Privacy & Compliance Policy

Last updated: 25/05/2026


1. Data Controller & Processor

URLMagic acts as a Data Processor, and our users act as Data Controllers. We process personal data solely to provide our image processing and analytics services as instructed by you.


2. GDPR & CCPA Compliance

We are committed to data privacy. We implement technical measures to protect data handled via Google Cloud and Firebase. Users (Data Controllers) are responsible for ensuring they have the legal basis to upload images or process personal data (such as faces or identifiable information) through our platform.


3. Cookie Compliance

We use essential cookies to maintain session security and authenticate users via Google Auth. By continuing to use URLMagic, you consent to our use of these essential cookies. We do not use non-essential tracking or advertising cookies on the URLMagic domain.


4. How We Handle Your Data

  • Storage: Images and metadata are stored on encrypted Firebase/GCP infrastructure.
  • Third Parties: We use Stripe for payment processing and Google Cloud for infrastructure. We do not sell your personal data to third parties.
  • Retention: Data is retained only as long as your account is active or as required by law.

4. Chatbot & Interactive Assistant Privacy Policy

By using our interactive chat assistant, you agree to the collection and processing of information voluntarily provided during your session. This data includes full chat transcripts, contact details (such as your email address), business qualification metrics (website platform and image volume parameters), and your IP address, which is collected strictly for security, performance optimization, and rate-limiting. In compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable global privacy laws, this data is processed solely to fulfill your requests for automated image audits, register your free trial intent, and manage business inquiries. Your conversation parameters are transmitted securely to our third-party artificial intelligence sub-processors (including Google Gemini API) under strict data protection addendums and are never sold or used for independent model training. You maintain the right to access, restrict, or request the permanent deletion of your conversational records at any time by contacting our data privacy officer.


5. Your Rights

Under GDPR/CCPA, you have the right to access, rectify, or request deletion of your data. To exercise these rights, contact [email protected]. We will process requests within 30 days.


6. Changes to this Policy

We may update this policy periodically. Significant changes will be reflected in our Change Log. Continued use of URLMagic constitutes acceptance of the updated privacy practices.