Privacy Policy

• •Account data — your name, email address, and authentication credentials (passwords are hashed; we never see them in plaintext).
• •Workspace content — the data you choose to put into Managic: transactions, tasks, habits, documents metadata, notes, and similar.
• •Billing data — subscription status and billing metadata. Card numbers are handled by our payment provider (Lemon Squeezy) and are never stored on Managic servers.
• •Usage and device data — basic logs, IP address, browser/device type, and product-analytics events (for example, which module you opened) used to keep the Service secure and to improve it.

• •to provide, maintain, and secure the Service and your account;
• •to process subscriptions and payments;
• •to send you service and transactional messages (for example, trial-ending and payment-failure notices);
• •to respond to support requests;
• •to understand product usage in aggregate and improve the Service;
• •to comply with legal obligations and enforce our Terms.

Where applicable data-protection law (such as the GDPR) applies, we rely on: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to secure and improve the Service); your consent (for optional features such as AI processing and non-essential analytics); and legal obligation (for tax and accounting records).

AI features are off by default and opt-in per module — an owner or admin must enable them for a workspace. When enabled and used, only the specific content needed to fulfil your request (for example, a brand profile and date range to generate content ideas) is sent to our AI provider. We do not use your content to train third-party AI models, and our providers are contractually bound not to train on it for their own purposes.

We do not sell your personal data. We share it only with service providers ("subprocessors") who help us run the Service, under contracts that require them to protect it. These currently include:

• •Supabase — database, authentication, and file storage;
• •Railway and Vercel — application hosting;
• •Lemon Squeezy — payment processing;
• •Resend — transactional email delivery;
• •our AI provider (Anthropic and/or an OpenAI-compatible gateway such as OpenRouter) — only for opt-in AI features;
• •error-monitoring and product-analytics providers used to keep the Service reliable.

We may also disclose data where required by law, or to protect the rights, safety, and security of Managic and its users.

Our providers may process data in countries other than yours. Where personal data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law.

We keep your data for as long as your account is active. Deleting a record within the app performs a soft delete first; you can request full deletion of your account and associated personal data by contacting us. Some data may be retained where necessary to comply with legal, tax, or accounting obligations.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can export your workspace content at any time from within the app. To exercise other rights, contact us — we will respond within the time required by law.

If you are in the EEA or UK and believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority. We ask that you contact us first at privacy@managic.app so we can try to resolve it.

We protect your data with encryption in transit (TLS), hashed passwords (Argon2id), database-level tenant isolation, role-based access control within workspaces, and access limited to what is needed to operate the Service. No system is perfectly secure, but we work continuously to protect your data and will notify you of a breach affecting your personal data as required by law.

The Service is not directed to children under 16 (or the age of digital consent in your country) and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

For any privacy question or request, contact us at privacy@managic.app. We may update this Policy from time to time; if we make material changes we will notify you before they take effect and update the date at the top of this page.