Privacy Policy
Effective July 27, 2026. This Privacy Policy is issued by MW 77 Org. (“Magic Wand,” “we,” “us,” or “our”), New York, USA. Magic Wand respects your privacy. We have attempted to make this policy clear, concise, and complete.
1. Scope and acceptance
This policy describes how we collect, retain, use, and disclose personally identifiable information (“Personal Data”) and other information collected from visitors to our websites (including mgcwnd.com), and from users of the Magic Wand application, desktop application, website widgets, and related services (collectively, the “Service”; such visitors and users, “Users”). By voluntarily providing Personal Data and by using the Service, you consent to the collection and use of that information in accordance with this Privacy Policy. This policy does not apply to information we collect offline or from other sources. If you use the Service on behalf of a firm, that firm controls its workspace data, and we process it on the firm’s behalf under this policy and our agreement with the firm.
2. Information we collect
Information you provide. When you register, sign in, subscribe, contact us, or use the Service, we collect information such as your name, email address, sign-in identity (Google, Apple, or email code), and the business records you or your firm create in your workspace — contacts, companies, deals, notes, documents, tasks, and communications logs (“Workspace Data”). You may choose not to provide Personal Data; doing so will limit your ability to use the Service.
Billing. Payments are processed by Stripe. We receive subscription status, plan, and billing identifiers; we never receive or store full card numbers.
Automatically collected information. Our servers and providers record log information your browser sends: IP address, browser and device type, referring/exit pages, pages viewed, clicks, timestamps, and similar diagnostics. We use this to operate, secure, and improve the Service.
Cookies and local storage. We use cookies and equivalent browser storage (localStorage/sessionStorage) to keep you signed in, remember your preferences and layout, and make the Service work. The application keeps most working state in your own browser’s local storage rather than tracking cookies. You can clear or block these in your browser; core features will not function without them. We do not use third-party advertising cookies.
Referrals. If you refer someone to us, we may store the referred name and email, contact them, and record that you originated the referral.
3. Google user data (Limited Use)
If you connect your Google account, Magic Wand requests: Gmail (read-only) — to display your own recent email inside your private workspace and match it to your contacts and deals; Google Calendar (events) — to show your upcoming schedule and create holds you request; and Google Drive (metadata, read-only) — to list your recent files inside your workspace. File contents are not accessed.
Limited Use disclosure: Magic Wand’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide the user-facing features above; we do not sell Google user data; we do not use it for advertising; we do not transfer it to third parties except as necessary to provide those features, for security, or to comply with law; humans do not read it except with your explicit permission, where necessary for security or abuse investigation, or to comply with law; and we do not use Google user data to train generalized artificial-intelligence or machine-learning models.
Storage and revocation: Google access tokens are stored in your own browser, not on our servers. Disconnect at any time from the Bridge panel in the app, or revoke access at Google account permissions; disconnection removes the tokens immediately.
4. How we use information
- To provide, operate, personalize, and maintain the Service and your workspace;
- To authenticate you, verify subscription status, and administer firm membership, roles, and authorizations;
- To secure the Service: fraud prevention, abuse detection, audit trails, and diagnostics;
- To communicate with you about the Service — transactional messages, security notices, and legally required notices; and, with the ability to opt out, product news;
- To respond to inquiries and provide support;
- To analyze usage in aggregated or de-identified form and improve the Service;
- To comply with legal obligations and enforce our agreements.
What we do not do: we do not sell Personal Data; we do not run third-party advertising on the Service; and we do not use your Workspace Data or Google user data to train generalized AI models.
5. Legal bases (EEA/UK users)
Where GDPR or UK GDPR applies, we process Personal Data on these bases: performance of a contract (providing the Service you signed up for); legitimate interests (securing and improving the Service, communicating with business users); consent (where you connect third-party accounts such as Google, or opt in to marketing), which you may withdraw at any time; and compliance with legal obligations.
