Privacy Policy

1. Introduction

Magicpill Labs LLC ("Magicpill Labs," "MPL," "we," "our," or "us") is committed to protecting your privacy and handling your data transparently and securely. This Privacy Policy explains how we collect, use, store, and share personal information in connection with our:

• SaaS products (including MagicOps™ and SparkEval)
• AI agent monitoring and operations platforms
• AI evaluation tools
• Consulting, advisory, and R&D services

It applies to all websites, applications, and services we operate. By using our services, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account registration details (name, email address, company name)
• Payment details (processed securely by PCI-compliant providers — we do not store full card numbers)
• Content, datasets, prompts, or files submitted through our services
• Feedback, surveys, and communication preferences
• Information provided during consulting engagements

2.2 Information We Collect Automatically

• Usage and analytics data (e.g., feature usage, error events)
• Device details (IP address, browser type, OS)
• Access logs, error reports, and performance metrics
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from Third Parties

• Authentication providers (Google, GitHub, Microsoft)
• Payment processors (e.g., Stripe)
• Analytics, monitoring, and marketing tools
• AI model providers and APIs

3. How We Use Your Information

We process personal data based on one or more of the following lawful bases: contract performance, consent, legitimate interest, legal obligation, or vital interest.

We use your information to:

• Provide, operate, and improve our services
• Process payments and manage accounts
• Respond to inquiries and provide support
• Analyze usage and improve performance
• Detect, investigate, and prevent fraud or security incidents
• Comply with legal requirements and enforce agreements
• Send marketing communications (with your consent)

AI-Specific Use

If you submit data for AI evaluation, analysis, or consulting purposes, we may transmit that data to third-party AI providers for processing.

• We do not allow these providers to train models on your data unless explicitly disclosed and consented to.
• AI data (inputs, outputs, logs) is retained only as long as necessary for the stated purpose and may be deleted upon request.
• Some AI providers may temporarily store inputs for abuse detection or debugging; where applicable, we disclose their locations and data policies in our documentation.

4. Information Sharing

We may share your personal data:

• With your consent
• With trusted service providers (e.g., hosting providers, payment processors, analytics vendors, AI API providers, customer support tools)
• For legal or safety reasons (to comply with laws, respond to legal requests, protect rights, or prevent harm)
• For business transfers (e.g., mergers, acquisitions)
• As aggregated or de-identified data for research or analytics

We do not sell your personal information.

5. Data Security

We implement safeguards including encryption, access controls, and monitoring. We conduct regular security reviews and audits.

If a data breach involving personal information occurs, we will notify affected individuals in accordance with Washington law (within 30 days) and other applicable regulations (e.g., GDPR 72-hour rule).

6. Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Meet legal obligations
• Resolve disputes
• Enforce agreements

Retention periods vary:

• Account data: retained for the life of the account plus up to 90 days after closure
• Transaction records: retained for 7 years for tax/audit purposes
• AI evaluation datasets & consulting deliverables: retained only as long as needed for the engagement; deleted upon client request
• Backups: retained for up to 90 days before secure deletion

7. Your Rights

Depending on your jurisdiction (including GDPR, CCPA/CPRA, and other laws), you may have the right to:

• Access – Obtain a copy of the data we hold about you
• Correction – Correct inaccurate or incomplete data
• Deletion – Request deletion of personal data (subject to legal exceptions)
• Restriction – Limit processing of your data
• Objection – Object to processing based on legitimate interests
• Portability – Receive your data in a machine-readable format

To exercise your rights, contact us at privacy@magicpilllabs.com. We will verify your identity before responding.

8. Cookies

We use cookies for:

• Authentication
• User preferences
• Analytics and performance
• Security

Some third-party cookies may be used for marketing. You can disable cookies via your browser settings.

9. International Data Transfers

We process and store data in the United States and may transfer it internationally. Where required, we use safeguards such as Standard Contractual Clauses (SCCs) to protect personal data during transfers.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have collected such information, contact us for deletion.

11. Consulting Engagement Data

For consulting projects, we treat client-provided data as confidential.

• Used only for the contracted purpose
• Stored securely
• Deleted upon contract completion or client request (unless legally required to retain)

12. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are material, we will:

• Update the "Last Updated" date
• Provide notice via email or in-app notification at least 14 days before changes take effect (where legally required)

13. Contact Us

Email: privacy@magicpilllabs.com

Mail: Magicpill Labs LLC, Ridgefield, WA, USA

Response Time: We aim to respond to privacy-related inquiries within 30 days.