Privacy Policy

Effective Date: December 25, 2025
Last Updated: December 25, 2025

INTRODUCTION

Automagic LLC ("Automagic," "Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information about you when you access or use our website, mobile applications, software, application programming interfaces (APIs), services, and any related content or functionality (collectively, the "Services").

This Privacy Policy applies to all users of our Services, including visitors, registered users, subscribers, and customers.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to our collection, use, and disclosure of your information as described herein.

If you do not agree with this Privacy Policy, you must immediately discontinue use of all Services.

1. INFORMATION WE COLLECT

We collect information about you in various ways when you use our Services. The types of information we collect include:

1.1 Personal Information

Personal information is any information that identifies, relates to, describes, or could reasonably be linked to you as an individual. We collect the following categories of personal information:

Identification Information:

Full name (first, middle, last)
Email address
Phone number (mobile and landline)
Postal address (billing and shipping)
Date of birth
Government-issued identification numbers (when required by law or for verification purposes)
Username and password
Social media profile information
Photograph or profile picture

Financial Information:

Credit card numbers
Debit card numbers
Bank account information
Payment processor account details (PayPal, Stripe, etc.)
Billing address
Transaction history
Purchase history
Payment method preferences

Professional and Business Information:

Company name and information
Job title and position
Business address
Business email and phone number
Industry and sector
Tax identification numbers (EIN, VAT number, etc.)
Professional certifications or licenses

Account Information:

Account credentials (username, password, security questions)
Account preferences and settings
Communication preferences
Subscription details and plan information
Account activity and usage history

Communications:

Customer support inquiries and correspondence
Survey responses and feedback
User-generated content (reviews, comments, posts)
Messages sent through the Services
Chat transcripts
Email correspondence
Phone call recordings (with notice and consent)

Demographic Information:

Age or age range
Gender
Nationality
Language preferences
Marital status
Education level
Income level (when relevant)

Protected Classification Information:

Certain information may be considered protected under applicable laws (race, ethnicity, religious beliefs, sexual orientation, disability status). We only collect such information when necessary, legally permitted, and with your explicit consent.

1.2 Non-Personal Information

Non-personal information is data that cannot be used on its own to identify you. We automatically collect the following non-personal information:

Device Information:

Device type (smartphone, tablet, computer)
Device model and manufacturer
Operating system and version
Device identifiers (UDID, IMEI, MAC address)
Device settings and configurations
Screen resolution and display information
Battery level and charging status
Available storage space
Installed applications (on mobile devices, with permission)

Network and Connection Information:

IP address (including geolocation derived from IP)
Internet Service Provider (ISP)
Network type (WiFi, cellular, etc.)
Network signal strength
Mobile carrier information
Connection speed and quality

Browser and Application Information:

Browser type and version
Browser language settings
Browser plugins and extensions
User agent string
Application version
Referrer URL (website you came from)

Usage and Activity Information:

Pages, screens, or features accessed
Content viewed or interacted with
Links and buttons clicked
Search queries and terms
Time spent on pages or in the application
Navigation paths and sequences
Scroll depth and engagement metrics
Form interactions (fields filled, abandoned carts)
Feature usage frequency and patterns
Session duration and frequency
Access times and dates (timestamps)
Error messages and diagnostic information

Location Information:

Precise geolocation (GPS coordinates, with explicit consent)
Approximate location (city, state, country derived from IP address)
Location data from WiFi access points
Bluetooth beacon data
Cell tower triangulation data

Performance and Analytics Data:

Application performance metrics
Load times and response times
Crash reports and error logs
System resource usage
API call statistics
Bandwidth consumption

1.3 Cookies and Tracking Technologies

We use various tracking technologies to collect information automatically when you use the Services:

Cookies: Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve your experience. We use the following types of cookies:

Strictly Necessary Cookies: Essential for basic functionality, authentication, security, and accessing features of the Services. These cannot be disabled.
Functional Cookies: Enable enhanced features, personalization, and remember your preferences (language, region, display settings).
Performance/Analytics Cookies: Collect information about how you use the Services, which pages are most visited, error messages, and overall performance. This helps us improve the Services.
Advertising/Marketing Cookies: Track your browsing activity across websites to deliver targeted advertisements and measure campaign effectiveness.
Session Cookies: Temporary cookies that expire when you close your browser.
Persistent Cookies: Remain on your device for a set period or until manually deleted.

