Magnatic

Magnatic ("Magnatic", "we", "us", or "our") respects your privacy. This Privacy Policy explains what personal data we collect when you visit magnatic.life or use our assessment and report ("Services"), how we use it, who we share it with, and the rights you have over it.

This Policy is provided in accordance with the EU General Data Protection Regulation (GDPR) 2016/679, the Finnish Data Protection Act (1050/2018), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

1. Data controller

The data controller for your personal data is:
Magnatic
Teollisuuskatu 3B, 00510 Helsinki, Finland
Email: support@magnatic.life

2. Personal data we collect

Assessment responses: the answers, ratings, and free-text inputs you provide during the quiz (including age range, relationship situation, goals, and behavioral answers).
Contact details: your name and email address when you submit them to receive your report.
Order and payment data: products purchased, amount, currency, country, and a Stripe payment reference. Card numbers are processed directly by Stripe and never stored on our servers.
Technical data: IP address, approximate location, device, browser, operating system, referrer, and pages viewed.
Marketing identifiers: cookies and pixel IDs from Google, Meta, and TikTok used to measure ad performance.
Communications: emails you send us and our replies.

3. How we use your data and legal bases

To deliver the assessment and report — necessary for performance of the contract you enter into when you request your report.
To process payments — performance of contract and compliance with legal (accounting) obligations.
To send transactional emails (receipt, report delivery, abandoned-checkout reminders) — performance of contract and legitimate interest in completing the order.
To improve the Services and measure marketing — our legitimate interest in operating and growing a sustainable product, balanced against your privacy.
To comply with law — tax, accounting, fraud prevention, and responding to lawful requests.
Marketing pixels and analytics cookies — with your consent where required.

4. Sharing your data

We do not sell your personal data. We share it only with vetted service providers (processors) that help us operate Magnatic:

Stripe — payment processing (US, EU).
Supabase / Lovable Cloud — database and authentication hosting (EU/US).
Resend (or our email service provider) — transactional email delivery.
OpenAI / Google AI — generation of the personalized report from your anonymized answers.
Google Analytics, Meta Pixel, TikTok Pixel — analytics and ad measurement.
Cloudflare — hosting, CDN, and security.

We may also disclose data if required by law, to protect our rights, or in connection with a corporate transaction (merger, acquisition, sale of assets), in which case you will be notified.

5. International transfers

Some providers process data outside the EEA (e.g. United States). Where this happens, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision to safeguard your data.

6. Data retention

Quiz answers and reports: up to 24 months from your last interaction, then deleted or anonymized.
Order and invoice records: 6 years, as required by Finnish accounting law.
Marketing analytics: aggregated and retained per provider's standard retention.
You can request earlier deletion at any time (see Section 8).

7. Security

We use TLS encryption in transit, encrypted storage at rest, role-based access controls, and least-privilege service credentials. No system is 100% secure, but we take your data seriously and will notify you and the relevant supervisory authority of any qualifying breach within 72 hours.

8. Your rights

Under GDPR and similar laws, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion ("right to be forgotten").
Restrict or object to processing.
Receive your data in a portable format.
Withdraw consent at any time (without affecting prior processing).
Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or your local supervisory authority.

To exercise any of these rights, email support@magnatic.life. We respond within 30 days.

9. Cookies and tracking

See our Cookie Policy for details on the cookies and pixels we use and how to control them.

10. Children

Magnatic is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. The "last updated" date at the top of this page indicates the current version. Material changes will be communicated by email or in-product notice.

12. Contact

Magnatic — Teollisuuskatu 3B, 00510 Helsinki, Finland
Email: support@magnatic.life