Privacy policy

Who we are

Magic Relay is operated by Distribution AI Inc. ("we", "us"). It lets the AI agent you choose, such as Claude or ChatGPT, work with the social media accounts you connect: posting and scheduling, reading analytics, and handling comments, mentions and messages.

This policy covers our website and web app at https://magicrelay.com, our MCP server and the plugins and connectors that link Magic Relay to AI agents (together, the "service").

What we collect

What you give us

• Account details: your email address and sign-in details, or the Google account you sign in with.
• Context you add: your brand name, niche, time zone and anything else you tell us about your brand, audience or style.
• Messages to us: what you send when you contact support or give feedback.
• Payment details: if you buy a paid plan, our payment processor collects your payment information. We only receive limited details, such as the card brand and last four digits. We never see or store full card numbers.

What we import from social accounts you connect

When you connect an account, you sign in with that platform and approve the permissions we ask for. We then import and sync information through the platform's official API, limited to those permissions. Depending on the platform, that can include:

We only collect this through official platform APIs, and only with your permission. We never scrape, and we don't buy or use scraped data.

What's created as you use the service

• Your drafts and scheduled posts, and media you upload.
• An action log: each action taken through the service, which agent asked for it, who confirmed it, when, and what each platform answered.
• Technical data: IP address, browser and device type, pages visited and errors. We use it to run and secure the service.
• Cookies: only the ones that keep you signed in and keep the service secure. No advertising cookies.

How we use and store it

We use your information to:

• Run the service: post and schedule what you approve, show your analytics, organize your inbox and answer the requests your agent makes for you.
• Build your brand profile, described below, so your agent can write in your voice.
• Keep the service secure, prevent spam and abuse, and enforce our terms of service and each platform's rules.
• Send you service messages, like security alerts or changes to these terms.
• Understand, in aggregate, how the service is used so we can fix problems and improve it.
• Meet legal obligations.

Information from your connected accounts is used only to provide the service to you. It isn't used for advertising, isn't used for anyone else, and isn't used to train AI models that serve other people.

Your information is stored with our hosting and database providers in the United States. Data is encrypted in transit and at rest, platform access tokens are kept in an encrypted vault, each customer's data is isolated from every other customer's at the database level, and only the people who run the service can reach production systems. No system is perfectly secure. If you find a security issue, tell us at hello@magicrelay.com.

Your AI agent and your data

Magic Relay works with the AI agent you choose. You approve each agent before it can reach your accounts. When an agent asks for something on your behalf, we send it what it needs to answer, such as your recent posts, your analytics or your comments.

Once it reaches your agent, that information is handled by your agent's provider under its own terms and privacy policy, not this one. You can remove an agent's access at any time.

A person confirms every post, reply, message or other action that sends something on your behalf before it goes out, and every action is logged with the agent that asked for it.

Your brand profile

When you connect an account, we use the posts we import from it to build a profile of your voice, your topics and what performs well for you. Agents you approve can read it so their drafts fit your style. You can add to it, change it or delete it.

Your brand profile is built only from your own posts and metrics. It never includes your direct messages or personal information about your followers, and it's never used for anyone but you.

What we never do

• Sell your personal information or your connected account data.
• Share it with advertisers or data brokers, or use it for targeted advertising.
• Scrape platforms or use scraped data.
• Post, reply or send a message without your confirmation.
• Use your data, or your followers' data, to serve any other customer.

Who we share it with

We share information only:

• With the AI agents you approve, when they make a request for you.
• With the social platforms, when you tell us to post, reply, message or moderate there.
• With service providers who run parts of the service for us: hosting, database and sign-in, file storage, email delivery and payments. They may use it only to provide those services to us.
• For legal reasons, when the law requires it, or to protect the rights and safety of our users, the public or Magic Relay.
• In a business transfer, like a merger or acquisition, where it stays covered by this policy.
• With your permission, in any other case.

Platform terms

We use data from each platform as that platform's developer terms allow, including the Meta Platform Terms (Facebook, Instagram and Threads), the X Developer Agreement and Policy, the LinkedIn API Terms of Use, the TikTok Developer Terms of Service and the Reddit Data API Terms. Where a platform's rules are stricter than this policy, we follow the platform's rules.

You can also review or remove Magic Relay's access inside each platform's own settings. Our data deletion page says where.

Retention

• Connected account data is kept while the account stays connected. When you disconnect an account, we delete its access tokens, imported posts, metrics, comments, mentions, messages and media right away, along with the action log entries about it.
• Posts deleted on the platform: when a platform tells us a post was deleted, we delete our copy.
• Everything else (your settings, brand profile, drafts and action log) is kept until you delete your data or close your account.
• Backups: our providers keep encrypted backups that are overwritten on a rolling schedule. Deleted data is gone from them within 30 days.
• Legal holds: we may keep specific records longer when the law requires it.

Your controls, including deletion

You can:

• Disconnect any social account, or remove any agent's access, at any time.
• See, correct, export or delete your information, including your brand profile.
• Delete all your data, or close your account entirely.
• Opt out of non-essential emails with the link in any of them.

The data deletion page has step-by-step instructions.

Depending on where you live, you may have more rights, such as knowing what personal information we hold about you, getting a copy, correcting or deleting it, objecting to some uses, and appealing our decision on a request. California residents have these rights under the CCPA. We don't sell or share personal information for cross-context behavioral advertising, and we won't treat you differently for using your rights.

To make a request, email hello@magicrelay.com from the address on your account. We'll answer within the time the law requires. You can also have an authorized agent make a request for you.

Children

The service is for people 18 and older. We don't knowingly collect information from children. If you think a child has given us information, email hello@magicrelay.com and we'll delete it.

International users

We're based in the United States, and we process information here and in the other countries where our providers operate. When information moves across borders, we use the safeguards the law requires.

Changes to this policy

We'll update this policy as the service changes. If a change is material, we'll tell you by email or in the service before it takes effect. The date at the top shows when it last changed.

Contact

Questions or requests about privacy: hello@magicrelay.com