Other Tracking Technologies:

Web Beacons/Pixels: Tiny transparent images embedded in web pages, emails, or advertisements that track user behavior, email opens, and ad impressions.
Local Storage: HTML5 local storage and similar technologies that store data locally on your device.
Flash Cookies (LSOs): Local Shared Objects used by Adobe Flash that store preferences and usage information.
SDKs (Software Development Kits): Third-party code integrated into mobile applications to collect usage data and analytics.
Device Fingerprinting: Techniques that collect information about your device configuration to create a unique identifier.
ETags: HTTP headers used to validate cached content and track users.
Server Logs: Automatically generated records of server activity, including requests, responses, and errors.

1.4 Information from Third Parties

We may receive information about you from third-party sources, including:

Social Media Platforms:

When you connect your social media accounts (Facebook, LinkedIn, Twitter, Google, etc.)
Profile information (name, email, profile picture, friends list)
Social media activity and interests

Data Brokers and Marketing Partners:

Demographic information
Interest and behavior data
Psychographic profiles
Purchase history and preferences

Business Partners and Affiliates:

Referral information
Joint marketing data
Co-branded service information

Payment Processors:

Transaction confirmation
Payment status updates
Fraud detection information

Identity Verification Services:

Identity validation results
Document verification data
Background check information (when legally permitted)

Advertising Networks:

Ad performance data
Cross-device tracking information
Audience segmentation data

Public Databases:

Publicly available information from government records, directories, or other public sources
Business registration information
Professional licensing data

Other Users:

Referral information when someone refers you to our Services
Information provided in testimonials or reviews that mention you

1.5 Information You Provide About Others

If you provide information about other individuals (such as referrals, gift recipients, or emergency contacts), you represent that you have obtained all necessary consents and permissions to share their information with us.

1.6 Sensitive Personal Information

We generally do not request or collect sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, genetic data, sexual orientation, or criminal history) unless:

Specifically required for the Services
Required by law
You voluntarily provide it
We have obtained your explicit consent

If we collect sensitive information, we will implement additional security measures and use it only for the specific purposes disclosed at the time of collection.

2. HOW WE COLLECT INFORMATION

We collect information through various methods:

2.1 Information You Provide Directly

Creating an account or registering for Services
Making purchases or subscribing to Services
Filling out forms, surveys, or questionnaires
Contacting customer support
Participating in promotions, contests, or sweepstakes
Posting content, reviews, or comments
Subscribing to newsletters or marketing communications
Communicating with us via email, phone, chat, or social media
Providing feedback or suggestions
Attending events or webinars

2.2 Information Collected Automatically

When you visit our website or use our Services
Through cookies and tracking technologies
Via analytics tools and monitoring software
Through server logs and access logs
When errors or crashes occur
During API interactions

2.3 Information from Third Parties

Social media platforms (when you connect accounts or log in)
Data partners and marketing services
Payment processors and financial institutions
Identity verification services
Business partners and affiliates
Advertising networks and platforms
Public databases and records

3. HOW WE USE YOUR INFORMATION

We use the information we collect for various legitimate business purposes:

3.1 To Provide and Deliver Services

Create, manage, and maintain your account
Process transactions and payments
Deliver products or services you request
Send confirmations, receipts, and invoices
Provide customer support and respond to inquiries
Fulfill orders and subscriptions
Enable features and functionality
Process returns, exchanges, and refunds

3.2 To Communicate with You

Send service-related announcements and updates
Respond to your questions, requests, and feedback
Send newsletters, promotional materials, and marketing communications (with consent where required)
Conduct surveys and gather feedback
Notify you about changes to our Services, policies, or terms
Send security alerts and account notifications
Provide personalized recommendations

3.3 To Improve and Optimize Services

Analyze usage patterns and trends
Conduct research and analytics
Develop new features, products, and services
Test and improve existing functionality
Optimize user experience and interface design
Measure and analyze performance
Conduct A/B testing and experiments
Train and improve machine learning models and artificial intelligence systems

3.4 To Personalize Your Experience

Customize content, features, and recommendations
Remember your preferences and settings
Deliver targeted advertisements and marketing messages
Provide location-based services and content
Tailor communications to your interests

3.5 For Marketing and Advertising

Display advertisements on our Services and third-party platforms
Measure advertising effectiveness and campaign performance
Conduct market research
Segment audiences for targeted marketing
Create lookalike audiences
Retarget visitors who have previously interacted with our Services
Track conversions and attribution
Send promotional offers and special deals

3.6 For Security and Fraud Prevention

Detect, prevent, and investigate fraud, abuse, and unauthorized access
Verify identity and authenticate users
Monitor for suspicious activity and security threats
Protect against spam, phishing, and malicious activity
Enforce our Terms and Conditions and other policies
Investigate violations and take appropriate action
Prevent prohibited or illegal activities
Protect the safety and security of users, the public, and our Services

