Data processing agreement

Subject matter and purpose — operating your lead magnets: serving your documents, running the AI chat beside them, capturing and qualifying leads, and reporting it all back to you.

Data subjects — your leads: the people who open, read and chat with your documents.

Personal data — names, email addresses, chat transcripts, reading behavior (pages, time), qualification answers, and AI-generated summaries of the above.

Duration — the life of your subscription, plus the deletion window below.

Instructions — we process lead data only to provide the service as you configure it, and on your documented instructions. We never sell it, never use it to train models, and never use it for our own marketing.

Confidentiality — access is limited to what operating the service requires, under confidentiality obligations.

Security — encryption in transit and at rest, access controls, tenant isolation (one organization can never read another's data), bot protection on data collection, and secrets management via our hosting provider.

Data subject rights — we assist you with access, correction, deletion and export requests. Lead deletion requests sent to us directly are honored within 30 days and you are informed.

Breach notification — we notify you without undue delay after becoming aware of a personal data breach affecting your leads, with the information you need for your own obligations.

Deletion — deleting your account erases all lead personal data we hold for you; backups age out within 30 days. Individual leads are deleted on request, as above. Archiving a magnet stops new collection; leads already captured stay in your account until deleted. AI processing artifacts at Google expire on Google's retention schedule, at most 55 days.

Audit — on request we make available the information reasonably necessary to demonstrate compliance with this agreement.

You authorize the sub-processors listed in our privacy policy. We'll email account holders at least 14 days before adding one; if you object on reasonable data protection grounds and we can't resolve it, you may terminate and receive a pro-rata refund.

Where transfers of EU/EEA or UK personal data require safeguards, the EU standard contractual clauses (controller-to-processor module) and the UK addendum are incorporated into this agreement by reference, with you as data exporter and magnetchat as data importer.

Liability under this agreement follows the limitations in the terms of service.