Privacy Policy

1. Introduction

Ochsz Holdings Limited ("Magnet", "we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use Magnet Pro ("the Service").

2. Information We Collect

2.1 Information You Provide

• Account information: Email address, password (encrypted), name, profile picture (if signing in with Google)
• Payment information: Card details and billing address (processed by our payment processor — we do not store full card numbers)
• Instagram credentials: Username, password, and 2FA security codes used to authenticate with Instagram on your behalf (encrypted)
• Targeting preferences: Account targets, interests, age brackets, gender, locations, DM templates
• Communications: Messages you send to support, feedback, and survey responses

2.2 Information We Collect Automatically

• IP address, device information, browser type, operating system
• Pages visited, features used, time spent on the Service
• Cookies and similar tracking technologies (see Cookies section below)
• Server logs of your API requests (with sensitive fields masked)

2.3 Information from Instagram

When you connect your Instagram account, we collect:

• Your Instagram username, profile picture, follower and following counts
• Public profile data of accounts you target and interact with
• Engagement data resulting from automated actions performed on your behalf

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Authenticate you and connect to your Instagram account
• Execute the automated growth actions you've configured
• Process payments and manage subscriptions
• Send transactional emails (account, billing, security)
• Send marketing emails (you can unsubscribe at any time)
• Respond to support requests
• Detect, prevent, and address technical issues, fraud, and abuse
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share data only as described below:

• Service providers: We work with trusted third parties for hosting (Vercel, Railway), payment processing (Stripe), email delivery, analytics, and Instagram data scraping (Apify). These providers only access data needed to perform their functions.
• Legal compliance: We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of others.
• Business transfers: If Magnet is acquired or merged, your information may be transferred to the new entity, subject to this Privacy Policy.
• With your consent: For any other purpose disclosed at the time you provide the information.

5. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing
• AES encryption for stored Instagram credentials
• JWT token authentication with expiration
• Restricted database access with audit logging
• Regular security reviews and updates

However, no method of transmission or storage is 100% secure. You use the Service at your own risk and are responsible for keeping your password confidential.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 90 days to handle disputes, comply with legal obligations, or prevent abuse, after which it is permanently deleted from our active systems.

Backup copies may persist for up to 1 year before being purged.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data ("right to be forgotten")
• Portability: Request a machine-readable copy of your data
• Objection: Object to certain types of processing (e.g., marketing)
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise these rights, contact us at contact@marketingbymagnet.com.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in (authentication tokens)
• Remember your preferences
• Analyze usage patterns to improve the Service
• Measure the effectiveness of marketing campaigns

You can control cookies through your browser settings. Disabling cookies may break certain features.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it immediately.

10. International Users

Magnet operates from the United States. If you are located outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer.

11. Third-Party Links

The Service may contain links to third-party sites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Service. Continued use after changes take effect constitutes acceptance.