3.7 For Legal Compliance and Protection

Comply with applicable laws, regulations, and legal obligations
Respond to legal requests, court orders, and subpoenas
Protect and defend our legal rights and property
Enforce our Terms and Conditions
Resolve disputes and pursue legal claims
Prevent or investigate potential legal violations
Protect against legal liability

3.8 For Business Operations

Conduct internal audits and quality assurance
Maintain business records and archives
Manage vendor and partner relationships
Conduct due diligence in business transactions (mergers, acquisitions, etc.)
Facilitate corporate transactions and restructuring
Generate aggregated and anonymized analytics and reports

3.9 With Your Consent

For any other purposes disclosed to you at the time of collection
When you explicitly consent to specific uses
As otherwise permitted by applicable law

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers and Vendors

We share information with third-party service providers who perform services on our behalf, including:

Technology and Infrastructure:

Cloud hosting and storage providers (AWS, Google Cloud, Microsoft Azure, etc.)
Content delivery networks (CDNs)
Database management services
Email service providers
SMS and communication platforms
API and software development tools

Payment Processing:

Payment gateways and processors (Stripe, PayPal, Square, etc.)
Fraud detection and prevention services
PCI compliance services
Billing and invoicing platforms

Analytics and Marketing:

Web analytics providers (Google Analytics, Adobe Analytics, Mixpanel, etc.)
Marketing automation platforms
Email marketing services (Mailchimp, SendGrid, etc.)
Customer relationship management (CRM) systems
Advertising networks and platforms
Social media management tools

Customer Support:

Help desk and ticketing systems
Live chat providers
Call center services
Customer feedback and survey tools

Business Operations:

Accounting and tax services
Legal and compliance services
Insurance providers
Human resources and recruiting platforms
Business intelligence tools

These service providers have access to personal information only as necessary to perform their functions and are contractually obligated to:

Use your information only for the purposes specified by us
Maintain confidentiality and security
Comply with applicable data protection laws
Not use your information for their own purposes

4.2 Business Partners and Affiliates

We may share information with:

Corporate Affiliates: Parent companies, subsidiaries, and affiliated entities under common ownership or control
Joint Marketing Partners: Companies with whom we have joint marketing or co-branding arrangements
Resellers and Distributors: Authorized partners who sell or distribute our Services
Integration Partners: Third-party services that integrate with our platform
Strategic Business Partners: Companies with whom we collaborate on products or services

4.3 Advertising and Analytics Partners

We share information with third-party advertising and analytics companies, including:

Google (Google Analytics, Google Ads, Google Tag Manager, DoubleClick)
Facebook/Meta (Facebook Pixel, Meta advertising platforms)
LinkedIn (LinkedIn Insight Tag, LinkedIn Ads)
Twitter/X (Twitter Pixel, X Ads)
Microsoft (Microsoft Advertising, Bing Ads)
Adobe (Adobe Analytics, Adobe Marketing Cloud)
Other advertising networks and demand-side platforms

These partners may use cookies and similar technologies to:

Track your activity across different websites and services
Build profiles about your interests and preferences
Deliver targeted advertisements
Measure ad performance and attribution

You can opt out of interest-based advertising through:

Network Advertising Initiative: http://optout.networkadvertising.org
Digital Advertising Alliance: http://optout.aboutads.info
European Interactive Digital Advertising Alliance (EU): http://www.youronlinechoices.eu
Your device settings (mobile advertising ID controls)

4.4 Legal Obligations and Rights Protection

We may disclose your information when we believe in good faith that disclosure is necessary to:

Comply with applicable laws, regulations, or legal processes
Respond to lawful requests from government authorities, law enforcement, or courts (subpoenas, court orders, search warrants)
Enforce our Terms and Conditions and other agreements
Protect and defend our legal rights, property, and interests
Detect, prevent, or investigate fraud, security breaches, or illegal activity
Protect the safety, rights, or property of our users, employees, or the public
Respond to claims that content violates third-party rights
Prevent harm or potential harm to persons or property

4.5 Business Transactions

If Automagic is involved in a merger, acquisition, consolidation, restructuring, reorganization, sale of assets, bankruptcy, or other business transaction, your information may be transferred to the successor entity or acquiring party. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.6 Aggregated and Anonymized Information

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you. This includes:

Statistical data and analytics
Trend reports and insights
Benchmarking data
Market research findings
Public reports and presentations

Such information is not considered personal information and may be shared without restriction for any lawful purpose.

