they were decided, and the business, website, and note were copied onto the account made from them, so the mage could start from them.
• If someone invites you to a portfolio, we hold the email address they entered until you accept or the invitation expires.

Security records

• For each device you use, we store your browser or device description and your IP address with its last part removed, so we can tell you when your account is used from a new device. We do not look up your location.
• Your IP address is used, without being stored, to limit how fast requests can be made to our servers.

Billing

• Payments are taken by Stripe, or by Shopify if your account is billed through Shopify. We send them your email address and account id and store the purchase identifiers and status they return (and, for a plan held before plans were withdrawn, its subscription identifiers). If you save a card for auto-recharge, Stripe keeps it and we store only Stripe's reference to it. If you turn on auto-recharge on an account billed through Shopify, we store the identifiers Shopify returns for the approval and for each refill charge. Your card details are held by them, never by us.
• We keep your mana balance, purchases, the mage's experience and level, a history of each time mana is added to or taken from your balance (when, how much, the spell and the brand it was for, and the balance after) that you can read in the Mana Well, and a usage ledger of each AI call made for you (which model, how many tokens, what it cost us) that holds no content and is deleted after 180 days.

Your conversations with the mage

• We store the transcript of each conversation, references to anything you attach, and a record of what the mage looked up and what it found, so a conversation continues across devices and reloads. You can clear a conversation from the chat.
• Feedback you send through the mage or the app is stored with your name and email so we can follow up.

Your brand and your content

• Your brand guide, voice, products and services, strategy answers, posts, plans, calendars and the pictures, videos and documents you upload or import from Google Drive or Dropbox, and the catalogs you import from Shopify, Amazon or Etsy.
• When you give us your website, we read its homepage and up to five more pages (about, story, products and similar), its stylesheets, its product feed and blog feed, and its product images, to draft your brand guide and find what you sell. We store what we extract and the images; we do not keep copies of the pages. We check your blog for new articles daily while the brand is connected.
• Pictures, clips and music the app makes for you, with a record of the photos and brief they were made from.
• Results of research you ask for: claims and figures from public web pages, with their sources.

Connected accounts

• The access tokens or app passwords you give us, encrypted (see Security).
• Identifiers for the accounts you connect: handles, usernames, page and channel names and ids, the email address LinkedIn or Google Drive returns, and your follower or subscriber counts, which we record daily.
• The posts we publish for you and their public statistics (views, likes, comments, shares, clicks).
• Your own posts from the last 90 days on each connected social account, including posts you did not publish through MagikStack, with their public engagement and the text of the comments under them (never the commenters' identities), so the mage knows what has worked for your brand. The sections below say what each platform allows.
• The commerce and marketing data described under Connected Platforms below.

Information about your customers and audience

This data belongs to your business. We handle it on your behalf to provide the features you use.

• Orders from a connected Shopify store (see Shopify below): never a buyer's name, email, phone or address.
• Sales totals from Etsy and Amazon, aggregated.
• Reviews of your products: the rating, title, text, date, link and the reviewer's public display name, read from Judge.me if you add its key, from the public Amazon page of your listings, and from your own website if you turn that on. The name is shown to you with the review and is never sent to our AI providers.
• The text of comments on your own posts, without who wrote them.
• Clicks on tracked links in your posts: we count them without storing the clicker's IP address or browser, which are hashed with a ten-minute window only to count each click once.
• Contact lists, email campaigns and inbox messages are not available yet. When we release those features we will update this policy first.

How you use the app

• On the web app we use Microsoft Clarity and Google Analytics to see how people use MagikStack and where they get stuck (see Cookies and Local Storage).
• In the signed-in app we also keep our own record of the pages you open and how long you spend on each, by day and tied to your account, to learn which parts of MagikStack people use. It names the kind of page (for example a brand's calendar), never what is on it. It uses no cookie, is not sent to Google Analytics, Clarity or any advertiser, and is deleted after 13 months.

2. How We Use Information

We use the information we collect to:

• Sign you in and keep your account secure, including telling you about new devices.
• Plan, write and make your marketing: posts, pictures, clips, emails and ads, with the AI providers named below.
• Publish your content to the accounts you connect, at the times you approve.
• Read back how your posts performed and show it to you, and connect sales to the posts that earned them.
• Show your store's sales, traffic and advertising numbers.
• Import your products and files when you ask.
• Run research and reports you ask for.
• Take payment, meter mana and show you your balance and costs.
• Answer your requests, invitations and feedback.
• Understand how the app is used and improve it.
• Build aggregated, de-identified benchmarks (for example engagement by product category) that never identify you, your brands or your customers.
• Meet our legal obligations and enforce our Terms.

