Privacy Policy
Last updated June 1, 2026.
1. Data we collect
Account data (name, email, billing details), the content you create in Master (projects, prompts, files), and operational telemetry (request logs, audit events). We do not buy personal data from third-party brokers.
2. How we use it
To provide the service, bill you accurately, secure the platform, communicate about your account, and improve the product. We do not sell personal data, ever.
3. Legal bases (GDPR)
Contract (to provide the service you signed up for), legitimate interest (security, anti-abuse), legal obligation (tax records) and consent (optional marketing communications).
4. Sharing
We share data only with subprocessors necessary to operate Master — hosting, payments, email and AI providers. A current list is maintained at master-magic.dev/security.
5. International transfers
Where data leaves the EEA, we rely on Standard Contractual Clauses and additional safeguards described in our DPA.
6. Retention and deletion
We retain customer data while your workspace is active and delete it within 30 days of account deletion. Billing records are kept for legally required periods.
7. Your rights
EEA / UK / California residents can request access, correction, deletion, restriction, portability and objection. Email security@master-magic.dev — we respond within 30 days.
8. Cookies
First-party cookies for authentication and preferences. Privacy-preserving analytics. No third-party advertising trackers. Manage preferences in your browser or account settings.
9. Children
Master is not directed at children under 16. If you believe a child has provided us personal data, contact us and we'll delete it.
10. Contact
Privacy questions and requests: security@master-magic.dev. Postal address: Master, s.r.o., Karlovo náměstí 10, 120 00 Prague 2, Czech Republic.