Privacy Policy

Key Points

• MagicPub uses account, authentication, research, billing, usage, and support information to provide and secure the service.
• Google Sign-In data is used for authentication and account management, not advertising, data sale, or generalized AI model training.
• Research inputs and generated publications may be processed by service providers such as Supabase, Stripe, AI model providers, literature-search providers, and hosting infrastructure.
• You can request access, correction, export, or deletion of your personal information by contacting MagicPub.

1. Scope and Controller

This Privacy Policy explains how MagicPub ("MagicPub", "we", "us", or "our") collects, uses, discloses, stores, and protects information when you visit magicpub.ai, create an account, use MagicPub's AI-assisted research and publication tools, communicate with us, or purchase a subscription.

This policy should be read together with the Terms of Service and any separate written agreement, order form, data-processing addendum, business associate agreement, or product-specific notice that applies to your use of MagicPub. If a separate written agreement conflicts with this policy, that agreement controls for the parties and subject matter it covers.

2. Information We Collect

We collect information directly from you, automatically from your use of the service, and from service providers that help us operate MagicPub.

• Account and authentication information, such as name, email address, password authentication status, Google Sign-In identifiers, basic Google profile information, account settings, subscription tier, referral metadata, and security/session information.
• Research and publication content, such as prompts, manuscripts, uploaded documents, study details, citation requests, generated drafts, edits, exports, publication metadata, attachment metadata, and related workflow data that you choose to submit or create.
• Billing and subscription information, such as plan selection, subscription status, invoice metadata, promotion or referral information, payment events, and Stripe customer identifiers. Stripe processes payment card details; MagicPub does not store full card numbers.
• Usage, device, and security information, such as IP address, browser and device type, pages or features used, timestamps, request identifiers, error logs, performance data, authentication events, and fraud or abuse signals.
• Communications and support information, such as emails, feedback, bug reports, support requests, security reports, and other messages you send to us.

3. Google Sign-In and Google API Data

If you choose to sign in with Google, Google and Supabase may provide MagicPub with basic account information needed to authenticate you, such as your email address, name, profile image, Google account identifier, OAuth tokens or session metadata handled by the authentication provider, and related sign-in status information.

We use Google Sign-In information to create and secure your account, maintain your session, prevent abuse, provide support, communicate with you about the service, and connect your account to the publications and subscriptions you manage in MagicPub.

MagicPub's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use Google user data for advertising, transfer Google user data to advertising platforms or data brokers, use Google user data to determine creditworthiness, or use Google account data to train generalized AI models.

4. How We Use Information

We use information for the purposes described below and as otherwise disclosed when you provide the information.

• Provide, operate, maintain, personalize, and improve MagicPub and its publication-generation workflows.
• Authenticate users, manage accounts, enforce access controls, administer subscriptions, process payments, apply promotions, and provide customer support.
• Generate, edit, cite, format, store, retrieve, export, and troubleshoot publications and related research outputs requested by users.
• Monitor reliability, debug errors, prevent fraud or abuse, protect account security, enforce legal terms, and comply with applicable law.
• Analyze aggregated or de-identified usage, performance, security, and product data to improve features and service quality.
• Send service-related messages, account notices, billing notices, security alerts, support replies, and legally required communications.

5. Research Content, AI Providers, and Literature Services

MagicPub is designed for research and publication workflows. The content you submit may include scientific, clinical, operational, institutional, or other sensitive material. You are responsible for ensuring that you have the rights, permissions, consents, authorizations, and lawful bases needed to submit that content to MagicPub and to permit processing as described in this policy and the Terms of Service.

To provide the service, MagicPub may transmit prompts, uploaded materials, generated text, citation requests, publication metadata, and related context to third-party providers, including AI model providers such as OpenAI and Anthropic, literature-search providers such as Exa, citation and database services such as PubMed, NCBI, and Crossref, hosting providers, logging tools, and infrastructure vendors. These providers process information to help generate, retrieve, cite, store, secure, or troubleshoot requested outputs.

Do not submit protected health information, patient-identifiable data, regulated clinical data, confidential third-party data, export-controlled data, or other restricted information unless you are authorized to do so and a separate written agreement with MagicPub covers the required privacy, security, and compliance terms, including a business associate agreement if legally required.