3. AI Processing

MagikStack is built on third-party AI models. We send them what a task needs and nothing more, and we do not use your content or your results to train any model.

• Anthropic (Claude) writes and reasons for the mage and every text feature: your messages to the mage and what you attach to them, your first name, your brand guide, products and prices, your posts and plans, your numbers, the text of your reviews and comments (never the reviewers' or commenters' names), the text of your website and documents, and feedback you send. For research and for reading your website, Anthropic's own web tools fetch pages from Anthropic's systems. Anthropic also looks at pictures to check them, describe them, say which of your products are in them and write prompts for the image models.
• fal.ai runs the image, video and music models: your product and reference photos, pictures the app made earlier and text prompts built from your brief and brand guide. The models it runs for us are made by ByteDance (Seedream), Google (Gemini image models), Black Forest Labs (FLUX), Bria, Kuaishou (Kling), Alibaba (Wan) and CassetteAI (music), plus open models fal hosts. Photos reach them as unguessable web addresses that the model fetches.
• OpenAI (ChatGPT), Google (the Gemini API) and Perplexity answer the AI visibility check when you forge that spell: each receives the questions a buyer might ask about what you sell, with web search on, and returns its answer. The questions name your products and your category, never a customer, an order or your messages to the mage. Anthropic (Claude) is asked the same questions and reads every answer for whether you are named and what is claimed about you. We keep each answer's text for 90 days so you can read it; the counts and the quotes drawn from it stay with the check.
• Each provider processes your data under its own terms to return a result to us. We keep a usage ledger of each call (model, tokens, cost, no content) for 180 days.

4. Service Providers

These companies process data for us. Each receives only what its job needs.

• Google Cloud and Firebase (Google LLC): hosting, database, file storage, sign-in, server code, scheduled jobs, secrets and encryption keys. Everything the app stores lives here, in the United States.
• Google Fonts: the web app and our emails load their typefaces from Google, so Google receives your IP address and browser description on each load.
• Anthropic (Claude API), fal.ai with the model makers listed under AI Processing, and OpenAI, Google (the Gemini API) and Perplexity for the AI visibility check.
• Resend: delivers every email we send (sign-in notices, invitations, password resets, access and demo requests, the mage's alerts and reminders), so it receives the recipient's address and the email's contents.
• Stripe: payments for accounts billed by us. Shopify: payments for accounts billed through Shopify.
• Microsoft Clarity: usage analytics and session replays on the web app (see Cookies and Local Storage).
• Google Analytics: counts visits, pages viewed, and where visitors came from on the web app (see Cookies and Local Storage).
• Apify: runs the reader that collects the public reviews of your Amazon listings. It receives only the listing's Amazon id.
• Judge.me: returns your store's reviews when you add your Judge.me key.
• Have I Been Pwned: the breached-password check described above (a partial hash only).
• Render and Supabase: run One Apollo (ARIA), our own operations system. For some brands set up by our team, the Google Analytics, Search Console and Google Ads credentials were granted through One Apollo instead of a consent screen in MagikStack; they are kept encrypted in its Supabase vault and copied into MagikStack, sealed to a key only MagikStack holds, when an operator asks. Nothing else about you is sent there.

5. Data Sharing

We do not sell, rent or share your personal information with third parties, except:

• Service providers: the companies listed above, for the purposes listed.
• Connected platforms: when you publish, your post text, images and videos are sent to the platforms you connected, through their official APIs. When you connect a store or an ad account, requests are made to it on your behalf.
• Team members: people you share a portfolio with see its brands, posts, content and numbers according to the role you gave them.
• Aggregated data: de-identified benchmarks that never identify you, your brands or your customers.
• Legal: we may disclose information if required by law or to protect our rights, our users or the public.