4.7 With Your Consent

We may share your information with third parties when you:

Explicitly consent to such sharing
Direct us to share information (e.g., through third-party integrations)
Participate in features that inherently involve sharing (social features, public profiles, etc.)

4.8 Public Information

Information you choose to make public (such as public profile information, reviews, comments, forum posts) may be visible to other users and the public. Such information may be indexed by search engines and may be copied, redistributed, or used by others beyond our control.

5. DATA RETENTION

5.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

Account Information: Retained while your account is active and for a reasonable period afterward (typically 3-7 years) for legal, tax, audit, and business purposes
Transaction and Payment Data: Retained for at least 7 years to comply with financial record-keeping requirements, tax obligations, and to resolve disputes
Communication Records: Retained for 3-7 years depending on the nature of the communication and applicable legal requirements
Marketing Data: Retained until you unsubscribe or request deletion, then retained for a limited period (typically 12-24 months) to honor your opt-out preferences
Security and Fraud Data: Retained for extended periods (typically 7-10 years) to protect against repeat offenders and for investigation purposes
Legal Compliance Data: Retained as long as required by applicable laws, regulations, or legal proceedings
Backup Data: May be retained in backup systems for up to 90 days after deletion from active systems

5.2 Deletion and Anonymization

When information is no longer needed:

We will securely delete or destroy it
We may anonymize or de-identify information so it can no longer be associated with you
Anonymized data may be retained indefinitely for analytics and research

5.3 Legal Holds

We may retain information beyond standard retention periods when:

Subject to legal holds, litigation, investigations, or regulatory proceedings
Required by law or legal obligation
Necessary to enforce our rights or defend against claims
You have requested deletion but we have a legitimate basis to retain (e.g., outstanding disputes)

6. DATA SECURITY

6.1 Security Measures

We implement comprehensive technical, administrative, and physical security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction:

Technical Safeguards:

Encryption: Data encryption in transit using TLS 1.2 or higher; encryption at rest using AES-256 or equivalent standards
Access Controls: Role-based access controls (RBAC), multi-factor authentication (MFA), and principle of least privilege
Network Security: Firewalls, intrusion detection/prevention systems (IDS/IPS), network segmentation, and DDoS protection
Application Security: Secure coding practices, regular security testing, vulnerability scanning, and penetration testing
Data Loss Prevention: Backup and disaster recovery systems, redundancy, and business continuity planning
Monitoring: 24/7 security monitoring, logging, and incident response procedures
Secure Development: Security by design principles, secure software development lifecycle (SDLC)

Administrative Safeguards:

Employee Training: Regular security awareness training for all personnel
Access Management: Background checks, confidentiality agreements, need-to-know access policies
Vendor Management: Third-party risk assessments, contractual security obligations, vendor security audits
Incident Response: Documented incident response plans and procedures
Compliance Programs: Regular compliance assessments and audits
Data Governance: Data classification, retention policies, and privacy impact assessments

Physical Safeguards:

Data Centers: Use of certified, secure data centers with physical access controls, surveillance, and environmental protections
Device Security: Encrypted laptops, secure disposal of hardware, device management policies
Facility Access: Restricted access to facilities, visitor management, security personnel

6.2 Security Certifications and Compliance

We maintain compliance with industry-standard security frameworks, which may include:

SOC 2 Type II certification
ISO 27001 information security management
PCI DSS compliance for payment card data
GDPR compliance for EU data protection
HIPAA compliance (when applicable for health data)

6.3 Limitations of Security

While we implement robust security measures, no system is completely secure. We cannot guarantee:

Absolute security of your information
That unauthorized access, hacking, data loss, or breaches will never occur
Security of information transmitted over the internet or wireless networks

You are responsible for:

Maintaining the confidentiality of your account credentials
Using strong, unique passwords
Enabling available security features (e.g., two-factor authentication)
Notifying us immediately of any suspected unauthorized access

6.4 Data Breach Notification

In the event of a data breach that compromises your personal information:

We will investigate the incident promptly
We will notify affected users as required by applicable law
Notification will include information about the breach, affected data, steps we're taking, and recommended actions you should take
We will notify relevant regulatory authorities as legally required
We will take remedial action to prevent future incidents

To report a security vulnerability or incident, contact: security@automagic.com

7. YOUR RIGHTS AND CHOICES

7.1 Access and Portability

You have the right to:

Request access to the personal information we hold about you
Receive a copy of your personal information in a structured, commonly used, machine-readable format
Request transmission of your information to another service provider (data portability)

How to exercise: Submit a request to privacy@automagic.com with subject line "Access Request" and provide sufficient identifying information.

