Privacy Policy

MagicLead.ai ("MagicLead," "we," "us," or "our") provides an AI-powered chat platform that helps insurance agencies capture and qualify leads from their websites. We operate at magiclead.ai.

This Privacy Policy applies to two groups of people: Agency Customers (insurance agencies and their team members who subscribe to MagicLead) and Visitors (people who interact with an AI chat widget embedded on an agency's website).

From Agency Customers

• Account information: name, work email address, agency name, and password.
• Billing information: payment card details processed and stored securely by our payment processor (Stripe). We do not store full card numbers.
• Agency configuration: website URL, agent settings, notification preferences, and knowledge base content you upload.
• Usage data: log-ins, features used, and support communications.

From Visitors (via the chat widget)

• Contact information: name, email address, and phone number — only when voluntarily shared in the conversation.
• Insurance interest details: type of coverage sought, urgency, and any notes the visitor shares about their needs.
• Conversation transcripts: the full text of each conversation with the AI agent.
• Session metadata: timestamp and a randomly generated session identifier. We do not collect IP addresses or device fingerprints for visitors.

Automatically collected data

We collect standard web server logs and performance metrics to keep the service running reliably. This includes browser type, pages visited within the dashboard, and error reports.

• Providing, operating, and improving the MagicLead platform.
• Delivering AI chat responses to website visitors on behalf of the agency.
• Sending lead notifications and conversation summaries to agency users.
• Processing payments and managing subscriptions.
• Providing customer support.
• Detecting and preventing fraud and abuse.
• Analyzing aggregated, anonymized usage trends to improve our product. We do not sell or share individual conversation data for advertising purposes.
• Complying with legal obligations.

We do not sell your personal information. We share data only as described below.

• Service providers: We use a small number of trusted third-party services to operate MagicLead:
  • Anthropic — AI inference. Conversation messages are sent to Anthropic's API to generate responses. Anthropic's usage policies apply.
  • Supabase — Database and authentication infrastructure, hosted in the United States.
  • Resend — Transactional email delivery (lead notifications, OTP codes).
  • Stripe — Payment processing.
  • Voyager AI — Semantic search embeddings for the knowledge base.
• Agencies (for visitor data): Conversation data and visitor contact information collected through an agency's chat widget is visible to that agency inside their MagicLead dashboard. Each agency is independently responsible for their use of that data.
• Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users or the public.
• Business transfers: If MagicLead is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify affected users.

Agency account data is retained for the duration of the subscription plus 90 days after cancellation, during which the account can be reactivated. After 90 days, account and agency configuration data is deleted.

Conversation transcripts and lead data are retained for as long as the agency's account is active. Agencies can delete individual leads and conversations from their dashboard at any time.

We retain anonymized, aggregated usage statistics indefinitely to improve the product.

We use session cookies to keep you logged into your dashboard, and minimal analytics cookies to understand how the platform is used. The AI chat widget embedded on third-party agency websites sets a session cookie to maintain conversation continuity for the visitor. See our Cookie Policy for details.

We implement industry-standard safeguards including encryption in transit (TLS), encryption at rest for sensitive data, role-based access controls, and regular security reviews. Passwords are hashed using bcrypt and never stored in plain text.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please disclose it responsibly to security@magiclead.ai.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request that we delete your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities.
• Withdrawal of consent: Where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email legal@magiclead.ai. We will respond within 30 days.

Visitors whose data was collected through an agency's chat widget should contact that agency directly, as they are the data controller for that information.

MagicLead is intended for use by insurance agencies and adult consumers. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently collected such information, please contact us immediately.

MagicLead is based in the United States. Data is stored and processed in the US. If you access MagicLead from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please note that your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) where required for cross-border transfers.

We may update this policy from time to time. We will notify agency customers by email and by posting a notice in the dashboard at least 14 days before material changes take effect. Continued use of the service after changes become effective constitutes acceptance of the updated policy.

MagicLead.ai — Privacy Team
legal@magiclead.ai