Privacy Policy

Information we collect

Account information

When you create an account we collect your name, email address, and a password (stored as a salted hash). If you sign in with a third-party provider, we receive the basic profile information that provider shares.

Billing information

Payments are processed by Stripe. We do not store your payment card details. Stripe provides us with billing metadata such as your billing address, the last four digits of your card, and transaction history.

Site and usage data

To operate the hosting service we store and process the WordPress sites you host with us, including files, databases, and server logs. We also collect usage metrics such as page views, bandwidth, and resource consumption.

Technical data

When you visit our website or use the dashboard we automatically collect IP address, browser type, device information, timestamps, and referring URLs.

Communications

We retain records of support tickets, email correspondence, and chat transcripts to provide and improve support.

How we use your information

• To provide, maintain, and improve the service
• To process payments and send billing notifications
• To respond to support requests and security alerts
• To send transactional emails (account notifications, invoices, deliverability events)
• To detect, investigate, and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal information.

Sharing with third parties

We share information with the following categories of third parties strictly for the purposes described:

• Payment processing: Stripe
• Email delivery: Resend
• Cloud infrastructure: our underlying infrastructure providers
• Analytics: privacy-respecting product analytics

We require processors to maintain appropriate safeguards and to use information only as instructed. We may also disclose information if required by law, valid legal process, or to protect rights, property, or safety.

Data retention

We retain account and billing information for as long as your account is active and for a reasonable period afterward to comply with legal obligations and to resolve disputes. Site data is retained for the duration of your subscription and a short grace period after cancellation, after which it is permanently deleted.

Your rights

Depending on your location you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Restrict or object to certain processing
• Receive a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, email privacy@magicwp.io.

Security

We protect your information with industry-standard security measures, including encryption in transit (TLS), encryption at rest where applicable, hashed passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International transfers

Our services operate globally. Your information may be transferred to and processed in countries other than your own. Where required we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

Children’s privacy

Our service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a new effective date. Material changes will be communicated via email or in-product notice.

Contact

Questions about this policy or our privacy practices? Email privacy@magicwp.io or use our contact page.