Legal & Compliance

Privacy Policy

We respect your privacy and are committed to protecting your personal data. Here is a clear breakdown of how MagicPopup collects, uses, and safeguards your information.

Last Updated: August 2026•Reading Time: ~4 min

Key Highlights at a Glance

We Never Sell Your Data

Your personal information and subscriber data will never be sold or rented to third parties.

Bank-Grade Encryption

All data transmission and storage is protected using industry-standard AES 256-bit encryption.

Full User Control

You have full rights to request, export, or permanently delete your account data at any time.

1. Information We Collect

When you sign up for MagicPopup or integrate our script on your website, we collect information necessary to provide our services efficiently.

  • Account Data: Your name, email address, password hash, and billing credentials when subscribing.
  • Website Data: Domain URL, custom popup templates, display trigger rules, and integration keys.
  • Subscriber Data: Information collected via your popups (e.g. emails submitted by your visitors). You own this data completely.
  • Usage & Technical Data: IP address, browser type, device info, and event analytics (views, clicks, conversion rates).

2. How We Use Your Data

We strictly use your personal and analytics data to deliver, maintain, and optimize the MagicPopup platform:

  • To render your popups instantly on your website without delay.
  • To compute real-time conversion analytics and dashboard performance reports.
  • To process subscription payments and send transactional invoices.
  • To notify you about critical security updates, new features, and technical support notices.

3. Cookies & Analytics

MagicPopup uses lightweight cookies and local storage to remember visitor popup dismissals and frequency limits (e.g. preventing a popup from displaying again if a visitor closed it).

Our embed script does not track visitors across unrelated websites or build cross-site advertising profiles.

4. Data Sharing & Third Parties

We never sell, rent, or trade your personal data. We only share essential information with trusted third-party service providers who assist in operating our infrastructure:

  • Infrastructure & Hosting: Encrypted cloud providers (AWS, Vercel, Supabase).
  • Payment Processors: Stripe (we never store raw credit card details).
  • Transactional Email: Resend / Postmark for delivery of receipts and password resets.

5. Security & Data Retention

We employ SOC-2 compliant security standards, TLS 1.3 encryption in transit, and AES-256 encryption at rest.

We retain your data for as long as your account remains active. If you cancel your account, your data is permanently purged from our primary servers within 30 days.

6. Your Privacy Rights (GDPR & CCPA)

Under applicable laws (including GDPR and CCPA), you hold full rights over your data:

  • Right to Access: Request a complete copy of your personal data.
  • Right to Erasure: Request permanent deletion of all account records.
  • Right to Export: Download all collected subscriber emails in CSV format.

7. Contact Our Privacy Officer

If you have questions or concerns regarding this Privacy Policy, or wish to exercise your data rights, please contact our legal team directly:

Email:privacy@magicpopup.io