Privacy Policy

1. Information We Collect

1.1 Document Processing Data

When you use Magic Import to process documents:

• Documents: Temporarily received for AI processing
• Extracted data: Text and data extracted from your documents
• Processing metadata: File type, size, and processing time
• Form field data: Field names and mappings for auto-fill

1.2 Account Information

For paid plans, we collect:

• Email address
• Billing information (processed securely by Stripe)
• Usage statistics and quotas so we can enforce plan limits

1.3 Technical Information

We automatically collect:

• IP address (for security and rate limiting)
• API usage logs (timestamps, request IDs, status codes) for debugging and abuse monitoring

2. How We Process Your Documents

3. Information Sharing and Third Parties

3.1 Service Providers

We work with trusted third-party providers:

• Anthropic Claude (paid account): We run all Claude requests through our enterprise Anthropic subscription, which contractually prohibits training on customer prompts or outputs. See Anthropic's commitments: anthropic.com/security-and-privacy.
• Google Gemini (Workspace organization): Gemini traffic flows through our Google Workspace enterprise tenant with data usage controls that block model training on customer data. Details: Gemini API data usage.
• Google Document AI: Used only for complex PDFs/images. It inherits the same Google Cloud enterprise data protections noted above, and processed documents are deleted immediately after extraction.
• Stripe: Payment processing (we don't see or store your card details)
• Vercel: Website and API hosting
• Supabase: Database hosting for account and usage metadata

3.2 We Never Share

4. Data Security

We implement industry-standard security measures:

• HTTPS encryption for all data transmission
• Secure cloud infrastructure with Google Cloud and Vercel, plus direct connections to Anthropic Claude and Google Gemini endpoints
• Immediate deletion of processed documents
• Limited access to personal data by authorized personnel only
• Regular security audits and monitoring

5. Data Retention

• Documents: Deleted immediately after processing
• Extracted data: Not stored on our servers
• Account data: Retained while your account is active
• Usage logs: Retained only as long as needed for security monitoring and troubleshooting
• Billing records: Retained as required by law

6. Your Rights

You have the right to:

• Access: Request information about data we hold about you
• Correct: Update or correct your account information
• Delete: Request deletion of your account and associated data
• Export: Receive a copy of your account data
• Withdraw consent: Stop using our services at any time

7. International Users

Magic Import is operated from the United States. By using our service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

8. Children's Privacy

Magic Import is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: