Privacy Policy

1. Data controller

XIONGLIANGLIANG, an individual operator established in the People's Republic of China, is the controller of personal information processed for Magggic. Business address: Room 1703, Building 2C, Hechengjiaye Mingyuan, Yangmei Road, Bantian Sub‑district, Longgang District, Shenzhen City, Guangdong Province, P.R.China. Privacy contact: support@magggic.com.

This policy applies to https://magggic.com, Magggic accounts, AI image generation, public galleries, subscriptions, credit packs, support, and related services.

2. Information we collect

• Account and identity data: name, email address, profile image, authentication identifiers, verification status, language, role, and account settings.
• Creation data: prompts, reference images, generation settings, selected model, generated outputs, favorites, publication choices, categories, tags, and moderation records.
• Billing data: billing email and country, transaction and subscription identifiers, plan or credit-pack selection, USD amount, tax, payment status, refunds, disputes, credits granted or reversed, and payment-provider event records. Magggic does not receive or store your full card number or card security code.
• Technical and usage data: IP address, browser and device details, session identifiers, pages and controls used, timestamps, generation performance, error records, security logs, and fraud-prevention signals.
• Support data: messages, attachments, transaction details, and other information you provide when requesting help, cancellation, a refund, or a privacy response.

3. How and why we use information

• Perform our contract: create and secure accounts, process generations, store assets, publish content at your request, deliver credits, process billing, and provide support.
• Legitimate interests: maintain reliability, measure product performance, prevent abuse and fraud, moderate public content, investigate incidents, and improve usability where those interests do not override your rights.
• Consent: load optional analytics technologies and process any activity that applicable law requires you to opt into. You may withdraw consent at any time.
• Legal obligations: maintain payment and tax records, respond to lawful requests, enforce rights, handle disputes, and meet security or consumer-protection duties.

4. Cookies and analytics

Necessary cookies and similar storage keep you signed in, protect sessions, remember language, maintain security, and store your cookie choice. They are required for requested product functions.

Optional analytics are optional. Magggic loads them only after you choose “Allow” in the cookie notice. They may collect device, browser, approximate location, pages visited, interactions, and session diagnostics. We do not use advertising cookies. You can reopen Cookie settings from the footer and decline future analytics collection at any time.

• Google Privacy Policy
• Microsoft Privacy Statement

5. Providers and disclosures

• Waffo Pancake and its payment partners process checkout, payment methods, recurring charges, taxes, refunds, and disputes. Card details are submitted directly to the payment provider, not to Magggic.
• Waffo Prompt Sift processes generation prompts before task creation and returns a safety decision and provider log identifier. Magggic does not send reference images to Prompt Sift.
• Google may process authentication data when you choose Google sign-in.
• Neon provides database infrastructure; Cloudflare provides image storage and delivery; Resend provides transactional email delivery.
• APIMart and the selected model provider, including providers associated with OpenAI, Google, or ByteDance models, process prompts, reference images, and generation parameters needed to return the requested output.
• We may disclose information to professional advisers, authorities, or counterparties when required by law, needed to protect rights and safety, or necessary for a business transaction. We do not sell personal information or share it for cross-context behavioral advertising.

6. AI processing and public content

Private creations are not displayed publicly unless you submit or publish them. Published creations may show the image, prompt, model and generation details, categories, profile information, and engagement data. Removing a public post stops future public display but does not remove copies already saved by others.

Magggic does not use private prompts or reference images to train a Magggic model without separate consent. Third-party AI providers process submitted data under their own terms and privacy practices. Do not upload confidential, highly sensitive, or third-party personal information unless you have authority to do so.

• See the current model mapping and safety flow.

7. Retention

• Account data and private creation data are kept while your account is active. After a verified deletion request, active copies are deleted or anonymized within 30 days, with residual encrypted backups removed on their normal cycle within 90 days unless law requires longer retention.
• Public creations are kept until you withdraw them, they are removed under our rules, or the account is deleted, subject to the backup period above.
• Transaction, subscription, refund, tax, and dispute records are kept for 7 years after the relevant transaction or for any longer period required by law.
• Support correspondence is normally kept for 24 months after the request closes. Security, moderation, and operational logs are normally kept for 12 months, unless an incident or legal claim requires longer retention.
• Optional analytics data is retained according to the configured provider settings and is limited by Magggic to no more than 14 months where configuration is available.

8. Security and incident response

We use access controls, encrypted transport, provider security controls, logging, restricted administrative access, and other reasonable safeguards appropriate to the service. No internet service can guarantee absolute security.

If a personal-data breach creates a legally reportable risk, we will notify the relevant authority and affected users without undue delay and within 72 hours where that deadline applies, unless law allows otherwise.

9. International transfers

Magggic is operated from China, while service providers may process data in the United States, Singapore, the European Economic Area, or other locations. Privacy laws in those places may differ from the law where you live. Where required, we use legally recognized transfer safeguards, which may include contractual protections, data-processing agreements, and standard contractual clauses.

10. Your privacy rights

Depending on your location, you may ask to access, correct, delete, restrict, or obtain a portable copy of your personal information; object to certain processing; withdraw consent; or appeal a privacy decision. Send a request from your account email to support@magggic.com. We may verify identity before acting and normally respond within 30 days, or within the period required by applicable law.

You may also complain to the privacy or data-protection authority in your country or region. Withdrawing analytics consent does not affect processing that occurred before withdrawal. Magggic does not make decisions producing legal or similarly significant effects solely through automated processing.

11. Children

Magggic is intended only for people aged 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child has used the service so we can investigate and delete the information where appropriate.

12. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. We will post the revised policy with a new effective date and provide at least 15 days' notice for material changes where reasonably possible. Urgent security or legal changes may take effect sooner.

Contact us

For questions about this policy, personal-data processing, or a rights request, email support@magggic.com.