# Privacy Policy — MagicboxGPT

*MagicboxGPT privacy policy — we only ever see what you forward, no human reads your documents, they are never used to train AI, and everything is stored in India.*

Last updated: 6 July 2026

MagicboxGPT helps you organise your documents and life admin. This policy explains what we collect, how we use it, and your choices — in plain language.

## What we collect

**We only receive what you choose to send us.** MagicboxGPT does not connect to, scan, or read your email or WhatsApp inbox, and it does not go looking through your accounts. Nothing reaches us unless you forward or upload it yourself.

- **Your email address** — to create your account and send sign-in links and service emails.
- **Documents you send us** — anything you forward or upload (tickets, bills, receipts, policies, and so on), including the files and the information we extract from them.
- **Basic usage data** — standard logs (for example, when you sign in) needed to run and secure the service.

## How we use it

- To read, extract, organise, and file the documents you send, and to answer your questions about them.
- To send you sign-in links, confirmations, and reminders.
- To operate, secure, and improve the service.

We do **not** sell your data or share it for advertising.

## How your documents are stored and who can access them

Your documents live in a private, access-controlled space, isolated to your account — no other customer can ever see your data. Only you, and anyone you choose to invite, can access your files through the app.

To provide the service, our systems process your data: our AI reads your documents to extract and organise the information, and a small number of authorised people or automated systems acting on our behalf can technically access data where strictly necessary to run, debug, or secure the service. We treat that access as a last resort and keep it to a minimum.

## Service providers we use

- **Supabase** — database, file storage, and authentication.
- **Anthropic (Claude)** — AI that reads and extracts information from your documents.
- **Resend** — sending our emails.
- **Cloudflare** — hosting and email routing.

These providers process data on our behalf under their own security and privacy commitments.

## Data retention & deletion

We keep your data while your account is active. You can ask us to delete your account and data at any time by emailing [hello@magicboxgpt.com](mailto:hello@magicboxgpt.com), and we'll remove it.

## Security

We use access controls, encryption in transit, and per-account isolation. No system is perfectly secure, but we take reasonable measures to protect your data.

## Children

MagicboxGPT is not intended for children under 16.

## Changes

We may update this policy; we'll post the new version here with a revised date.

## Contact

Questions? Email [hello@magicboxgpt.com](mailto:hello@magicboxgpt.com).