Privacy Policy

• To create and manage your account and deliver the services you signed up for.
• To generate JSON-LD schema markup and AI-written blog articles for your business.
• To process payments and manage your subscription through Stripe.
• To send transactional emails (sign-up confirmation, password reset, billing receipts).
• To respond to support requests and contact form submissions.
• To analyze usage patterns and improve the product — no personally identifiable data is included in aggregate analytics.
• To detect and prevent fraud, abuse, or unauthorized access.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your business data to train AI models beyond what is required for the services you have activated.

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are:

• Contract performance: processing necessary to deliver the services you have purchased.
• Legitimate interests: fraud prevention, security monitoring, product improvement, and analytics — balanced against your rights.
• Legal obligation: where required by applicable law.
• Consent: for marketing communications, where applicable (you can withdraw at any time).

• Account data: retained for the duration of your account. If you delete your account, we remove your personal data within 30 days, except where longer retention is required by law.
• Business data and generated content: retained while your account is active. Deleted within 30 days of account closure.
• Log files: retained for up to 90 days for security and debugging purposes.
• Payment records: retained for 7 years to comply with financial record-keeping laws.

We use the following types of cookies and similar technologies:

• Essential cookies: required for authentication and session management (Supabase auth tokens). You cannot opt out of these while using the app.
• Analytics cookies: if you have consented, we use Google Analytics 4 to collect aggregate, anonymized data about how visitors use the site. This includes pages viewed, session duration, and referral source. No personally identifiable information is collected.
• Marketing cookies: if you have consented, Google Tag Manager may load additional marketing tracking scripts for advertising measurement.

You can control cookie preferences through your browser settings. Disabling cookies may limit certain site functionality.

We share data only in the following circumstances:

• Service providers: Supabase (auth/database), Stripe (payments), Resend (email), Google (AI generation), Vercel (hosting). Each operates under their own privacy policies and data processing agreements.
• Legal requirements: if required by a valid court order, subpoena, or other legal process, or to protect the rights and safety of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before data is transferred and becomes subject to a different privacy policy.

We implement industry-standard security measures including:

• Encrypted data transmission (TLS/HTTPS) for all communications.
• Database-level row-level security (RLS) policies ensuring each user can only access their own data.
• Hashed password storage managed by Supabase Auth.
• Regular security reviews of API endpoints and authentication flows.

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users of any confirmed data breach as required by applicable law.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data (subject to legal retention requirements).
• Portability: request your data in a structured, machine-readable format.
• Restriction: request that we restrict processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you can withdraw at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@aisearchmagiq.com. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale of personal information. We do not sell personal information. To submit a verifiable consumer request, contact us at the email below.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external sites you visit.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated via email or a notice on the website. Continued use of the services after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions, to exercise your rights, or to report a concern: