Privacy Policy
Last updated 2026-10-19
This policy explains what [COMPANY LEGAL NAME] collects when you use MagnateAI, why, who processes it, and the choices you have.
What we collect
- Account: your email address, name, and the sign-in method you use (email code, Google or Apple).
- Workspace content: company settings, org chart, agent instructions, tasks, deliverables, approval decisions and your edits, and the preference rules learned from them.
- Connected-app data: what your agents read from or send to the apps you connect, limited to the actions you allow.
- Keys: model provider keys you add, stored encrypted and never shown again after you save them.
- Usage: model calls (tokens, cost, model), activity and audit logs, request logs with ids and timings.
- Devices: iOS push tokens, so notifications reach your phone.
- Error reports: crash and error details tied to your user id only.
How we use it
To run the service: authenticate you, run the agents you configure, call the models and apps they need, notify you, enforce spend caps and rate limits, and keep an audit trail. Your approval decisions train your workspace’s own approval model; they are not used for anyone else’s workspace. We do not sell personal data or use workspace content for advertising.
Who processes it
We use the subprocessors listed in the Data Processing Note. Model providers receive the prompts and context needed for each task; their API terms govern how they handle it.
Retention and deletion
Workspace data is kept while the workspace exists. When an owner deletes a workspace, agents halt and it is hidden at once; after 7 days it is permanently removed and its app connections are revoked. Database backups roll off within [BACKUP RETENTION, e.g. 7 days]. Deleting your account removes your memberships and profile; contact us at [CONTACT EMAIL].
Your choices and rights
- Export a workspace as JSON from Settings (admins and owners).
- Delete a workspace from Settings (owner), and disconnect apps or remove keys at any time.
- Control notification email per type, and push notifications on your phone.
- Ask us to access, correct or delete your personal data: [CONTACT EMAIL]. Depending on where you live you may have further rights, including complaining to your data protection authority.
Security
Data is encrypted in transit and at rest. Every table is isolated per workspace by row-level security; keys and app credentials are additionally encrypted with AES-256-GCM. Admin changes are recorded in an audit log your admins can read.
Contact
[COMPANY LEGAL NAME], [ADDRESS]. [CONTACT EMAIL].