Privacy policy

This explains what MagizAI does with personal data: yours as a customer, and that of the people who talk to a chat widget you run.

Two different roles

Which role we are in decides who is responsible for what.

• Your account with us. Your name, email, company and billing details. We decide how these are used, so we are the controller.
• Your visitors' conversations. What people type into your widget, and anything you collect from them. You decide why that is collected, so you are the controller and we process it on your behalf, under your instructions.

What we collect about you

• Account: name, email address, password (stored hashed, never readable), company name, and the language and country you use the product in.
• Billing: your plan, invoices, payment status and the last four digits and expiry of a card. We never see or store a full card number. Payments are handled by Stripe, PayPal or Razorpay.
• Usage: sign-in times, IP address, browser, the pages you open in the app, and errors your session produced.
• Support: anything you send us by email or through our own chat.

What we process for you

When someone uses a widget you have installed, we handle whatever passes through it. That usually includes the messages they type, a name, email or phone number if they give one, the page they were on, their browser and their IP address, and a cookie that keeps one conversation together across page loads.

We do not decide what your visitors are asked for. You do, when you configure your assistant. Please do not use MagizAI to collect card numbers, passwords, government identifiers or health records through a chat window.

Why we are allowed to hold it

• To provide the service you signed up for (performance of a contract).
• To keep it working and secure, including spam and abuse prevention, error logs and backups (legitimate interests).
• To meet legal duties, mainly tax and accounting records.
• With your consent, for marketing emails, which every message lets you stop.

Artificial intelligence

Answers are generated by an AI model, and producing one means sending the conversation and the relevant part of your knowledge base to a model provider.

• On BYOK you supply your own API key, and your data goes to that provider under your agreement with them.
• On a managed plan we send it under our agreement with the provider.

We do not use your conversations, or your visitors' conversations, to train any AI model, and we choose providers on terms that say the same.

Who else sees it

We share data only with the suppliers needed to run the service: hosting, AI model providers, payment processors, email delivery and error reporting. Each is bound by contract to use it only to provide their service to us. We do not sell personal data, and we do not share it for advertising.

We will disclose data if the law requires it, and we will tell you unless we are forbidden to.

Where it is held

Our servers are in Singapore, run by OVHcloud. Some suppliers, including AI providers and payment processors, are in the United States, and transfers to them are made under Standard Contractual Clauses or an equivalent safeguard. Every supplier, and where it is, is on our sub-processors page.

How long we keep it

• Conversations: for as long as your workspace exists, so your inbox and reporting work. You can delete a conversation at any time, and deleting it removes it.
• Your account: while it is open. Close it and we delete the workspace and its conversations within 30 days.
• Invoices: kept for as long as tax law requires, normally six years, even after an account closes.
• Backups: overwritten on a rolling basis within 30 days.

Your rights

You can ask for a copy of your data, correct it, delete it, object to how we use it, or take it elsewhere. The app does the first and the last for you: Settings, then Privacy, exports everything and can erase a visitor's record.

For anything else, email hi@magiz.ai. We answer within 30 days. If you are unhappy with our answer you can complain to your national data protection authority.

If you are a visitor who talked to a widget on somebody's website, ask that business first: the conversation is theirs, and we act on their instructions. Write to us and we will pass it on.

Cookies

We use the cookies the product needs to work, and no advertising cookies. The cookie policy lists them.

Children

MagizAI is a business product and is not for children under 16. We do not knowingly collect their data. If you believe a child's data has reached us through a widget, tell us and we will remove it.

Security

Traffic is encrypted in transit. Passwords are hashed. API keys and connector credentials are encrypted before they are stored. Access to production is limited to the people who need it. No system is perfectly secure, and we will tell you and the relevant authority without undue delay if a breach affects you.

Changes

We will post any change here and, if it matters to you, email you before it takes effect.

Contact

MagizAI, Watergam, Baramulla, Jammu and Kashmir, India. hi@magiz.ai