Политика конфиденциальности

Last updated: June 2026

This Privacy Policy explains how Androsov Vladimir IE (Individual Entrepreneur), registered in Georgia ("we", "our", "us"), the operator of MagicAds (the "Service"), collects, uses, stores, and shares personal information when you use our website and platform. We are the data controller for the personal data described below. By using the Service you agree to this Policy. If you do not agree, please stop using the Service.

1. Information We Collect

Information you provide

• Account data — name, email address, password (stored hashed), and profile details.
• Billing data — billing name, address, country, and the plan you purchase. Card and payment-instrument details are collected and processed directly by our payment processors; we do not store full card numbers.
• Content you submit — text prompts, uploaded images, brand details, and other inputs you provide to generate ad creatives, as well as the resulting AI-generated images, videos, and copy.
• Communications — messages you send us via support, email, or forms.

Information collected automatically

• Usage and log data — IP address, browser and device type, operating system, pages viewed, timestamps, referring URLs, and feature usage.
• Cookies and similar technologies — used for authentication, security, preferences, and (with consent) analytics. See "Cookies" below.
• Anti-abuse signals — when enabled, Google reCAPTCHA collects device and interaction data to distinguish humans from bots. This is subject to Google's Privacy Policy and Terms.

2. How We Use Your Information

• To create and manage your account and provide the Service.
• To process payments, deliver credits, and manage subscriptions.
• To route your prompts and inputs to third-party AI providers in order to generate the content you request.
• To secure the Service, prevent fraud and abuse, and enforce our Terms.
• To communicate with you about your account, transactions, security, and support.
• To analyze and improve the Service.
• To comply with legal obligations.

3. Legal Bases for Processing (EEA/UK)

Where applicable data protection law (such as the GDPR) governs our processing, we rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, maintain, and improve the Service and prevent abuse); consent (for non-essential cookies and certain communications, which you may withdraw at any time); and compliance with a legal obligation.

4. Third Parties and Sub-processors

We do not sell your personal information. We share data only with service providers that help us operate the Service, under appropriate confidentiality and data-protection obligations. These include, depending on the features you use:

• AI generation providers (e.g. OpenAI, OpenRouter, Replicate, Runway and similar) — receive your prompts and inputs to generate the content you request.
• Payment processors (e.g. Cryptomus, Stripe and similar) — process your payments.
• Infrastructure and delivery (e.g. Cloudflare, our hosting provider) — host and protect the Service.
• Email delivery (e.g. Resend) — send transactional emails.
• Bot protection (Google reCAPTCHA) — protects forms from automated abuse.
• Analytics (only with your consent) — helps us understand usage.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice to you).

5. International Transfers

We operate globally and our providers may process data in countries outside your own, including outside the EEA/UK. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

6. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it. Generated content and prompts may be retained to operate your account history unless you delete them or close your account.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data; to restrict or object to processing; and to withdraw consent. To exercise these rights, contact us at [email protected]. We will respond within the time required by applicable law (typically 30 days). You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use essential cookies required for authentication and security, and — only with your consent — analytics and preference cookies. You can manage non-essential cookies through our cookie consent banner or your browser settings. Disabling some cookies may affect functionality.

9. Security

We use technical and organizational measures to protect your data, including encryption of sensitive credentials at rest, encrypted connections (HTTPS), access controls, and abuse protection. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your rights, contact us at [email protected]. Data controller: Androsov Vladimir IE (Individual Entrepreneur), registered in Georgia.