6. Connected Platforms

You choose what to connect, from Settings, under Channels. Disconnecting any account there deletes its stored credentials immediately and the data we synced from it, as each section says. Your access tokens are encrypted with a key held in Google Cloud KMS. For each platform, your use is also subject to its own privacy policy:

• Instagram / Meta: Privacy Policy
• Facebook / Meta: Privacy Policy
• Threads (Meta): Supplemental Privacy Policy
• TikTok: Privacy Policy
• LinkedIn: Privacy Policy
• Pinterest: Privacy Policy
• Bluesky: Privacy Policy
• YouTube and Google (Analytics, Search Console, Ads, Drive, Sign-In, Firebase): Google Privacy Policy
• Shopify: Privacy Policy
• Etsy: Privacy Policy
• Amazon: Privacy Notice
• Dropbox: Privacy Policy
• Microsoft Clarity: Microsoft Privacy Statement

7. TikTok Data

In compliance with TikTok's Developer Terms of Service:

• We access TikTok data to publish the videos you schedule to your TikTok account (or, for connections without direct-post permission, to upload them to your TikTok inbox as drafts), to show your account for identification, to show you the performance of the videos you published through MagikStack, and to read your own recent videos and their public counts so the mage knows what has worked for you
• We request only these permissions: user.info.basic, user.info.profile, user.info.stats, video.list and video.publish
• Before publishing directly, we query your creator settings and honor them: posts use a privacy level your account allows, and we never enable comments, Duet, or Stitch where you have disabled them
• Uploaded videos are transmitted directly to TikTok's servers; we do not retain copies of your video files beyond what is already stored in your MagikStack media library
• We store your display name, username, profile link and follower count; the view, like, comment and share counts of the videos you published through MagikStack; and, for 90 days, the titles, links and public counts of your own recent videos. We do not store metrics for any other account's content
• You can disconnect your TikTok account at any time from Settings, under Channels; disconnecting immediately removes stored credentials and the synced history
• TikTok access tokens are refreshed automatically before expiration and can be revoked at any time by disconnecting your account here or by revoking the app from your TikTok account settings

8. Instagram and Facebook Data

In compliance with Meta Platform Terms:

• We access Instagram and Facebook data to publish content to your Instagram Business account and Facebook Pages on your behalf, to read the performance of what you publish, and to read your own recent posts and the comments under them so the mage knows what has worked for you
• For Instagram our login configuration requests: instagram_basic, instagram_content_publish, instagram_manage_insights, pages_show_list and business_management
• For Facebook Pages it requests: pages_show_list, pages_manage_posts, pages_read_engagement and public_profile (read_insights is requested from Meta for Page impressions and clicks and applies once Meta grants it)
• We store your Meta user id, the ids, names and access tokens of the Pages and Instagram accounts you authorized, your follower counts, the insights of posts published through MagikStack, and, for 90 days, your own recent posts with their public engagement and the text of their comments. We do not read or store messages
• You can disconnect your Instagram or Facebook account at any time from Settings, under Channels; disconnecting removes stored credentials, the synced history and follower counts. The statistics of posts MagikStack published stay with the posts
• Access tokens are automatically refreshed before expiration and can be revoked at any time by disconnecting your account here or by removing MagikStack from your Facebook account's Business Integrations settings
• If you remove MagikStack from your Facebook or Instagram settings, Meta tells us, and we delete the credentials and everything we synced from that account, the statistics of your posts included. The confirmation code Meta shows you lets you check the status with us

9. Threads Data

In compliance with the Threads Platform Terms (supplemental to Meta Platform Terms):

• We access Threads data to identify your Threads account (username and user id), to publish posts to your profile on your behalf, to read the performance of what you publish, and to read your own recent posts so the mage knows what has worked for you
• We request only these permissions: threads_basic, threads_content_publish and threads_manage_insights
• We store your access token, user id and username, your follower count, the views, likes, replies, reposts and quotes of posts published through MagikStack, and, for 90 days, your own recent posts with their public counts. We do not read or store replies
• You can disconnect your Threads account at any time from Settings, under Channels; disconnecting immediately removes stored credentials and the synced history
• You may also revoke MagikStack's access at any time from Threads → Settings → Account → Permitted apps
• Threads long-lived access tokens expire after 60 days; MagikStack refreshes them automatically before expiry

10. LinkedIn Data

In compliance with the LinkedIn API Terms of Use:

Personal profile posting (Sign In with LinkedIn + Share on LinkedIn)

