Effective November 6, 2026 · Magic Buttons is operated by AI Assist Lab. Contact: our Support page.
Information we handle
- Website and support: technical request information such as IP address, browser information and server logs; information you choose to send in a support email or call booking, including your name, email, company, team size, software and notes.
- Accounts: company and profile details, sign-in records, password hashes, subscriptions, installed buttons and configuration.
- Connected workflows: the message, sender and recipient details, subject, body, attachments and business records needed for the action you request. Access depends on the permissions you grant and the connector you use.
- Connection information: authorization tokens or API keys, and, for supported sign-in workflows, the account details and browser session needed to connect your software.
- Workflow history: run status, timing, errors, completed steps and field corrections. Configuration may remember your company’s vendor mappings or accounting defaults.
How we use information
We use this information to operate your account, carry out the workflows you request, maintain your connections, provide support, arrange calls, manage subscriptions and protect the service. A document workflow may upload your chosen attachment or extracted fields into the business system you selected.
Email and AI processing
When you use an email action, relevant message content and attachments may be processed on our servers and by the AI service configured for that workflow to extract fields or prepare a draft. Local AI is an option under evaluation, not a guarantee that every workflow stays on your device. Ask our team about the processing arrangement before using sensitive records.
We do not use data obtained through Google Workspace APIs to train, develop or improve general-purpose or non-personalized AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used for the user-facing workflow you authorize, not advertising or sale.
Who receives information
Information goes to the email and business-software providers you connect, the calendar provider when you schedule a call, and service providers needed to operate the selected features, such as hosting, security, AI processing and payment services. If a payment checkout is available, the payment provider handles card details. Your call notes may appear in the representative’s calendar invitation.
Authorized team members may access information when you request support or configuration, to investigate security incidents, or when required by law. We may disclose information to comply with a legal obligation or protect users and the service. We do not sell email or attachment content or use it to target advertising.
Storage and security
Connected-account secrets are stored encrypted at rest; account passwords are stored as hashes. Browser-based connections may retain a signed-in session on the service. No system is completely secure. Do not include passwords, API keys or customer documents in the public request brief, scheduling notes or support emails.
We retain account information, connection configuration and workflow history for operating the service, support, security and applicable legal or accounting needs. Some records remain until removed through support. Disconnecting a provider does not automatically erase past workflow records or records already saved in your business software.
Your choices and deletion requests
You can remove supported connections in the app and revoke access in your provider’s account settings. To request access, correction or deletion, contact us through our Support page from your account email. We may verify your identity and authority for the company before acting. Legal, security or accounting obligations may require retaining limited records; we will explain applicable limits.
Browser storage and third-party pages
The customer app uses browser storage for your sign-in session. The public button-design brief is created in your browser and stays there until you copy, download or share it. Scheduling sends the details you submit to our service. Our website loads fonts from Google Fonts, so your browser may send Google technical request information such as your IP address. Connected providers and external links have their own privacy policies.
Children and updates
Magic Buttons is a business service intended for adults, not children under 13. We may update this policy as features change and will identify the effective date here. Where a new use of connected data requires consent, we will seek it before that use.