Privacy Policy

MagicMoon is a print-on-demand platform that lets you generate AI designs, manage your shops and publish products to sales channels. For questions about this policy or your data, contact us at contact@magicmoon.ai.

The data controller is MAGICMOON, a French société par actions simplifiée (SAS) with its registered office at 59 rue de Ponthieu, 75008 Paris, France, SIREN 100 511 690, VAT FR09 100 511 690. Full company details are available in our legal notice.

Account data: your email address and authentication identifiers, managed through our authentication provider.

Content you create: the designs and prompts you generate, your shop and channel configuration, and the connection tokens for the stores and suppliers you link (e.g. Shopify, Etsy, Printify, Gelato).

Payment data: handled by our payment provider Stripe. We never store your full card number.

Technical and usage data: IP address, device and browser information, pages visited and interactions with the interface, including session recordings and heatmaps (see the next section).

We use Microsoft Clarity to understand how the product is used and to improve it. Clarity records anonymised interaction data such as clicks, scrolls, navigation and session replays, and produces heatmaps. By default, Clarity masks text and form inputs in recordings, so the content you type is not captured.

We use Google Analytics 4 (provided by Google) to measure traffic and understand where our visitors come from. Google Analytics runs with Google Consent Mode v2: until you accept, it stays in a denied state and does not write its cookies (such as _ga). We do not use it for advertising or remarketing.

We use PostHog for product analytics, for example conversion funnels and feature usage. PostHog is hosted on its European Cloud, so this data is stored in the European Union.

These three tools only start once you have accepted analytics cookies in our consent banner. You can change or withdraw your choice at any time through the "Manage cookies" link in the footer. Microsoft, Google and PostHog act as processors and may combine this data per their own terms; you can also opt out of cross-site tracking via your browser settings.

Essential cookies: required for authentication and to keep you signed in. These are always active.

Audience measurement cookies: set by Microsoft Clarity, Google Analytics and PostHog to measure usage as described above. They are only set after you consent, and you can withdraw that consent at any time via "Manage cookies" in the footer.

We also store your cookie choice itself in your browser (an entry named mm_consent) so we can remember it; this is strictly necessary and not used for tracking.

We rely on trusted providers to operate the service, each acting as a processor: Supabase (database and authentication), Cloudflare and Vercel (hosting, storage and content delivery), Stripe (payments), Microsoft Clarity, Google Analytics and PostHog (analytics), Replicate and the AI model providers it routes to (image generation and descriptions), and the POD suppliers and sales channels you choose to connect (Printify, Gelato, Shopify, Etsy, WooCommerce).

These providers only process your data to deliver their part of the service.

We process your data to provide the service (contract), to improve and secure it (legitimate interest) and to meet legal obligations. We keep your data for as long as your account is active, and delete or anonymise it on request unless we are required to retain it.

Under the GDPR you can access, correct, delete, restrict or port your data, and object to certain processing. To exercise these rights, email contact@magicmoon.ai.

If you are in the EU, you also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).

Some of our providers (such as Microsoft, Google, Stripe and Replicate) may process data outside the European Union. When that happens, the transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. PostHog is hosted on its European Cloud and keeps this data within the European Union.

We may update this policy as the product evolves; the date above reflects the latest version. For any question about your data, write to contact@magicmoon.ai.