• We access LinkedIn data to publish posts to your personal profile on your behalf, to show your name for identification, and to read the likes and comments counts of the posts we published
• We request only these permissions: openid, profile, email (to identify you) and w_member_social (to publish posts)
• We store your access token, refresh token (when granted), the member URN returned by LinkedIn's /userinfo endpoint, and your name and email address. We do not store other profile data, connections, messages or company information, and we do not read your other posts

Company Page posting (Community Management API)

• We access LinkedIn data to list the Company Pages you administer, to publish posts on behalf of the Page you select, to read the statistics of what we publish, and to read the Page's own recent posts and their comments so the mage knows what has worked for it
• We request only these permissions: rw_organization_admin (list the Pages you administer), r_organization_social (read the Page's posts and statistics) and w_organization_social (publish as the Page)
• We store your access and refresh tokens, the URNs and names of the Pages you administer, the Page you selected, the statistics of posts published through MagikStack, and, for 90 days, the Page's own recent posts with their engagement and comment text. We do not store follower data

Both connection types

• You can disconnect either LinkedIn connection at any time from Settings, under Channels; disconnecting immediately removes stored credentials and the synced history
• You may also revoke MagikStack's access at any time from LinkedIn → Settings & Privacy → Data privacy → Other applications
• LinkedIn access tokens expire after 60 days; when a refresh token is available, MagikStack refreshes automatically before expiry. Otherwise you will be prompted to reconnect

11. Pinterest Data

In compliance with the Pinterest Developer Terms of Use:

• We access Pinterest data to list your boards (so you can choose which one to post to), to create Pins on the board you select, to read the impressions, saves and clicks of the Pins we created, and to read your own recent Pins so the mage knows what has worked for you. We show your Pinterest username for identification
• We request only these permissions: user_accounts:read, boards:read, boards:write, pins:read and pins:write
• We store your access and refresh tokens, your username, the ids and names of your boards and the board you selected, the analytics of Pins created through MagikStack, and, for 90 days, the text, links and public counts of your own recent Pins. We do not store follower data
• You can disconnect your Pinterest account at any time from Settings, under Channels; disconnecting immediately removes stored credentials and the synced history
• You may also revoke MagikStack's access at any time from Pinterest → Settings → Apps and sessions
• Pinterest access tokens expire after 30 days; MagikStack refreshes automatically before expiry using the stored refresh token

12. Bluesky Data

• Bluesky connections use an app password that you generate in Bluesky and paste into MagikStack; we do not receive or store your main Bluesky password
• We use the app password to publish posts on your behalf through the Bluesky (AT Protocol) API, to read your follower count and the public engagement of the posts we published, and to read your own recent posts and the public replies to them so the mage knows what has worked for you
• You can revoke the app password at any time from Bluesky's settings, and you can disconnect Bluesky from MagikStack at any time from Settings, under Channels, which removes the stored app password and the synced history

13. YouTube Data

MagikStack uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's Privacy Policy applies to Google's handling of your data:

• YouTube Terms of Service: youtube.com/t/terms
• Google Privacy Policy: policies.google.com/privacy
• We access YouTube data to identify the channel you connected, to upload the videos you create and schedule in MagikStack to that channel on your behalf, to show you how those videos and your channel perform, and to read the list of your channel's recent uploads with their public counts so the mage knows what has worked for you
• We request only these scopes: youtube.upload (to upload your scheduled videos and set their thumbnails) and youtube.readonly (to confirm which channel you connected, to show your subscriber count, and to read public view, like and comment counts). We deliberately do not request youtube.force-ssl, which would grant rights to edit or delete your videos or read comments
• We store your access and refresh tokens, your channel id and title, your subscriber count, the video ids of the uploads MagikStack made with their public statistics, and, for 30 days, the titles, links and public counts of your channel's recent uploads. We do not store the video files after upload, your subscriber list, comments, watch history or any private data
• We never modify or delete any video, including ones MagikStack uploaded, except to set the thumbnail of an upload we are making, and we never access another user's YouTube data
• We do not sell YouTube data or use it for advertising. We share it with one service provider only: our AI provider receives the titles and public counts of your recent uploads to write the summary of your channel's performance for you. It is used for nothing else
• Stored YouTube statistics are refreshed or deleted at least every 30 days: statistics we cannot refresh are deleted, and the list of recent uploads is deleted 30 days after it was read
• You can disconnect your YouTube account at any time from Settings, under Channels; disconnecting immediately removes stored credentials, your channel's statistics, subscriber counts and the synced list of uploads. The record that a post was published, with its video link, stays with the post
• You may also revoke MagikStack's access at any time from your Google security settings: myaccount.google.com/permissions
• All stored YouTube data is deleted when you delete your MagikStack account

