Privacy Policy

1. Who We Are

MagicThread L.L.C. is a Wyoming limited liability company. This policy describes how we collect, use, and protect your information when you use magicthread.app.

2. Information We Collect

Information you provide:

• Email address (for account creation and communications)
• Product details you enter into the blueprint generator (product name, category, price, commission rate, star rating, review count, key features/ingredients, shipping cost, TikTok Shop URL)
• Generated blueprints and scripts (stored in your account)

Information collected automatically:

• Usage data (number of blueprints generated, timestamps, feature usage)
• Technical data (IP address, browser type, device type, operating system)
• Log data (access times, pages viewed, error logs)

Information we do NOT collect:

• TikTok account credentials or passwords
• Social Security numbers or government-issued IDs
• Credit card numbers or bank account details (payment processing is handled entirely by Stripe)
• Biometric data

3. How We Use Your Information

• Service delivery: To generate filming blueprints based on your product inputs.
• Account management: To create and maintain your account, process payments, and communicate about your subscription.
• Service improvement: To analyze aggregate usage patterns and improve the quality of blueprint generation.
• Communications: To send transactional emails (blueprint delivery, account notifications, billing receipts) and, with your consent, product updates.
• Security: To detect and prevent fraud, abuse, and security incidents.
• Legal compliance: To comply with applicable laws and respond to legal requests.

4. How We Share Your Information

We do not sell your personal information. We share your information only with:

• Stripe (stripe.com): payment processing. Stripe receives your payment information directly; we do not store it.
• Supabase (supabase.com): database hosting (United States). Stores your account data, product inputs, and generated blueprints.
• Anthropic (anthropic.com): AI processing. Your product inputs are sent to Anthropic's Claude API to generate blueprints. Anthropic processes this data per their usage policies. We do not permit Anthropic to use your inputs to train their models under our API agreement.
• Cloudflare (cloudflare.com): website hosting, CDN, and DNS.
• Pinecone (pinecone.io): vector database for the AI training methodology. Does not store your personal information.
• Resend (resend.com): transactional email delivery.
• Whop (whop.com): community platform. If you join the MagicThread community, Whop processes your membership separately under their own terms.

We may also disclose information if required by law, legal process, or to protect rights and safety.

5. Local Storage and Similar Technologies

MagicThread does not use cookies for authentication or session management. We use your browser's localStorage to maintain your session. This data is stored locally in your browser and is not transmitted to third parties.

Specifically, we store a locally generated access token associated with the email you provide. This token is readable only by the MagicThread web application running on our domain and is strictly necessary to deliver the Service. Without it, you would need to re-enter your email on every page load.

We do not use advertising cookies, tracking pixels, cross-site tracking, fingerprinting scripts, or any technology enabling cross-context behavioral advertising.

Other browser storage we use: sessionStorage for transient UI state, and first-party cookies set by Stripe within their embedded checkout flow (governed by Stripe's privacy notice).

You can clear localStorage at any time via your browser settings. Doing so will sign you out but will not delete your server-side account data.

6. Data Retention

• Account data: Retained while your account is active, plus 30 days after account closure.
• Generated blueprints: Retained while your account is active. Deleted 30 days after account closure unless you request earlier deletion.
• Payment records: Retained for 7 years for tax and accounting purposes.
• Usage analytics: Aggregate (anonymized) data retained indefinitely. Individual usage logs retained for 2 years.
• Technical logs: Retained for 90 days.

7. Your Rights and Choices

Regardless of your location, you have the right to:

• Access your personal information
• Delete your account and associated data
• Update your information through account settings
• Opt out of non-essential communications

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

California residents (CCPA/CPRA): If applicable, you have the right to know what personal information we collect, request deletion, request correction, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA.

8. AI Processing Disclosure

MagicThread uses Anthropic's Claude to generate filming blueprints. When you submit product details, your inputs are processed by the AI model to produce script text, visual cues, compliance flags, and other blueprint components.

Outputs are AI-generated and may contain inaccuracies. The AI does not make decisions about your account standing, billing, or access.

9. Data Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), secure database hosting, and API key authentication. That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

MagicThread is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If we discover that we have collected information from a child under 13, we will delete it promptly.

If you believe a child under 13 has provided us with personal information, please contact [email protected]. Use of MagicThread requires you to be at least 18 years old.

11. International Users

MagicThread is operated from the United States and is intended for users located in the United States. If you access MagicThread from outside the United States, you do so at your own risk. Your data will be transferred to and processed in the United States.

12. Data Breach Notification

In the event of a data breach, we will notify affected users as required by applicable state law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we'll provide 30 days' notice via email before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision.

14. Contact

MagicThread L.L.C.

[email protected]