Privacy Policy

Last updated: September 28, 2026 · Version 2026-09-28-rights-draft

Draft — not legal advice. This document is an early draft pending review by legal counsel. It is provided for transparency during our free soft launch and is not a final agreement for paid services.

This Privacy Policy explains what MagnaTools, operated by Jirius Group LLC, collects and how we use it. It describes our actual data practices; where a practice changes, we will update this policy.

1. What we collect

Account and organization information: your email address, name, optional profile image, verification status, organizations, memberships, roles, and pending invitations (including invited email addresses).
Sessions: sign-in sessions, the active organization for your account, and the IP address and user-agent associated with the session. We use these details for authentication, security, and session management.
Usage and diagnostic information: for each tool run, the tool used, outcome, approximate input and output sizes, a session identifier, and the associated organization and user. Diagnostic events can incidentally include a file name or short text you provided; we truncate them and are working to minimize personal data in this field.
Legal acceptance: the document versions you agree to or acknowledge, their content digests, your account ID, the time recorded by our server, and whether you acted at signup or on the legal review page. We use these records to document your agreement and acknowledgment; they are not marketing consent.
Bulk processing: signed-in batch and item identifiers, file counts and sizes, admission timestamps, quota decisions, and automatic restrictions. Paid PDF operations also retain document fingerprints and debit/refund references to prevent duplicate charges. Bulk admission and abuse records do not contain filenames, document contents, or extracted images.

2. How we use and handle information

We use information to provide and secure the Service, authenticate you, meter and bill usage, enforce limits, prevent abuse and fraud, and diagnose problems. Where applicable, we process information to perform our contract with you, to comply with legal obligations, with your consent where required, and for our legitimate interests in operating and securing the Service.

Tools that run in your browser (for example Photo Optimizer, Image Shrinker, SVG Cleaner, the emoji tool, Word-to-Markdown, and clean HTML conversion) process files locally; their source documents, extracted images, and bulk reports stay in your browser. Bulk use requires sign-in so our hosted workflow can enforce account-based admission limits.

Tools that run on our servers (Background Remover, PDF Utilities, and Markdown → PDF) send your file only to our own first-party service — never to a third-party AI provider — where it is processed in memory and is not stored after the job completes.

3. Service providers

We share data only with providers that run the Service on our behalf: Fly.io for application hosting and database in the United States region, Resend for transactional email, and Stripe for payment processing once paid plans and credit packs launch. No payments are processed during the free soft launch.

4. Cookies and advertising

We use only essential cookies required to keep you signed in. We do not use analytics or advertising cookies. We do not sell or share personal information for cross-context behavioral advertising.

5. Retention

We keep account and organization data for as long as your account is active. Tool usage events are retained for about 24 months, and diagnostic events for about 90 days, after which they are deleted or aggregated. Final retention periods are being confirmed.

Bulk admissions expire after one hour. The intended retention periods are 24 hours for quota evidence and terminal PDF operation records, and 90 days for bulk abuse cases and audit records. Cleanup requires operator-scheduled maintenance; the application does not install that scheduler itself. Refundable pending operations are recovered rather than deleted.

6. Your privacy rights

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, or portability of your personal information; to restrict or object to certain processing; and to withdraw consent where processing relies on consent. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection supervisory authority.

California residents may request to know the personal information we collect, use, disclose, or sell/share; request deletion or correction; limit the use and disclosure of sensitive personal information where applicable; and exercise these rights without discrimination. We do not sell or share personal information for cross-context behavioral advertising. You or an authorized agent may submit a request by emailing support@magnatools.co. We may verify a request before acting and aim to respond within 45 days, subject to extensions permitted by law.

7. Contact and changes

To exercise a privacy right or ask a privacy question, contact support@magnatools.co. We may update this policy; material changes will be surfaced in the Service. Continued use after an update means you acknowledge the current policy.