These brief summaries are not legally binding. They are our best effort to make long-winded legal documents easy to quickly understand!
Full documents here: privacy policy, terms of service
Your data is then transferred using standard HTTPS encryption in transit until it reaches our servers.
Your data is stored double-encrypted, once by us, and again with a second layer of standard "encrypted at rest" encryption.
When you use Magicflow, your data is sent with HTTPS encryption to a secure serverless cloud computing environment, where your data gets decrypted and analysed so we can show you the awesome insights we've extracted from it.
These insights then get sent with HTTPS encryption to your browser! It is not perfect end-to-end encryption because we do a lot of heavy data processing which at the moment needs to be done in the cloud. We do plan on creating a local-only and a fully end-to-end encrypted version that doesn't do any heavy processing, but we're still working on it!
No humans other than you ever see your data. It is only ever decrypted when it's being processed for you. We salt and hash your password, so we never have a plaintext copy of it on our servers. To learn more about this, look up 'password hashing'. This means that even if our entire system is compromised, your data will still be safe. We will never ask for you to send us your password. Please report to mike@magicflow.com if you are ever asked for this kind of information.
Up front, any data that you add to Magicflow to analyse is only used for the sole purpose of providing you with the Magicflow Service. We don't sell, share, or use this data for anything else. We believe your data should only be used in ways that you clearly consent to, that benefit you.
I hope this helps, let us know if you have any questions, or suggestions on how we can make this page, or our policies simpler and better!
Oops! Something went wrong while submitting the form