14. Google Analytics, Search Console and Google Ads Data

When you connect Google from Settings, under Channels, one consent covers these three services:

• We request these scopes: analytics.readonly (Google Analytics 4 reports), webmasters.readonly (Search Console queries, including searches for your brand name) and adwords (Google Ads accounts and reports). The adwords scope also allows writing; today we only read with it. Creating and changing campaigns is part of Advertising, which is not available yet, and we will update this policy before it is
• We store your access and refresh tokens, the accounts and properties you chose, and 30-day snapshots of visits, sessions, conversions, search queries and clicks, and ad spend and results, which we refresh on a schedule
• For some brands set up by our team, these credentials come from One Apollo (ARIA), our own operations system (see Service Providers), instead of a consent screen in MagikStack
• You can disconnect Google at any time from Settings, under Channels; disconnecting immediately removes stored credentials. You may also revoke access at myaccount.google.com/permissions

15. Google Drive and Dropbox

• You can connect Google Drive (scopes drive.readonly, openid, email and profile) or Dropbox (read-only file access) to import pictures and videos into your library. We read the folders you choose, copy the files into your library and store an index of what was imported, your account name and email address
• Access is read-only. We never change or delete files in your drive
• You can disconnect a drive at any time from Settings, under Channels; disconnecting deletes the stored credentials. Files already imported stay in your library until you delete them

16. Etsy Data

In compliance with the Etsy API Terms of Use:

• We access Etsy data solely to show you a read-only commerce dashboard for the shop you connect: revenue, fees, and order-count trends
• We request only the scopes necessary for these functions: shops_r (to identify the shop you authorize) and transactions_r (to read that shop's receipts and payment-account ledger)
• We read only your own shop's data. From each receipt we use only the order total and date; from each ledger entry we use only the fee amount and date. These are aggregated into monthly and 30-day revenue, fees, and order counts
• We do NOT store buyer personal data (names, shipping addresses, messages), individual order line items, or product/listing details. Only aggregate totals, your shop name, and currency are stored
• We do not request or hold any write access to your Etsy shop
• Etsy access tokens are stored encrypted and refreshed automatically before expiry; you can disconnect Etsy at any time from Settings, under Channels; disconnecting immediately removes stored credentials. You may also revoke access from your Etsy account under Account settings → Your apps
• The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.

17. Amazon Seller Central Data

When you connect an Amazon Selling Partner account:

• We access Amazon data for two purposes: a read-only commerce dashboard for the account you connect (revenue and order trends, sales by product) and importing your listings into your MagikStack product library
• We request only read access to your own seller account's orders, sales metrics, the sales and traffic report, inventory, pricing, fee estimates, catalog and listings, scoped to the account you authorize. We do not read Amazon's fee or settlement records, so Amazon fees are not shown
• From your orders we use only monetary totals, dates and product identifiers, aggregated into monthly and 30-day revenue and order counts and into sales and units for your top 50 products
• We do NOT store buyer personal data (names, shipping addresses) or individual order line items
• Listings you choose to import (titles, descriptions, bullet points, images, and inventory counts) become part of your MagikStack product library and are retained until you delete them or delete your account
• We read the public reviews of your listings on Amazon through a service provider (Apify), which receives only the listing id. We keep each review's rating, title, text, date, link and the reviewer's public display name, as Amazon shows them
• We do not request or hold any write access to your Seller Central account
• Access credentials are stored encrypted and refreshed automatically; you can disconnect Amazon at any time from Settings, under Channels; disconnecting immediately removes stored credentials. You may also revoke access from your Amazon Seller Central account

18. Amazon Ads Data

When you connect an Amazon Advertising account:

• We request the advertising::campaign_management scope. Today we use it to read your advertising profiles, Sponsored Products reports, search-term reports and Amazon Attribution reports, and to create Amazon Attribution tags for the Amazon links in your posts so sales from them can be measured. Creating and changing campaigns is part of Advertising, which is not available yet, and we will update this policy before it is
• We store your access and refresh tokens, your advertising profile ids, and the attribution and campaign metrics we read
• You can disconnect Amazon Ads at any time from Settings, under Channels; disconnecting immediately removes stored credentials