7.2 Correction and Update

You have the right to:

Request correction of inaccurate or incomplete personal information
Update your account information and preferences

How to exercise:

Log into your account and update information directly
Contact us at privacy@automagic.com with corrections

7.3 Deletion and Erasure

You have the right to request deletion of your personal information, subject to certain exceptions (legal obligations, ongoing transactions, fraud prevention, etc.).

How to exercise: Submit a deletion request to privacy@automagic.com with subject line "Deletion Request"

Limitations: We may retain certain information:

As required by law or legal proceedings
For legitimate business purposes (fraud prevention, dispute resolution)
In backup systems for a limited time
When anonymized or aggregated

7.4 Restriction and Objection

You have the right to:

Restrict or limit how we process your information
Object to processing based on legitimate interests
Object to direct marketing and profiling

How to exercise: Contact privacy@automagic.com with specific instructions

7.5 Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

How to exercise: Contact privacy@automagic.com or use opt-out mechanisms provided in communications

7.6 Marketing Communications

Email Marketing:

Unsubscribe using the link in any marketing email
Update preferences in your account settings
Contact unsubscribe@automagic.com

SMS/Text Marketing:

Reply "STOP" to any text message
Contact privacy@automagic.com

Phone Marketing:

Request to be added to our do-not-call list during any call
Contact privacy@automagic.com

Note: You cannot opt out of transactional or service-related communications (account notifications, security alerts, receipts, etc.)

7.7 Cookie Management

Browser Controls:

Most browsers allow you to refuse or accept cookies
You can delete existing cookies through browser settings
You can set preferences for third-party cookies

Our Cookie Preference Center:

Adjust cookie preferences through our cookie banner or settings page
Disable non-essential cookies while maintaining functionality

Third-Party Opt-Outs:

Google Analytics: https://tools.google.com/dlpage/gaoptout
Network Advertising Initiative: http://optout.networkadvertising.org
Digital Advertising Alliance: http://optout.aboutads.info

Mobile Device Settings:

iOS: Settings > Privacy > Advertising > Limit Ad Tracking
Android: Settings > Google > Ads > Opt out of Ads Personalization

Note: Disabling cookies may affect functionality and your experience with the Services.

7.8 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals websites you visit that you do not want your online activity tracked. Due to lack of industry consensus and technical standards, we currently do not respond to DNT signals. We will update our practices if and when standards emerge.

7.9 Automated Decision-Making and Profiling

You have the right to:

Be informed about automated decision-making that significantly affects you
Request human review of automated decisions
Object to profiling for certain purposes

We may use automated processing for:

Fraud detection and prevention
Personalization and recommendations
Advertising targeting
Risk assessment

Contact privacy@automagic.com if you have concerns about automated processing.

7.10 Response Timeframes

We will respond to rights requests within:

30 days as a general standard
45 days when additional time is needed (we will notify you)
Timeframes specified by applicable law (e.g., 1 month under GDPR)

We may require verification of your identity before processing requests to protect your privacy and prevent unauthorized access.

7.11 Verification Process

To verify your identity, we may request:

Email confirmation
Account credentials
Government-issued identification (in limited circumstances)
Answers to security questions
Other information necessary to confirm your identity

7.12 Authorized Agents

You may authorize an agent to exercise your rights on your behalf by:

Providing written authorization signed by you
Providing proof of power of attorney
Completing our authorized agent verification form

7.13 No Discrimination

We will not discriminate against you for exercising any of your privacy rights, including by:

Denying goods or services
Charging different prices or rates
Providing different quality of services
Suggesting you will receive different prices or quality of services

Exception: We may offer financial incentives permitted by law that result in different prices or service quality, provided you give prior opt-in consent.

8. INTERNATIONAL DATA TRANSFERS

8.1 Cross-Border Transfers

Automagic is based in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

These countries may have data protection laws that differ from those in your country of residence.

8.2 Legal Basis for Transfers

We transfer personal information internationally based on:

Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses for transfers from the EEA to countries without adequacy decisions.

Adequacy Decisions: We may transfer data to countries recognized by the European Commission as providing adequate protection.

Binding Corporate Rules: When applicable, we rely on approved Binding Corporate Rules for intra-group transfers.

Consent: In certain circumstances, we obtain your explicit consent for specific transfers.

Necessity for Contract Performance: Transfers necessary to perform our contract with you.

Supplementary Measures: We implement additional technical and organizational measures to protect data during international transfers.

8.3 Data Localization

Certain jurisdictions may require that personal data remain within specific geographic boundaries. Where applicable, we comply with such data localization requirements.

