Privacy policy

Magicus is a workflow-mapping tool operated from the United Kingdom. This policy explains what we collect when you sign in, describe a workflow, or record one — and what we do with it.

• Account profile. When you sign in with Google we receive your email, name, and profile picture (avatar). We do not receive your Google password.
• Workflows you create. Text descriptions, voice transcripts, and screen recordings you submit, plus any clarifying answers you provide. These are stored against your account so you can come back to them later.
• Share links. If you share a workflow, we store a snapshot of that workflow with a random token-based URL plus whatever redaction settings you chose.
• Technical data.Standard server logs (IP address, user agent, request paths) collected by our hosting provider for security and performance. We don't set marketing or advertising cookies.

• To sign you in and remember your account between sessions.
• To process your workflow descriptions and recordings through AI models so we can generate the workflow card you see in the app.
• To store your workflows and canvases so they're there when you return.
• To diagnose errors and improve reliability.

We do not sell your data, share it with advertisers, or use the contents of your workflows to train models.

We use trusted infrastructure providers to run the service. Each receives only what's needed for its job:

• Google (OAuth). Handles the sign-in flow.
• Supabase. Stores your account, workflows, canvases, and share records.
• Vercel. Hosts the application and stores screen recordings temporarily in Vercel Blob.
• Google Gemini API. Processes your descriptions and recordings to extract workflow steps.
• Anthropic (Claude API). Used as a fallback when Gemini is unavailable, for the same purpose.

• Account profile and workflows: for as long as your account exists.
• Screen recordings: deleted from our storage as soon as the AI model has finished processing them, typically within a minute of upload.
• Share snapshots: until you delete the share or your account.
• Server logs: retained for up to 30 days by our hosting provider for operational reasons.

You can request a copy of the data we hold about you, ask us to correct inaccurate data, or delete your account at any time. Email team@netlearn.io and we'll handle it within a reasonable timeframe (typically within 30 days). If you're in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.

Magicus is intended for adults building business workflows. We don't knowingly collect data from anyone under 16. If you believe a child has signed up, contact us and we'll delete the account.

If we make material changes, we'll update the "Last updated" date at the top and, where appropriate, notify you inside the app. Continuing to use Magicus after a change means you accept the updated terms.

Questions, requests, or anything else: team@netlearn.io.