19. Shopify Data

When you connect a Shopify store:

• We access Shopify data for three purposes: a commerce dashboard for the store you connect (revenue and order trends), importing your product catalog into your MagikStack product library, and attributing sales back to the social posts that drove them
• We request read access only, in four scopes: read_orders, read_all_orders (orders older than 60 days, so a connection can start with history), read_products and read_inventory. We do not request or hold any write access to your store's data. If your account is billed through Shopify, we create your mana top-up charges on your store through Shopify's Billing API, as one-time purchases you approve in your Shopify admin
• From each order we read the Shopify order id, the order date, its total and currency, line items (product reference, SKU, quantity and price), any discount codes applied, and the landing and referring URLs Shopify records on the order. The landing URL carries the tracking parameters from links MagikStack generated for your posts, which is how a sale is matched to the post that earned it
• We do NOT collect or store buyer names, email addresses, phone numbers, or shipping or billing addresses. We do not request the protected customer fields those come from
• We keep orders in two layers. The full order record, with its URLs and discount codes, is kept for 120 days from the order date, which is what matching a sale to a post needs, and then deleted. A slim record per order (date, total, currency, products and quantities, and the post it was credited to) is kept until you delete the brand or your account, so your lifetime sales and the value your posts captured can be shown over any period, and survive a store being disconnected and reconnected
• Product data you import (titles, descriptions, images, prices, and inventory counts) becomes part of your MagikStack product library and is retained until you delete it or delete your account
• If you add a Judge.me API key, we read your store's reviews from Judge.me and keep each review's rating, title, text, date, link and the reviewer's name as Judge.me shows it. The key is stored encrypted with your Shopify credentials
• Access tokens are stored encrypted; you can disconnect Shopify at any time from Settings, under Channels; disconnecting immediately removes stored credentials, deletes the full order records and the dashboard numbers synced from the store, and keeps the slim order records. You may also revoke access from your Shopify admin under Settings → Apps
• If you uninstall MagikStack from your Shopify admin we delete the stored credentials and the full order records immediately, and we erase the store's remaining records, the slim order records included, when Shopify sends us its shop data erasure request (48 hours after the uninstall). When Shopify sends a customer erasure request, we delete that customer's order records in both layers

20. Media, Links and Public Addresses

• Pictures and clips you upload or that the app makes are stored at unguessable public web addresses, so the platforms you publish to and our AI providers can fetch them. Anyone who has an address can open the file. Documents you upload (for example a brand guide PDF) are private to your portfolio
• Unless you turn it off in your brand's settings, links in your posts are replaced with tracked links on magikstack.ai or on your own domain. When someone clicks one we count the click and send them on; we do not store their IP address or browser

21. Data Storage and Security

• All data is stored on Google Cloud and Firebase (Firestore, Cloud Storage, Firebase Authentication) in the United States: our servers run in us-central1 and your files are stored in us-east1
• All data is transmitted over encrypted (HTTPS) connections and encrypted at rest by Google Cloud
• Every access token and app password you give us is encrypted a second time, with a key held in Google Cloud KMS, before it is stored, and is deleted when you disconnect the account
• Our database accepts no direct connections from the app; every read and write goes through our servers, which check that you belong to the portfolio and brand you are asking about. Access within a portfolio follows the role the owner gave you (owner, editor, viewer) and the brands they allowed
• Webhooks from Stripe, Shopify and Meta are verified by signature before anything is done with them
• We notify you by email when your account is used from a new device