8.4 Privacy Shield (Note)

The EU-U.S. and Swiss-U.S. Privacy Shield frameworks have been invalidated by the Court of Justice of the European Union. We do not rely on Privacy Shield for international data transfers and instead use alternative mechanisms such as Standard Contractual Clauses.

9. CHILDREN'S PRIVACY

9.1 Age Restrictions

The Services are not intended for, and we do not knowingly collect personal information from, children under the age of:

13 years in the United States and most jurisdictions
16 years in the European Economic Area and certain other jurisdictions
Such other age as required by applicable law

9.2 Parental Consent

If we need to collect information from children for any reason, we will:

Obtain verifiable parental consent as required by law (e.g., COPPA in the U.S.)
Use the information only for the specific purpose disclosed
Implement appropriate safeguards

9.3 Discovery of Child Information

If we discover that we have inadvertently collected personal information from a child without appropriate consent:

We will delete the information as soon as reasonably possible
We will terminate any associated account
We will take steps to prevent future collection

9.4 Parental Rights

Parents and legal guardians have the right to:

Review personal information collected from their child
Request deletion of their child's information
Refuse further collection or use of their child's information

Contact us: If you believe we have collected information from a child, contact privacy@automagic.com immediately with subject line "Child Privacy Concern."

10. THIRD-PARTY SERVICES AND LINKS

10.1 Third-Party Websites and Services

The Services may contain links to third-party websites, applications, services, or content not owned or controlled by Automagic ("Third-Party Services").

We are not responsible for:

Privacy practices of Third-Party Services
Content or accuracy of Third-Party Services
Security of information you provide to Third-Party Services
Any damages or issues arising from Third-Party Services

10.2 Third-Party Privacy Policies

Third-Party Services have their own privacy policies and terms. We encourage you to read these policies before providing any information. This Privacy Policy does not apply to Third-Party Services.

10.3 Social Media Features

The Services may include social media features (e.g., Facebook Like button, Twitter share, LinkedIn share). These features may:

Collect your IP address and pages visited
Set cookies to enable functionality
Be hosted by third parties

Your interactions with these features are governed by the privacy policy of the company providing them.

10.4 Single Sign-On (SSO)

If you log in using third-party credentials (Google, Facebook, LinkedIn, etc.):

You authorize us to access certain profile information from that service
The third party may provide information about you to us
Your use is subject to the third party's privacy policy and terms

10.5 Integrations and APIs

If you use third-party integrations or connect third-party services to our platform:

You may grant us permission to access data from those services
Third parties may access certain information through our APIs
Such integrations are subject to additional terms and policies

11. CALIFORNIA PRIVACY RIGHTS

11.1 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

California residents have specific rights under the CCPA/CPRA:

Right to Know: You have the right to request disclosure of:

Categories of personal information collected
Categories of sources from which information is collected
Business or commercial purposes for collection
Categories of third parties with whom information is shared
Specific pieces of personal information collected

Right to Delete: You have the right to request deletion of personal information, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt-Out of Sale/Sharing: You have the right to opt out of:

Sale of personal information
Sharing for cross-context behavioral advertising

Right to Limit Use of Sensitive Personal Information: You have the right to limit use of sensitive personal information to certain specified purposes.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Right to Opt-Out of Automated Decision-Making: You have the right to opt out of automated decision-making technology, including profiling.

11.2 Categories of Personal Information Collected

We collect the following categories of personal information (as defined by CCPA):

Identifiers (name, email, address, IP address, etc.)
Commercial information (purchase history, transaction data)
Financial information (payment card details, bank account)
Internet or network activity (browsing history, search history)
Geolocation data
Audio, electronic, visual, or similar information (call recordings, photos)
Professional or employment information
Education information
Inferences about preferences and characteristics

11.3 Do We Sell or Share Personal Information?

Sale of Personal Information: We do not sell personal information as traditionally defined. However, under the broad CCPA definition of "sale," sharing data with advertising partners for targeted advertising may qualify as a sale.

Sharing for Cross-Context Behavioral Advertising: We share certain information (identifiers, browsing activity) with advertising partners that may constitute sharing under CCPA.

Your Opt-Out Rights:

Click "Do Not Sell or Share My Personal Information" link in our website footer
Visit our privacy preference center
Contact privacy@automagic.com
Call our toll-free number: 1-800-[NUMBER]

11.4 Retention Periods

We retain personal information for the periods described in Section 5 (Data Retention).

11.5 Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those specified in CCPA regulations without providing notice and an opportunity to limit such use.

