Privacy Policy
Local Magik ("Local Magik," "we," "us") provides one-click workflows — Magik Buttons — that help local businesses draft, review, and send work product. This policy explains what information we collect when you use our website (localmagik.com) and our application (app.localmagik.com, the "Service"), how we use it, and the choices you have.
Information we collect
Account information. You sign in with Google. We receive your name, email address, and profile photo from your Google account. We do not receive or store your Google password.
Content you create in the Service. Workspaces, buttons and their runs, documents, tasks, notes, brand details, contact/audience lists, and files you upload (for example a CSV or Markdown file used as a run input). This content belongs to you.
Connected accounts. If you connect a third-party account (for example Google Sheets, Gmail, or QuickBooks Online), we store the access credentials needed to act on your behalf. These tokens are encrypted at rest, and we access connected accounts only to perform the specific actions a button run requests — for example reading rows from a spreadsheet you point us to, or sending an email you have reviewed and approved.
Usage and technical data. Standard server logs (IP address, browser type, pages requested) and, on our marketing site, product analytics that help us understand what content is useful. We use a session cookie to keep you signed in to the Service.
How we use information
- To operate the Service: run your buttons, store your documents and tasks, and carry out the actions you approve.
- To generate drafts: the content you provide to a button run (your answers, connected-account data the run reads, and files you upload) is sent to our AI provider to produce the draft you review. Every outbound action — an email send, a sheet update — happens only after a human approves it.
- To communicate with you about the Service (support replies, important notices).
- To secure and improve the Service (debugging, abuse prevention, aggregate analytics).
We do not sell your personal information, and we do not use your content to advertise to you or anyone else.
Google user data
Where the Service connects to Google APIs (such as Gmail and Google Sheets), our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:
- We only use Google user data to provide the features you asked for — reading the spreadsheets you point a button at, and sending the emails you approve.
- We do not transfer Google user data to third parties except as needed to provide those features, to comply with law, or as part of a merger or acquisition with equivalent protections.
- We do not use Google user data for advertising.
- We do not use Google user data to train generalized artificial-intelligence or machine-learning models. Data read from your Google account during a run is used only to produce that run's output for your review.
- Humans do not read your Google user data except with your explicit permission (for example a support request), where required for security or legal reasons, or where the data has been aggregated and de-identified.
You can disconnect a Google connection at any time in the Service's Settings, and you can revoke Local Magik's access from your Google Account permissions page.
QuickBooks and other connected services
QuickBooks Online connections are read-only: the Service reads the accounting data a button needs (for example invoices and customers) to build the reports you run, and never writes to your books. Connection credentials for some services are managed through Nango, our OAuth infrastructure provider. You can disconnect any connected service at any time in Settings, and from the third party's own security settings.
Service providers
We share information only with the vendors that host and power the Service, each bound to use it solely to provide their service to us:
| Provider | Purpose |
|---|---|
| Vercel | Application hosting |
| Neon | Database hosting |
| Anthropic | AI drafting (generates the drafts you review) |
| Nango | OAuth connection management for certain connectors |
| Sign-in and Google API connections you authorize |
We may also disclose information if required by law, to protect the rights and safety of Local Magik or others, or as part of a business transfer with equivalent privacy protections.
Data retention and deletion
We keep your account and workspace content while your account is active. Run history is kept so you can refer back to what was drafted, approved, and sent. You can delete content inside the Service, disconnect connected accounts at any time, and request deletion of your account and its data by emailing us at the address below — we will delete it within 30 days, except where a copy must be retained for legal, security, or backup-integrity purposes (and then only for as long as required).
Security
Connected-account tokens are encrypted at rest with industry-standard encryption. Traffic to and from the Service is encrypted in transit (HTTPS). Access to production systems is limited to those who need it to operate the Service. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these, email us at the address below. We will not discriminate against you for exercising them.
Children
The Service is for businesses and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
Changes to this policy
If we make material changes, we will update the effective date above and, for significant changes, notify you in the Service or by email. Continued use after changes take effect means you accept the updated policy.
Contact
Questions or requests: support@localmagik.com.