22. Cookies and Local Storage

• MagikStack uses Firebase Authentication, which stores a session token and related identifiers in your browser's local storage and IndexedDB so you can remain signed in between visits
• The web app also keeps a few preferences in your browser's local storage: your theme, whether the sidebar is collapsed, your cookie choice, the portfolio and brand you had open, notices you have already seen, where to return after sign-in, and, while you accept an invitation or claim a Shopify install, the invited email address or a one-time claim token
• On the web app we use Microsoft Clarity to understand how people use MagikStack and where they get stuck, including inside the signed-in app. Clarity records pages viewed, clicks, scrolling and replays of a visit, which can include what is on your screen, and it uses cookies to connect the pages of one visit and later visits. We do not send Clarity your name or email address. Microsoft processes this data under its own privacy statement, linked above
• On the web app we also use Google Analytics to count visits, the pages viewed, how long a visit lasts, and where visitors came from. It uses cookies to tell one visitor's pages from another's. We do not send Google your name, your email address, or your account, and we do not use Google Analytics for advertising. Google processes this data under its own privacy policy, linked above
• If you are in the European Economic Area, the United Kingdom or Switzerland, we ask before Clarity or Google Analytics sets any cookie. We go by your device's time zone, and Google Analytics also by where your connection comes from. Until you allow it, Clarity runs without cookies and treats each page view on its own, and Google Analytics sends only cookieless signals that carry no identifier. Elsewhere both are on by default, and you can turn them off
• You can review or change your choice at any time from Cookie choices
• We do not use advertising cookies, and we tell Clarity and Google Analytics to deny ad storage
• Clearing site data in your browser will sign you out and remove all client-side state

23. Data Retention

• Your account, brands, content, posts and numbers are kept while your account is open, until you delete them or delete your account
• Platform credentials are deleted the moment you disconnect an account, with the synced history and follower counts of that account. The statistics of posts MagikStack published stay with the posts, except YouTube's, which go on disconnect and are refreshed or deleted at least every 30 days as Google requires
• Your own recent posts read from connected accounts cover 90 days and are replaced on each read
• Shopify full order records are deleted 120 days after the order date; the slim per-order records are kept until you delete the brand or your account, or until Shopify sends an erasure request for the store or for a customer
• Your mana history is kept while your account is open and deleted with it. The AI usage ledger is deleted after 180 days. Unsaved AI drafts in the design studio are deleted after 30 days
• The text of each answer an AI visibility check received is deleted after 90 days; the counts and the quotes drawn from it stay with the check until you delete the spell, the brand or your account
• Device records are deleted 365 days after the device was last used. Access requests are deleted 365 days after they were decided. Invitations are deleted 30 days after they expire. Tracked-link click counts are deleted after 400 days
• Conversations with the mage are kept until you clear them or delete your account. Feedback reports are kept until we have acted on them or you delete your account
• When a connected store is uninstalled we delete its credentials and full order records at once, and when its platform sends us an erasure request we delete everything of that store's that remains

24. Disconnecting and Deleting

• Disconnecting an account (Settings, under Channels) deletes its credentials and synced data as described under each platform
• Deleting a brand or a portfolio deletes everything in it: its content, media, posts, platform credentials and synced data
• You can delete your account from Account Settings, at the bottom of the Profile tab. This cancels any plan you still hold, deletes every portfolio you own with everything in it, removes you from portfolios you belong to, deletes your uploaded media, conversations, security records and account, and removes your data from our systems within 30 days. Our payment processors keep the billing records the law requires them to keep. It cannot be undone
• You can also ask us to delete your account by emailing hello@magikstack.ai with the subject "MagikStack data deletion request". We will verify the request and complete the same deletion within 30 days
• If you remove MagikStack from your Facebook or Instagram settings, Meta sends us a data deletion request and we delete the credentials and data we synced from that account; the confirmation code Meta gives you lets you check its status with us

25. Your Rights

Wherever you live, you can:

• See and change your account details, brands, content and plans in the app
• Delete your brands, portfolios, content, posts and account at any time in the app
• Disconnect any platform, which removes its credentials and synced data
• Turn Clarity and Google Analytics off or on from Cookie choices
• Ask us for a copy of your data, or to correct or delete it, by emailing hello@magikstack.ai. We answer within 30 days
• If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to object to or restrict processing, to data portability, and to complain to your data protection authority. If you are in California, you have the rights the CCPA gives you; we do not sell or share personal information for advertising

26. International Data Transfers

MagikStack is operated from the United States and its data is stored there. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States and in the countries where our service providers operate. Where the law requires, we rely on standard contractual clauses or an equivalent safeguard for those transfers.

27. Age

MagikStack is a business tool for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

28. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. For material changes, and before any feature starts handling a new kind of data about your customers, we will make a reasonable effort to notify you. Continued use of the application after changes constitutes acceptance of the updated policy.

29. Contact Us

If you have questions about this Privacy Policy or your data, email us at hello@magikstack.ai.