11.6 How to Exercise Your Rights

Submit a Request:

Email: privacy@automagic.com with subject line "CCPA Request"
Phone: 1-800-[NUMBER]
Online form: [URL to privacy request form]
Mail: Automagic LLC, Attn: Privacy Rights, 102 Timberlake Drive, Royal, AR 71968

Verification: We will verify your identity before processing requests. You may need to provide:

Email confirmation
Account credentials
Government ID (in limited circumstances)

Authorized Agents: You may designate an authorized agent by providing written authorization or power of attorney.

Response Time: We will respond within 45 days, with possible 45-day extension if needed.

11.7 California Shine the Light

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

11.8 California Minors

California minors under 18 have the right to request removal of content they posted. To request removal, contact privacy@automagic.com with:

Specific identification of content
Verification of your age and California residency
Statement that you posted the content

Note: Removal may not ensure complete deletion (e.g., content may have been reposted by others).

12. NEVADA PRIVACY RIGHTS

12.1 Nevada Opt-Out Right

Nevada residents have the right to opt out of the sale of certain personal information to third parties who will resell it.

12.2 Our Sale Practices

We do not currently sell personal information as defined by Nevada law. However, you may still exercise your opt-out right.

12.3 How to Opt Out

To exercise your Nevada opt-out right:

Email: privacy@automagic.com with subject line "Nevada Opt-Out"
Include: Your name, email address, and Nevada residency confirmation

13. EUROPEAN ECONOMIC AREA (EEA), UNITED KINGDOM (UK), AND SWITZERLAND PRIVACY RIGHTS

13.1 General Data Protection Regulation (GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights under the GDPR and equivalent laws:

Right of Access: Obtain confirmation of whether we process your personal data and access to such data.

Right to Rectification: Request correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten"): Request deletion of personal data in certain circumstances.

Right to Restriction of Processing: Request restriction of processing in certain circumstances.

Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller.

Right to Object: Object to processing based on legitimate interests, direct marketing, or profiling.

Right to Withdraw Consent: Withdraw consent at any time (without affecting lawfulness of prior processing).

Right to Lodge a Complaint: File a complaint with your local supervisory authority.

Rights Related to Automated Decision-Making: Request human intervention in automated decisions that significantly affect you.

13.2 Legal Bases for Processing

We process personal data based on the following legal bases:

Consent: You have given clear consent for specific purposes.

Contract Performance: Processing is necessary to perform our contract with you or take pre-contractual steps.

Legal Obligation: Processing is necessary to comply with legal obligations.

Legitimate Interests: Processing is necessary for our legitimate interests (or those of third parties), provided your interests and rights do not override those interests. Legitimate interests include:

Fraud prevention and security
Network and information security
Analytics and improvement of Services
Marketing and business development
Internal administrative purposes

Vital Interests: Processing is necessary to protect vital interests of you or another person.

Public Interest: Processing is necessary for tasks carried out in the public interest.

13.3 Data Controller and Representative

Data Controller:
Automagic LLC
102 Timberlake Drive
Royal, AR 71968
United States

EEA/UK Representative (if applicable):
[Name and contact details if required under GDPR]

Data Protection Officer:
Email: dpo@automagic.com

13.4 International Transfers

Personal data may be transferred outside the EEA/UK. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and supplementary measures.

13.5 How to Exercise Rights

Email: privacy@automagic.com or dpo@automagic.com
Subject line: "GDPR Rights Request"

We will respond within one month, with possible two-month extension for complex requests.

13.6 Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority:

EEA: Find your authority at https://edpb.europa.eu/about-edpb/board/members_en
UK: Information Commissioner's Office (ICO) – https://ico.org.uk
Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

14. ADDITIONAL JURISDICTION-SPECIFIC RIGHTS

14.1 Australia

Australian residents have rights under the Privacy Act 1988, including access and correction rights. Contact privacy@automagic.com to exercise these rights.

14.2 Canada

Canadian residents, particularly those in Quebec and British Columbia, have privacy rights under provincial laws (PIPEDA, Quebec's Law 25, BC PIPA). Contact privacy@automagic.com for assistance.

14.3 Brazil

Brazilian residents have rights under Lei Geral de Proteção de Dados (LGPD), including access, correction, deletion, and portability. Contact privacy@automagic.com.

14.4 Other Jurisdictions

If you reside in a jurisdiction not specifically mentioned, you may have additional privacy rights under local law. Contact privacy@automagic.com to inquire about rights available to you.

15. CHANGES TO THIS PRIVACY POLICY

15.1 Right to Modify

We reserve the right to modify, update, or replace this Privacy Policy at any time at our sole discretion.

