Magnetic Product Privacy Policy

Version: 2026-11-04
Last Updated: November 4, 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Magnetic Ventures LLC ("we," "us" or "our") handles personal information for the products and related websites, applications, APIs, MCP servers and services that link to it (the "Service"). Terms not defined here have the meanings in the Magnetic Product Terms of Service linked with the Service.

For information in an organization's workspace, we generally process on that organization's behalf and instructions. Its privacy notices also apply. We separately handle limited account, business contact, billing and compliance records for our own relationship administration and legal obligations. This policy describes our practices; it does not expand permissions granted by a customer agreement.

2. Information we collect

The information collected depends on the Product, features and integrations you use. Categories may include:

2.1 Information you or your organization provide

Account and profile information: name, email address, password (stored in hashed form), organization, team, role and permissions, and profile details you choose to add. Your organization's administrators may provide your name and email address to invite you.
Your Content: prompts, instructions, workflows, documents, files, comments, configurations and other material you submit, and the AI inputs and Output generated through the Service. Your Content may include personal information about you or other people.
Feedback and communications: messages, support requests, survey and interview responses, bug reports, and demo and access requests.
Research sessions: recordings, transcripts and notes of calls, demos and usability sessions, after notice and any required participant consent, including when we use AI note-taking tools.

2.2 Information we collect automatically

Usage Data: features used, actions taken, pages and screens viewed, timestamps, session duration, errors, performance data and diagnostic logs.
Device and connection data: IP address, approximate location derived from IP address, browser and operating system type, device identifiers, and referring URLs.
AI client and integration data: identifiers and metadata for the AI clients, MCP clients, API keys and connected applications you authorize, and logs of the requests they make to the Service.
Cookies and similar technologies: we use cookies and local storage that are necessary to sign you in, keep your session secure and remember preferences, and, where enabled, analytics tools help us understand product usage. See Section 9.

2.3 Information from third parties

Sign-in providers: if you sign in with Google, Microsoft or another identity provider, we receive information such as your name, email address, account and tenant identifiers, and profile details permitted by your settings with that provider.
Connected services: if you or your organization connect a third-party service (for example, an email, file storage, productivity or business system), we receive the information you authorize the Service to access.
Security and anti-abuse providers: signals used to detect bots, fraud and abuse.

3. How we use information

We use the information described above to:

Provide the Service: create and manage accounts, authenticate users, operate workspaces, store and deliver Your Content, run AI features, agents and workflows, and connect the Service to the AI clients and Third-Party Services you choose.
Secure the Service: monitor for and investigate security incidents, abuse, fraud and violations of our Terms, and enforce access controls.
Support you and communicate with you: respond to requests, send verification emails, invitations, service announcements, beta program updates, release notes and policy changes, and, where permitted, information about our other products. You can opt out of marketing emails at any time.
Product improvement: diagnose problems and learn general, nonconfidential insights about usage and needed capabilities. This does not permit copying a customer's specific workflows for others or using private customer content to train general-purpose models. Personnel access is limited to authorized operation, support and security purposes.
Create aggregated or de-identified information where legally permitted, with reasonable safeguards against identifying an individual or organization. We maintain it in de-identified form and do not re-identify it except for legally permitted testing of the process. Recipients must agree to equivalent restrictions. This does not authorize disclosure of confidential methods or customer-specific workflows.
Comply with law and protect rights: meet legal obligations, respond to lawful requests, and protect the rights, property and safety of Magnetic Ventures, our users and others.
Other agreed purposes: only where separately authorized and lawful, consistently with the customer agreement and any required individual notice or consent.

4. AI processing

AI features may send Your Content and related context to model providers and receive Output. Providers we select process that information under binding terms consistent with our customer obligations, including restrictions against using it to train general-purpose models. We do not authorize such training merely because you use an AI feature. AI Output may be inaccurate; users must review it and the actions they authorize.

If your organization connects its own AI assistant or other external service, including through MCP, we send the content it authorizes to that service. That provider handles the information under your organization's agreement and settings. Check those settings before connecting confidential content. These independent integrations differ from providers we select to process data for us.

We do not sell personal information we process on behalf of a customer or share it for cross-context behavioral advertising.

Advertising partners: on public product and acquisition pages, we may use advertising pixels to measure campaigns and reach people who visited those pages. These pixels can send partners such as Meta browser identifiers, page visits and actions such as a demo request. We keep advertising pixels out of signed-in workspaces and do not send customer workspace data to advertising partners.
Your organization: administrators and authorized members of your organization's workspace can access content and account information within that workspace, according to the permissions the organization configures.
Service providers: companies that process information on our behalf, such as cloud hosting and database providers, email delivery, product analytics and error monitoring, bot and abuse protection, authentication, AI model providers, meeting recording and transcription, and customer support and communications tools. Their binding terms must protect the information and limit processing consistently with our customer obligations. Standard provider terms and data processing agreements can supply those protections. We identify providers and notify customers of changes as required by applicable law or an agreed data processing addendum.
Third-Party Services you connect: AI clients, identity providers and other applications you or your organization authorize.
Affiliates: companies under common control, only for permitted purposes and subject to the same applicable protections.
Business transfers: information may transfer with a merger, acquisition, reorganization or sale of the relevant business, subject to continuing applicable protections and legal requirements.
Legal and safety: when we believe disclosure is required by law, subpoena or other legal process, or necessary to protect the rights, property or safety of Magnetic Ventures, our users or others.
With your consent or at your direction.
Aggregated or de-identified information: subject to the protections in Section 3.

6. Retention and deletion

We retain workspace information as needed to provide the Service and follow lawful customer instructions. An authorized workspace administrator can email legal@magneticventures.xyz to request a copy of available workspace content or ask us to delete it. We verify the request and fulfill it subject to applicable law. Individuals may contact us directly as described in Section 8.

Limited account, security and legal records may be kept as long as needed for a permitted purpose. Protected backup copies expire through normal rotation. Required deletions apply when a backup is restored or otherwise put back into use.

7. Security

We use reasonable safeguards, including encryption in transit and access controls. No system is completely secure. Our Terms describe incident notification and the sensitive data that users should keep out of the Service.

8. Your choices and rights

Account information: you can update certain profile information in the Service. If your account is managed by your organization, some changes may need to go through your organization's administrator.
Access, correction and deletion: you can ask us to access, correct or delete personal information we hold about you by contacting us at the address below. If your information is part of your organization's workspace, we may refer your request to your organization or need its instructions. We may need to verify your identity and authority and will respond or assist the organization within applicable legal deadlines. We may decline or limit a request only as law permits.
Marketing emails: you can unsubscribe using the link in any marketing email. We may still send you service and account messages.
Location: the Service is offered for use in the United States. Information is stored and processed in the United States, and may also be processed in other countries where our service providers operate.

9. Cookies, analytics and Do Not Track

We use strictly necessary cookies to keep you signed in and secure your session; the Service will not work without them. Where enabled, product analytics and error-monitoring tools help us understand usage and fix problems. You can control cookies through your browser settings, though blocking some cookies may break the Service. Where required, we obtain consent before using advertising pixels and honor applicable opt-outs, including Global Privacy Control. We do not respond to the separate browser "Do Not Track" setting.

10. Children

The Service is intended for business users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We will post updates with a new version and date and notify users of material changes before they take effect. A policy update does not expand our contractual permission to process customer information. Where a new use requires agreement or consent, we will obtain it separately.

12. Contact us

For questions about this policy or to make a privacy request, contact:

Magnetic Ventures LLC
7901 4th St. N #18029
St. Petersburg, Florida 33702
legal@magneticventures.xyz