Last updated: October 11, 2026

This Privacy Policy describes how Magiq, Inc., a Delaware corporation (“Magiq,” “we,” “us,” or “our”), collects, uses, and protects information when you use the Magiq platform at tool.usemagiq.com, the Magiq browser extension for Google Chrome (the “Extension”), and our website at usemagiq.com (together, the “Services”).

This policy applies alongside our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

1. Who we are and how to contact us

Magiq, Inc.
Email: privacy@usemagiq.com
Website: https://usemagiq.com

If you have questions about this policy or about how we handle your information, contact us at the address above.

2. Information we collect

2.1 Account information

When you create an account, we collect your name, email address, organization, and the authentication details needed to sign you in. Sign-in is handled by Auth0, our identity provider. Magiq never sees or stores your password.

2.2 Customer Data

Customer Data is the information you and your organization submit to the platform in the course of running your workflows: claim files, customer records, workflow inputs, notes, and other content you upload or generate. Customer Data may include personal information about your customers, employees, or other individuals, depending on how you use the platform. You control what Customer Data enters the platform.

2.3 Information the Extension reads from web pages

The Extension keeps your Magiq queue open in Chrome’s side panel while you work in other systems. It can also learn where a value lives on the page you are working in, when you copy it from the page and paste it into Magiq, and then fill that workflow step for you on later runs. To do that it reads content from web pages, subject to the following limits.

Page access is optional and off by default. The Extension does not read any web page until you explicitly grant page access by clicking a prompt in the side panel and accepting Chrome’s permission dialog. Until then, the Extension works only as a queue viewer.

When page access is granted, the Extension reads:

• What you copy while teaching Magiq. While a Magiq workflow step that still needs to learn a value is open, the Extension notices when you copy text on the page you are working in. It notes the copied text and the element it came from. This stays inside your browser and is discarded after one minute, or sooner if you switch tabs, leave the page, or copy something else.

• What you paste into a Magiq field. Inside the Magiq app in the side panel, the Extension notices when you paste into a workflow step field. If the pasted text matches what you just copied, the Extension saves a “recipe” to your Magiq account: a CSS selector describing where on the page the value came from, and whether it was an input value or visible text. The copied text itself is not sent by the Extension. The value you pasted is saved by the Magiq app in the normal way, as your answer to that field.

• Values named by a saved recipe. On later runs of the workflow, the Extension looks for the element named by a saved recipe on the page you are working in. If exactly one element matches, it reads that element’s text or input value and sends it to your Magiq account, where it is written into the corresponding workflow step field. The side panel shows you which values were filled.

The Extension only reads pages under these conditions:

• Only after you have granted page access.

• Only while a Magiq workflow step is open in the side panel.

• Only on the active tab in the window where the side panel is open.

The Extension never reads:

• Password fields

• Hidden fields

• Payment-card fields (fields marked with card-related autocomplete attributes)

• Content-editable regions

• Your keystrokes, mouse clicks, or other activity on the page, apart from the copy and paste events described above

2.4 Page URLs

The Extension observes the URL of the tab the side panel is following so it knows when the page has changed and a saved recipe should run again. URLs are processed locally in your browser and are never transmitted to Magiq or anyone else. Magiq does not collect your browsing history.

2.5 Authentication tokens

After you sign in through Auth0, the Extension stores the resulting refresh token, access token, and ID token in the Extension’s own browser storage so you stay signed in between sessions. Web pages cannot read this storage. The Extension sends the ID token to the Magiq application to establish your session. Signing out clears these tokens from the Extension.

2.6 Usage and technical information

When you use the platform we collect standard technical information such as IP address, browser type, device type, and timestamps of requests, along with records of actions taken within the platform, to operate and secure the Services and to support you. The Extension itself does not include any analytics or tracking code.

3. How we use information

We use the information described above to:

• Provide, maintain, and operate the Services, including signing you in and running your workflows.

• Fill workflow step fields with values read from web pages, when you have enabled page access.

• Improve the platform and the Magiq methodology, in a manner that does not disclose Customer Data to other customers in identifiable form.

• Generate aggregated or de-identified information that does not identify you or any individual.

• Provide customer support and respond to your requests.

• Secure the Services, detect abuse, and enforce our Terms of Service.

• Comply with applicable law and respond to lawful requests from governmental authorities.

We do not use information collected through the Extension for any purpose unrelated to the Extension’s single purpose of working your Magiq queue and filling workflow steps from the page you are working in.

4. Where information goes

Information collected by the Extension is sent only to the Magiq application origin at https://tool.usemagiq.com. The Extension does not send data to any other destination.

We do not sell your information. We do not share it with third parties for advertising. We do not use or transfer it to determine creditworthiness or for lending purposes.

We share information only with:

• Service providers who process it on our behalf under contract, such as our identity provider (Auth0) and our hosting and infrastructure providers. These providers may use the information only to provide services to us.

• Your organization, where you use Magiq under an account administered by your employer or another Customer. Your organization’s administrators can see the Customer Data and workflow records associated with its account.

• Legal and safety recipients, when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect the rights, property, or safety of Magiq, our users, or others.

• A successor in the event of a merger, acquisition, or sale of assets, subject to this policy.

5. Retention

• Customer Data and workflow records, including values the Extension extracts into workflow step fields, are retained as part of your organization’s Magiq records for as long as the account is active, and thereafter as set out in the Terms of Service or your organization’s agreement with Magiq.

• The Extension retains nothing beyond the life of the open side panel, other than the authentication tokens described in Section 2.5, which are cleared when you sign out or remove the Extension.

• Account information is retained for as long as your account exists and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

6. Your choices and controls

• Page access. You can revoke the Extension’s page access at any time from chrome://extensions by removing site access for Magiq. The Extension stops reading pages immediately.

• Sign out. Signing out from the Extension’s toolbar menu clears the stored authentication tokens.

• Remove the Extension. Removing the Extension from Chrome deletes its local storage, including any stored tokens.

• Account data. To access, correct, or delete account information or Customer Data, contact your organization’s Magiq administrator or email us at privacy@usemagiq.com. Where you use Magiq through your employer, we may direct your request to your organization, which controls that data.

7. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, or misuse, including encryption of data in transit, access controls, and authentication through Auth0. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children.

9. International users

Magiq is based in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide additional notice, such as by email or a notice in the platform. Your continued use of the Services after the updated policy takes effect means you accept the changes.

11. Contact

Questions, requests, or concerns about this policy can be sent to support@usemagiq.com.