Do Not Sell or Share My Personal Information

Last updated: May 12, 2026

California law requires us to give residents a clearly labeled link titled "Do Not Sell or Share My Personal Information." This page is that link. Because we don't sell personal information or share it for cross-context behavioral advertising, there's nothing to opt out of — but here's the plain-language version so you can confirm.

What we do with your data

We collect personal information only to operate MAGE ID. We share it only with operational sub-processors disclosed in our Privacy Policy — currently Supabase (hosting + auth), Resend (email), Stripe (payments), and Anthropic (AI features). Each is contractually limited to using the data only on our instructions.

We do not:

• Sell personal information to data brokers, advertisers, or any third party.
• Share personal information with third parties for the purpose of cross-context behavioral advertising.
• Run third-party advertising trackers or behavioral cookies on our marketing site or in our apps.
• Disclose your project data, photos, messages, or contact lists to anyone except as needed to operate the Service (e.g., delivering an email through Resend) or as required by law.

Other California rights

Even though there's no sale or sharing to opt out of, California residents have additional rights under the CCPA / CPRA:

• Right to know what personal information we collect, use, and disclose.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information (e.g., precise geolocation, or the last 4 digits of an SSN we may collect for 1099-NEC export).
• Right to non-discrimination for exercising any of these rights.

How to make a request

To exercise any California right (or any equivalent right under another state's privacy law), email help@mageid.app with the subject "Privacy Request" and include the email address associated with your MAGE ID account.

We respond to verified requests within 45 days (extendable by 45 with notice). For deletion and access requests, we'll first verify your identity using means proportionate to the sensitivity of the request.

You can also delete your account at any time directly in the app: Settings → Delete Account. This permanently removes your account and project data within 30 days from our primary database; encrypted backups are purged within 90 days.

Authorized agents

You may use an authorized agent to submit a CCPA/CPRA request on your behalf. We'll require written authorization signed by you, plus identity verification, before we act on the agent's request.

Contact

Questions about this notice or our privacy practices? Email help@mageid.app.