Privacy Policy

1. Introduction

MAGELUR ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all information collected through our website, mobile applications, and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Register an account: Name, email address, password, username, user type, date of birth
• Complete your profile: Profile photo, cover photo, bio, professional information, location, skills, rates, portfolio images and videos
• Post content: Photos, videos, captions, comments, stories
• Use messaging: Messages sent to other users
• Make bookings: Booking requests, event details, scheduling information
• Subscribe or make payments: Billing information (processed by Stripe, not stored by us)
• Contact us: Support requests, feedback, correspondence

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: Pages viewed, features used, time spent, interactions, search queries
• Location data: Approximate location based on IP address (precise location only with permission)
• Cookies and tracking: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information from:

• Payment processors: Transaction status and payment method details (from Stripe)
• Analytics providers: Aggregated usage statistics
• Email service: Email delivery status (from Resend)

3. How We Use Your Information

We use your information to:

• Provide the Service: Create and maintain your account, enable features, process transactions
• Personalize experience: Show relevant content, recommendations, and search results
• Communicate with you: Send notifications, updates, marketing communications (with consent), transactional emails
• Process payments: Handle subscriptions, booking payments, and billing
• Improve the Service: Analyze usage patterns, conduct research, develop new features
• Ensure security: Detect and prevent fraud, abuse, security threats
• Comply with legal obligations: Respond to legal requests, enforce our terms
• Marketing: Send promotional content (you can opt-out anytime)

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data and context:

• Contract performance: Processing necessary to provide the Service you've requested
• Consent: You've given explicit permission (e.g., marketing emails, location tracking)
• Legitimate interests: Processing necessary for our legitimate business interests (security, improvements, analytics)
• Legal obligations: Required to comply with legal requirements

5. How We Share Your Information

5.1 Public Information

Your profile information, posts, portfolio, and other content you choose to make public will be visible to other users and may be indexed by search engines.

5.2 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

• Cloud hosting: Vercel, Supabase (database)
• Payment processing: Stripe
• Email service: Resend
• Analytics: Usage and performance monitoring
• Content delivery: CDN providers for media files

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.3 Business Transfers

If MAGELUR is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or to:

• Comply with legal process
• Enforce our Terms of Service
• Protect the rights, property, or safety of MAGELUR, our users, or others
• Prevent fraud or security threats

5.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (HTTPS) and at rest
• Secure authentication with hashed passwords
• Regular security assessments
• Access controls and monitoring
• Secure payment processing (PCI DSS compliant via Stripe)

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide the Service and fulfill transactions
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we're required to retain it for legal or security purposes.

8. Your Rights and Choices

8.1 Access and Update

You can access and update your account information anytime through your account settings.

8.2 GDPR Rights (EEA Users)

If you're in the EEA, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Data portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw previously given consent
• Lodge a complaint: File a complaint with your local data protection authority

8.3 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information we collect, use, and share
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising privacy rights

8.4 Marketing Communications

You can opt-out of marketing emails by clicking "unsubscribe" in any marketing email or adjusting your notification preferences in account settings.

8.5 Delete Your Account

You can request account deletion through your account settings or by contacting privacy@magelur.com.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@magelur.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

For EEA users, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us: