Privacy Policy
Last updated: 10 February 2026
This Privacy Policy explains how Magic AI (“we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use Magic AI (the “Service”).
This Privacy Policy is designed to comply with:
-
General Data Protection Regulation (GDPR – European Union)
-
UK GDPR & Data Protection Act 2018 (United Kingdom)
-
California Consumer Privacy Act & California Privacy Rights Act (CCPA / CPRA – USA)
-
General international privacy and data protection best practices
1. Who We Are (Data Controller)
-
Service Name: Magic AI
-
Operating Address: Remote / Global (no registered company)
-
Country: Croatia
-
Email: matija@magicai.global
If required by applicable law, you may contact our Data Protection Officer (DPO) at:
-
DPO Email: matija@magicai.global
Note: Magic AI is operated by an individual (Matija) as a start-up and is not yet a registered company.
2. Information We Collect
a) Personal Information You Provide
-
Name
-
Email address
-
Account credentials
-
Any information you submit via forms, prompts, support requests, or direct communication
b) Automatically Collected Information
-
IP address
-
Device type, operating system, and browser
-
App or website version and configuration
-
Usage data (pages viewed, features used, timestamps)
-
Log files and crash reports
c) Cookies & Tracking Technologies
Details about cookies and similar technologies are provided in Section 9.
We do not knowingly collect sensitive or special-category personal data.
3. Legal Bases for Processing (GDPR / UK GDPR)
We process personal data only when legally permitted, including:
-
Consent – when you have given explicit permission
-
Contractual necessity – to provide and maintain the Service
-
Legal obligation – to comply with applicable laws
-
Legitimate interests – to improve, secure, and operate the Service, provided your rights do not override these interests
4. How We Use Your Information
(Including AI & Automated Processing)
We use personal data to:
-
Provide, operate, and maintain the Service
-
Create and manage user accounts
-
Improve functionality, performance, and user experience
-
Communicate service updates, security notices, and support messages
-
Detect, prevent, and resolve technical or security issues
-
Comply with legal and regulatory obligations
Automated Processing & AI
Personal data may be processed by automated systems, including artificial intelligence and algorithmic tools, for the purpose of providing and improving the Service.
Magic AI does not engage in fully automated decision-making, including profiling, that produces legal effects or similarly significant impacts on users without human involvement or appropriate safeguards, in accordance with Article 22 of the GDPR.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods depend on:
-
Account status
-
Legal and regulatory requirements
-
Operational and security needs
6. Sharing of Information
We may share personal data with:
-
Trusted third-party service providers (e.g., hosting, analytics, customer support)
-
Legal or regulatory authorities where required by law
-
Business partners strictly to the extent necessary to provide the Service
All third parties are contractually obligated to protect personal data.
7. International Data Transfers
If personal data is transferred outside your country, the EEA, or the UK, we ensure appropriate safeguards, including:
-
Standard Contractual Clauses (SCCs)
-
Adequacy decisions
-
Other legally recognized mechanisms
8. Your Privacy Rights
a) GDPR / UK GDPR
You have the right to:
-
Access
-
Rectification
-
Erasure
-
Restriction or objection
-
Data portability
-
Withdraw consent
b) CCPA / CPRA
You have the right to:
-
Know what data we collect
-
Request deletion
-
Opt out of sale or sharing (we do not sell data)
-
Non-discrimination
Requests: matija@magicai.global
9. Cookies & Tracking
-
Essential cookies – required
-
Non-essential cookies – analytics (consent-based where required)
10. Data Security
We implement appropriate technical and organizational measures to protect personal data.
11. Children’s Privacy
The Service is not intended for individuals under 16 (or 13 where applicable).
12. Third-Party Links
We are not responsible for third-party privacy practices.
13. Right to Lodge a Complaint
EEA & UK users may lodge a complaint with their local Data Protection Authority.
14. Changes to This Privacy Policy
Updates will be posted with a revised “Last updated” date.
15. Contact Us
16. AI-Specific Privacy Notice
Magic AI uses artificial intelligence to generate outputs based on user inputs.
-
User inputs may be processed to generate AI responses
-
We do not use user inputs to train public or third-party AI models unless explicitly disclosed or consented to
-
AI outputs may be inaccurate or incomplete
-
AI outputs do not constitute professional, legal, medical, or financial advice
Users remain responsible for how they use AI-generated content.