Privacy Policy

This Privacy Policy explains how [COMPANY OR TRADING NAME] (“we”, “us”) collects and uses personal data when you use Magician Helper (the “Service”). We act as the data controller under the EU General Data Protection Regulation (GDPR).

1. Who we are

• Controller: [LEGAL NAME, LEGAL FORM, REGISTRATION NUMBER]
• Address: [POSTAL ADDRESS]
• Contact for privacy questions: [PRIVACY EMAIL]

2. Data we collect

• Account data: email address, password (stored hashed by our authentication provider), optional stage name.
• Content you enter: tricks, methods, routines, practice sessions, ideas, inventory items, photos and files, gigs, fees and payment statuses.
• Client contact data you choose to store (names, companies, emails, phone numbers). You are responsible for having a valid reason to store this information about your own clients.
• Billing data: subscription status and Stripe identifiers. Card details are collected and stored by Stripe, never by us.
• Technical data: connection logs kept by our hosting providers for security purposes.

3. Why we use it (purposes and legal bases)

• Providing the Service and your account — performance of the contract.
• Managing the free trial, subscriptions and invoices — performance of the contract and legal obligations.
• Sending essential emails (sign-in links, password resets, billing) — performance of the contract.
• Keeping the Service secure and preventing abuse — legitimate interest.

We do not sell your data, we do not use it for advertising, and we do not read your content except when you ask us for support.

4. Service providers (processors)

• Supabase (database, authentication, file storage) — region [EU REGION OF YOUR PROJECT].
• Stripe (payments and invoices).
• GitHub Pages (hosting of the web application files).
• [EMAIL PROVIDER, e.g. Resend] (sending transactional emails).

Some providers may process data outside the EU; such transfers rely on the European Commission's standard contractual clauses or an adequacy decision. [CHECK EACH PROVIDER'S TERMS]

5. How long we keep it

• Your account and content: as long as your account exists. When you delete your account, everything is erased immediately.
• After a trial or subscription ends, your data stays available in read-only mode. Accounts inactive for [DURATION, e.g. 24 months] may be deleted after an email notice.
• Invoices and payment records: kept by Stripe and by us as required by accounting law ([e.g. 10 years in France]).

6. Your rights

You can access, correct, export and delete your data at any time from the app: Settings → Your data (export in JSON or CSV) and Settings → Danger zone (account deletion). You also have the right to object, to restrict processing and to lodge a complaint with your data protection authority (in France: the CNIL, www.cnil.fr). For any request, write to [PRIVACY EMAIL].

7. Security

Data is transmitted over encrypted connections (HTTPS). Each account's data is isolated by database access rules, so no other user can read it. Payment details are handled by Stripe. No system is perfectly secure; we will notify you and the authorities of any breach as required by law.

8. Cookies and local storage

We do not use advertising or analytics cookies. The app stores technical information in your browser (session, theme, display preferences, the practice timer) strictly needed for it to work. [UPDATE IF YOU ADD ANALYTICS]

9. Changes

We will inform you by email or in the app of any significant change to this policy.