6. Disclosure of Personal Data
We share Personal Data only as described here:
Service providers (subprocessors). We rely on a small set of providers, each receiving only what its function requires:
| Provider | Function | Location |
|---|---|---|
| Supabase | Database, authentication, edge functions | United States |
| Stripe | Payments and subscription billing | United States |
| Sign-in; Gmail/Calendar/Drive (only if you connect) | United States | |
| Apple | Sign in with Apple (only if you use it) | United States |
| Gandi | Transactional email delivery | EU/United States |
Within your firm. Workspace Data is visible to authorized members of your firm according to the roles and permissions your firm’s administrators set.
Business transfers. In the event of a sale, merger, reorganization, dissolution, or similar event, Personal Data may be part of the transferred assets. You will be notified via email or a prominent notice on the Service of any change in control or use of your Personal Data, and of choices you may have. We may provide access to Personal Data on a confidential basis to parties with whom we are considering such a transaction.
Legal requirements. We may disclose Personal Data if required to do so by law or in the good-faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) act in urgent circumstances to protect the personal safety of Users or the public against fraud or other harm, or (iv) protect against legal liability.
Aggregated information. We may share information that does not identify you (such as anonymous usage statistics) to describe the Service and its use.
7. Storage and security
We protect Personal Data using commercially reasonable, industry-standard practices: encryption in transit (TLS), encryption at rest via our infrastructure providers, firm-level isolation enforced with row-level security at the database layer, restricted administrative access, and an append-only audit trail of consequential actions inside each workspace. To facilitate the Service, Personal Data may be stored on servers and databases operated by our hosting providers.
No method of electronic storage or transmission is completely secure, and we make no guarantee of absolute security. If Personal Data is compromised as a result of a breach of our security measures, we will notify affected Users in accordance with this policy and applicable law. To the maximum extent permitted by law, we have no liability for losses, costs, or damages resulting from disclosure of Personal Data caused by events beyond our reasonable control.
8. Retention and deletion
We retain Workspace Data while your firm’s subscription is active and for a reasonable period afterward to permit reactivation. You may request export or deletion of your firm’s data at any time by emailing abra@mgcwnd.com; we complete verified deletion requests within 30 days, after which data persists only in routine encrypted backups until those rotate out, and as required for legal, tax, or accounting obligations.
9. Your rights
Everyone: you may access, correct, or delete your Personal Data, and opt out of marketing communications, by emailing abra@mgcwnd.com. We will strive to honor requests within 30 days and may take reasonable steps to verify your identity first. If you opt out, this policy continues to apply, and we retain information as necessary to comply with legal obligations.
EEA/UK: you additionally have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.
California: you have the rights to know, correct, and delete Personal Data, and the right to non-discrimination for exercising them. We do not sell or “share” Personal Data as those terms are defined in the CCPA/CPRA, and we do not use or disclose sensitive Personal Data for purposes requiring a right to limit.
10. International transfers
The Service is operated from the United States. If you access it from outside the U.S., you acknowledge that your Personal Data is transferred to and processed in the United States and in the locations of the providers listed above. Where required, we rely on appropriate safeguards such as standard contractual clauses.
11. Children
The Service is a business tool and may not be used by anyone under 18. If we become aware that a User is under 18, we will take steps to remove that User’s Personal Data.
12. Third-party links and services
The Service may link to third-party websites and services. Once you leave the Service, this Privacy Policy no longer applies, and we are not responsible for the policies or practices of third parties. We encourage you to review their policies.
13. Do Not Track
Some browsers transmit “Do Not Track” signals. The Service does not run third-party behavioral advertising and treats all Users accordingly; we do not respond differently to DNT signals.
14. Changes to this policy
This Privacy Policy may change at any time. The current version will always be posted at this address and is effective immediately upon posting; for material changes we will also notify Users by email or a prominent notice in the Service. We encourage you to review this page periodically.
15. Contact
MW 77 Org. · New York, NY, USA
abra@mgcwnd.com ·
mgcwnd.com