6. Legal Bases for Processing

Where laws such as the EU GDPR or UK GDPR apply, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of rights, safety, and security. Our legitimate interests include operating and improving MagicPub, securing the service, preventing misuse, supporting users, and developing features in a way that does not override applicable privacy rights.

If we rely on consent, you may withdraw consent where legally available. Withdrawal will not affect processing that occurred before withdrawal or processing based on another lawful basis.

7. How We Share Information

We disclose information only as needed to provide and protect MagicPub, comply with law, and operate our business. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

• Service providers and subprocessors, including Supabase for authentication and database services, Stripe for payments and billing, cloud hosting and infrastructure providers, OpenAI and Anthropic for AI model processing, Exa and citation/database providers for literature and citation workflows, email or support tools, analytics or logging tools, and security vendors.
• Professional advisors, such as lawyers, accountants, auditors, insurers, and consultants, where reasonably necessary for business, legal, compliance, security, or risk-management purposes.
• Legal, safety, and enforcement recipients, such as courts, regulators, law enforcement, counterparties, or affected users when required by law or reasonably necessary to protect rights, safety, security, or the integrity of MagicPub.
• Business transaction recipients if MagicPub is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.
• Other recipients at your direction, such as when you export, publish, submit, download, share, or otherwise choose to disclose outputs or account-related information.

8. Cookies and Similar Technologies

MagicPub uses cookies, local storage, and similar technologies that are necessary for authentication, session management, security, fraud prevention, preferences, and core service functionality. We do not use third-party advertising cookies or tracking pixels for behavioral advertising. If we add optional analytics or marketing technologies later, we will update this policy and provide any consent or opt-out controls required by law.

9. Data Retention

We retain information for as long as reasonably necessary to provide MagicPub, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain backups, and protect security. Generated publications and related account data are generally retained while your account remains active unless you delete them or request deletion. Billing, tax, security, and legal records may be retained longer where required or permitted by law.

When deletion is requested and no exception applies, we will delete or de-identify applicable personal information within a reasonable period. Residual copies may remain temporarily in backups, logs, archives, or disaster-recovery systems until they are overwritten or no longer needed.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include HTTPS for data in transit, access controls, authentication, provider security controls, logging, monitoring, and operational procedures. No online service can guarantee absolute security, and you are responsible for protecting your credentials and devices.

11. International Transfers

MagicPub is operated from the United States and may use service providers located in the United States and other countries. If you access MagicPub from outside the United States, your information may be transferred to, stored in, or processed in countries that may not provide the same level of data protection as your jurisdiction. Where required, we rely on appropriate safeguards such as contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

12. Your Privacy Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information. You may also have the right to opt out of certain processing or lodge a complaint with a data protection authority. To make a request, contact us at support@magicpub.ai. We may need to verify your identity before fulfilling a request.

You can also control some information directly in the product, including by updating account information, exporting generated publications, deleting content where the interface allows it, unsubscribing from optional communications, or managing billing through the subscription portal.

13. California Privacy Notice

If California privacy law applies, the categories of personal information we may collect include identifiers, customer records information, commercial information, internet or electronic network activity, professional or research-related information you provide, inferences from product usage, and sensitive personal information only to the extent you choose to submit it or it is needed for account security. We collect and use these categories for the business and commercial purposes described in this policy.

We do not sell personal information and do not share personal information for cross-context behavioral advertising. California residents may request to know, access, correct, delete, or receive information about applicable personal information practices and may not be discriminated against for exercising privacy rights.

14. Children

MagicPub is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to MagicPub, contact us so we can take appropriate action.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will use reasonable efforts to notify users, such as by updating the effective date, posting an in-product notice, or sending an email to the address associated with the account. Continued use of MagicPub after an updated policy becomes effective means the updated policy applies to your use of the service, except where law requires a different form of notice or consent.

16. Contact

Questions, privacy requests, account deletion requests, security reports, and support requests may be sent to support@magicpub.ai. Please include enough information for us to understand and respond to your request, but do not send unnecessary sensitive information by email.