15.2 Notice of Changes

When we make changes, we will:

Update the "Last Updated" date at the top of this Privacy Policy
Post the revised Privacy Policy on this page
Provide notice of material changes through:
- Email notification to your registered email address
- Prominent notice on the Services (banner, pop-up, etc.)
- In-app notifications
- Other appropriate communication methods

15.3 Material Changes

For material changes that significantly affect your rights or how we process your information, we may:

Request your renewed consent where required by law
Provide an opportunity to opt out of new practices
Allow a grace period before changes take effect

15.4 Continued Use

Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you must discontinue use of the Services.

15.5 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15.6 Prior Versions

We may maintain prior versions of this Privacy Policy in an archive. Contact privacy@automagic.com to request previous versions.

16. CONTACT INFORMATION

16.1 Privacy Inquiries

For questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, contact us:

General Privacy Inquiries:
Email: privacy@automagic.com
Subject Line: "Privacy Inquiry"

Data Protection Officer (GDPR):
Email: dpo@automagic.com
Subject Line: "DPO Inquiry"

Rights Requests:
Email: privacy@automagic.com
Subject Line: "[Your Jurisdiction] Rights Request" (e.g., "CCPA Rights Request")

Mailing Address:
Automagic LLC
Attn: Privacy Department
102 Timberlake Drive
Royal, AR 71968
United States

Phone (California Residents):
Toll-Free: 1-800-[NUMBER]
Hours: Monday-Friday, 9 AM - 5 PM PT

Security Concerns:
Email: security@automagic.com
Subject Line: "Security Issue"

16.2 Response Time

We strive to respond to all privacy inquiries within:

30 days for general inquiries
Timeframes specified by applicable law for rights requests (typically 30-45 days)

16.3 Supervisory Authorities

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or supervisory authority.

17. ADDITIONAL PRIVACY INFORMATION

17.1 Automated Decision-Making

We may use automated decision-making systems for:

Fraud detection and risk assessment
Personalized recommendations and content
Ad targeting and optimization
Credit decisioning (if applicable)
Customer segmentation

You have the right to:

Be informed about the logic, significance, and consequences
Request human review of automated decisions
Challenge decisions that significantly affect you

17.2 Profiling

We may create profiles about you based on your information and behavior to:

Personalize your experience
Deliver relevant content and recommendations
Target advertising
Assess credit risk or fraud risk

You can object to profiling for certain purposes, particularly marketing profiling.

17.3 Biometric Information

We do not generally collect or process biometric information (fingerprints, facial recognition, voiceprints) unless:

Specifically required for Services
You explicitly consent
Required by law with appropriate legal basis

If we collect biometric information, we will:

Provide clear notice and obtain consent
Implement heightened security measures
Limit retention and use
Comply with applicable biometric privacy laws (e.g., Illinois BIPA, Texas CUBI)

17.4 Health Information

We do not generally collect health information unless necessary for specific Services. If we do collect health data:

We will obtain explicit consent
We will comply with HIPAA and applicable health privacy laws
We will implement enhanced security measures
We will use information only for disclosed purposes

17.5 Financial Information Security

Payment card information is processed in compliance with PCI DSS standards. We do not store complete payment card numbers on our servers. Payment processing is handled by certified third-party processors.

17.6 Video Surveillance and Recording

If we use video surveillance or recording in our facilities:

We will post appropriate notice
Recordings are used for security and safety purposes
Access is limited to authorized personnel
Retention follows our data retention policies

17.7 AI and Machine Learning

We may use artificial intelligence and machine learning technologies to:

Improve Services and user experience
Detect fraud and abuse
Generate recommendations and personalization
Automate processes
Analyze data and derive insights

Your information may be used to train AI models. Trained models may retain patterns but are designed not to memorize specific personal information.

17.8 Blockchain and Distributed Ledger Technology

If Services involve blockchain or distributed ledger technology:

Information recorded on public blockchains may be immutable and publicly visible
We cannot delete information recorded on decentralized systems
Additional privacy considerations apply to blockchain transactions
Specific terms will be provided for blockchain-based Services

18. CONSENT AND ACKNOWLEDGMENT

By using the Services, you:

Acknowledge that you have read and understood this Privacy Policy
Consent to the collection, use, and disclosure of your information as described
Agree to our use of cookies and tracking technologies
Consent to international data transfers as described
Acknowledge your rights and how to exercise them
Understand that you can withdraw consent at any time (subject to legal limitations)

If you do not agree with this Privacy Policy, you must not access or use the Services.

Last Updated: December 25, 2025
Version: 2.0

This Privacy Policy is effective as of the date stated above. Your continued use of the Services constitutes acceptance of this Privacy Policy.