This Privacy Policy explains how Magma, referred to here as Magma or we, collects, uses, and shares information when you visit magmahq.ai or contact us through it. It applies to this website only. Any later engagement to evaluate, prepare, or license data is governed by its own separate written agreement.
Information we collect
Information you provide. When you contact us, we collect what you choose to provide: your name, email address, role, company, and the content of your message.
Information collected automatically. When you visit, our hosting provider records standard technical data in its logs, such as IP address, browser and device type, pages requested, and timestamps. We use this to operate and secure the site. Through the analytics described under Cookies and tracking technologies, we also record site usage events, such as pages viewed, clicks on our own calls to action, form progress (never form contents), and the campaign labels on the link that brought you here.
Categories under California law. The categories of personal information we may collect are identifiers (such as name and email), professional or employment-related information (such as your role and organization), internet or network activity (such as log data and site usage events), and any other information you choose to include in your message. We do not intentionally collect sensitive personal information through the site.
How and why we use information
- To respond to you and discuss working together.
- To operate, maintain, secure, and improve the site.
- With your consent, to understand how the site is used, to connect a submitted form to the campaign or link that brought you here, and to show Magma ads on other platforms to people who visited this site.
- To keep ordinary business records and to comply with legal obligations and enforce our terms.
Where the GDPR applies, we rely on these legal bases: your consent (for analytics cookies and advertising), our legitimate interest in responding to your inquiry and operating the site, and compliance with legal obligations. We do not sell your personal information.
Cookies and tracking technologies
Our hosting provider (Vercel Web Analytics) gives us cookieless, aggregate visit counts; it sets no cookies and does not track you across sites. Our hosting provider may also use strictly necessary cookies or similar technologies to operate and secure its services.
We use PostHog, an analytics service, to understand how the site is used: pages viewed, clicks on our calls to action, and whether the intake form was started, submitted, or failed. Until you make a choice in the consent banner, this runs cookieless and stores nothing on your device. If you accept analytics, PostHog stores a first-party cookie or similar identifier so we can recognize return visits; if you decline, analytics capture stops. Form contents are never sent to analytics.
If, and only if, you accept advertising cookies, we load the LinkedIn Insight Tag and the X (Twitter) pixel. These set cookies and share visit signals with those platforms so we can later show Magma ads to people who visited this site and measure whether our posts and campaigns work. They never load before you choose, and they never receive form contents.
To connect a submitted form to the link that brought you here, we keep campaign labels (UTM parameters), the referring site, and your landing page in your browser’s local storage. That stays on your device unless you submit the form, in which case it is included with your submission.
You can change or withdraw your choices at any time using the Cookie preferences link in the footer. We honor the Global Privacy Control signal: when your browser sends it, advertising tags do not load at all, whatever you click, and we treat it as an opt-out of sharing.
How we share information
We do not sell your personal information. If you consent to advertising cookies, the visit signals shared with LinkedIn and X described above may be “sharing” for cross-context behavioral advertising as defined under California law; you can opt out at any time via the Cookie preferences link or by enabling Global Privacy Control. Beyond that, we disclose information only as follows:
- Service providers. We use a hosting provider (Vercel) to serve the site, a form service (Formspree) to receive intake submissions, and an analytics provider (PostHog) as described above. Each processes information on our behalf, under its own terms, and only as needed to provide its services.
- Scheduling. If you choose to book an onboarding call after submitting the form, your name, email, and company are passed to our scheduling provider (Cal.com) to prefill the booking page.
- Legal and safety. We may disclose information if required by law, regulation, legal process, or a governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to enforce our terms.
- Business transfers. If Magma is involved in a financing, merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy with comparable protections. We may also share high-level information with actual or prospective investors or acquirers.
Data retention
We keep messages only as long as needed to respond, to maintain our ordinary business records, and to meet legal requirements. We delete or de-identify information when it is no longer needed, and we honor deletion requests where we are not otherwise required to retain the information.
Data security
We take reasonable administrative and technical measures to protect the information we hold. No website, transmission, or storage method is completely secure, however, and we cannot guarantee absolute security.
International users
We are based in the United States, and information you submit is processed in the United States, where data protection laws may differ from those where you live. Where required for transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.
Your privacy rights
Depending on where you live, you may have some or all of these rights: to know what we collect and how we use it, to access a copy, to correct inaccurate information, to delete it, to data portability, and, where applicable, to opt out of the sale or sharing of personal information and to limit the use of sensitive information. We do not sell personal information. To opt out of the advertising sharing described above, decline or withdraw advertising cookies via the Cookie preferences link in the footer, or enable Global Privacy Control, which we honor automatically.
Residents of California, Texas, and other states with privacy laws, and individuals in the European Economic Area, the United Kingdom, and similar jurisdictions, may exercise these rights. Individuals under the GDPR also have the right to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with their supervisory authority.
To exercise any right, email ops@magmahq.ai. We will verify your request as the law requires, respond within the time the law allows, and will not discriminate against you for exercising your rights. You may use an authorized agent where the law permits.
Sensitive and regulated data
Please do not send raw sensitive or regulated data through this site or by email. Messages are for high-level, non-sensitive descriptions only, not for raw personal, patient, customer, payment, or credential data. Any handling of actual data, including any regulated data, takes place only under a separate written agreement and an appropriate, reviewed process. Some data may not be eligible for transfer or licensing.
Children’s privacy
The site is for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16, or from anyone under 13 as defined by the Children’s Online Privacy Protection Act. If you believe a child has provided us information, contact us and we will delete it.
Third-party links
The site may link to third-party sites or services that we do not control. This policy does not apply to them, and we are not responsible for their privacy practices. Please review their own policies.
Changes to this policy
We may update this policy from time to time, and we review it at least every 12 months. The date at the top reflects the latest version, and we will note material changes here. Your continued use of the site after an update means you accept the revised policy.
Contact
Magma, 6100 Main St., MS-1531, Houston, TX 77005. Email: email us.