Privacy policy

1. Who we are

This website is run by Magicod Technologies Pte. Ltd., a company incorporated in Singapore, trading as Magic Dev Studio ("we", "us"). We are the organisation responsible for the personal data described here. Questions or requests: info@magicsas.app.

This policy covers magicdevstudio.app. Our software product at magicsas.app has its own privacy policy.

2. What we collect

When you browse this site

• Analytics data (Google Analytics 4). Pages you view, how you arrived (for example a search engine or a link), approximate location (country or city), device and browser type, and whether you clicked our WhatsApp or email links. GA4 uses cookies (named _ga and _ga_<ID>) to tell visits apart. Google states that GA4 does not log or store IP addresses.
• Vercel Web Analytics. Anonymous page-view counts (page, referrer, country, device type). It does not use cookies and does not identify you.
• Technical logs. Our hosting and security providers (Vercel and Cloudflare) process your IP address, browser details and request times to deliver the site and protect it from abuse. They may set strictly necessary security cookies.

When you contact us

• Contact details — your name, phone number, email address and business name.
• Project content — what you send us to build your site: text, logos, photos, and details about your business, services and prices.
• Messages — our WhatsApp and email conversations with you.
• Contact form — if you use the form on this site, the name, business name, email and message you type, plus the page and campaign reference you came from. It is stored in our own customer-relationship system (MagicSAS CRM, hosted with Supabase) and a copy is emailed to our sales inbox.

We do not ask for, and you should not send us, sensitive personal data (such as health information or government ID numbers) or passwords. Payment details are handled by your bank or payment provider; we do not store card numbers.

3. Why we use it

• To reply to your enquiry, quote, and deliver the work you ask for (to take steps at your request and perform our contract with you).
• To understand which pages are useful and improve the site (our legitimate interest; and, where the law requires it, your consent to analytics cookies).
• To keep the site secure and working (our legitimate interest).
• To keep business and tax records (legal obligation).

We do not sell your personal data, and we do not use it for advertising.

4. Who we share it with

• Google — Google Analytics 4 (analytics). See Google's privacy policy and how Google uses data from sites that use its services.
• Supabase — the database behind our CRM, where contact-form enquiries are stored.
• Vercel (hosting) and Cloudflare (content delivery and security).
• WhatsApp (Meta) and our email provider — when you message us, your message passes through their services.
• Providers you choose — for example your domain registrar or hosting company, when we set up your site at your request.
• Authorities, where the law requires it.

Some of these providers process data outside your country, including in the United States and Singapore. Where the law requires it, we rely on appropriate safeguards such as the providers' standard contractual clauses.

5. How long we keep it

Google Analytics data is kept for the retention period set in our GA4 property (up to 14 months). Enquiry messages and project files are kept while we're working with you and for as long as needed afterwards for support, records and legal claims — typically no more than 5 years, unless you ask us to delete them sooner and we're allowed to.

6. Your choices and rights

• Analytics: you can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
• Access, correction and deletion: you can ask what personal data we hold about you, ask us to correct it, or ask us to delete it.
• If you are in the EU, UK or a similar jurisdiction, you can also object to or restrict processing, ask for data portability, withdraw consent at any time, and complain to your local data protection authority.
• If you are in Singapore, you have the rights given by the Personal Data Protection Act 2012 (PDPA).

Email info@magicsas.app to make a request. We'll reply within 30 days.

7. Children

This site is for businesses. It is not directed at children, and we don't knowingly collect children's personal data.

8. Changes

We'll update this page if our practices change, and change the "last updated" date at the top.