Skip to content

Privacy policy

Last updated:

The Spanish version of this document prevails.

Who handles your data

The controller is Yoinet Proyectos en la Red SL, tax ID B86286705, Serrano 93 3ºE, 28006 Madrid (Spain), phone +34 919 588 470. For anything about your data, email us at hola@magigraphy.com.

Data protection officer: (to be confirmed).

What data we process

  • Your account: your email and, if you log in with Google, your name and your Google account identifier. Also your workspace, your plan and, on Studio, who is a member and in what role.
  • Sign-in links: when you ask for a link by email, we store your email, the page you return to after logging in and a fingerprint of your IP address. Of the link itself we only store its fingerprint, never the link. It expires after 15 minutes and works only once.
  • Invitations: if the owner of a Studio workspace invites you, we store your email to send you the invitation and to check that it is you who accepts it.
  • Your photos and your results: the file you upload and the copy we prepare for the studio, the area you choose, the text you write, the attempts you generate and the exports.
  • Payments: Stripe handles them. We never see or store your card details. We keep the Stripe customer and subscription identifiers, the plan, its status and the period dates.
  • Credits: the ones you receive and the ones you use on each magigraph.
  • Your consents: the withdrawal waiver you tick when paying and, if you tick it when signing up, the optional box for news by email. For each one we keep the date, who gave it and the version of the text.
  • Views of what you publish: we count how many times each publication loads, per day and per channel (web or email), and each workspace's total for the month. We store no data about the people who see it: neither their IP address nor cookies. Their browser is checked only so that robots are not counted, and we don't store that either. Like any visit to a website, their request goes through our hosting provider (Vercel), which processes the request's technical data, such as the IP address, as our processor.
  • The waitlist: your email, the language, the version of the text you accepted, the date you joined, the date of the confirmation email and a fingerprint of your IP address.

The IP address fingerprint is calculated with SHA-256 and a secret key, and it is used to limit how many links or sign-ups are requested from the same connection. The IP itself is not stored.

If other people appear in your photos, their data is processed too.

Why we use it and on what basis

  • Providing the service you sign up for: your account, generating attempts, exporting, publishing, credits, the plan and the team. Basis: the contract (article 6.1.b GDPR).
  • Analysing your photo in Auto mode to suggest what moves, and writing the motion description of each attempt. Basis: the contract.
  • Charging and invoicing. Basis: the contract and the legal obligation to keep invoices (article 6.1.c).
  • Sending you the service emails: sign-in links, invitations and the notice that your workspace reached its view limit. Basis: the contract.
  • Keeping the withdrawal waiver, so that we can prove it. Basis: legal obligation (article 6.1.c).
  • Telling you about the launch if you join the waitlist. Basis: your consent (article 6.1.a). We will only email you about the launch.
  • Sending you news and examples if you tick the optional box when signing up. Basis: your consent. The box comes unticked. If you sign up with an email link, the consent is only recorded if you open the link in the same browser where you ticked the box.
  • Protecting the service from abuse: the limits on links and sign-ups per connection and the daily limit on free trials. Basis: our legitimate interest in keeping the service working and free from abuse (article 6.1.f).

You can withdraw your consent at any time, without affecting what was done before. To leave the waitlist, use the link in the confirmation email. For anything else, email us.

Who we share it with

To provide the service we use these providers, which process data on our behalf:

  • Vercel (United States): hosts the website and runs the server in its iad1 region, in the United States, and processes the technical data of each request, such as the IP address. It stores photos, videos and exports in Vercel Blob, in its fra1 region, in the European Union.
  • Neon: the database, in the region (to be confirmed).
  • fal (United States): runs the artificial intelligence models. It receives the whole photo to separate the area that moves, in the Auto mode analysis and when you select an area with AI. In each attempt it also receives the cut-out of the photo to be animated.
  • MiniMax (China): the model that generates the video. We explain it separately below.
  • Anthropic (United States): in Auto mode it analyses the photo to suggest what moves and how. In each attempt it also receives the cut-out to be animated, to write the motion description.
  • Stripe: payments, invoices and subscription management.
  • Resend (United States): sends the emails, from the address shown as the sender in each one.
  • Google: if you choose to log in with Google, it confirms your email and your name to us.

We will also share data with the authorities when the law requires it. If Yoinet sells Magigraphy or the business it belongs to, the data would pass to the buyer so it can keep providing the service, as the Terms say.

Transfers outside the European Union

Vercel, fal, Anthropic and Resend are in the United States, so your data may leave the European Union.

The transfer to China: MiniMax

The video of each attempt is generated by a model from MiniMax, a Chinese company. To generate it, the cut-out of your photo to be animated and the motion description reach MiniMax through fal.

China has no adequacy decision from the European Commission, which means the European Union does not recognise that it protects personal data to an equivalent level.

How long we keep it

  • Your account: while it exists.
  • Your photos, attempts and exports: (to be confirmed).
  • What you publish: the photo keeps being served while the publication exists.
  • Sign-in links: they expire after 15 minutes.
  • Invitations: they expire after 7 days.
  • Payments and invoices: (to be confirmed).
  • Consents: (to be confirmed).
  • The waitlist: until you leave it with the link in the confirmation email, when it is deleted.
  • Cookies: as long as each one lasts, according to the Cookie policy.

Your rights

You have the right to:

  • access your data;
  • have it corrected;
  • have it deleted;
  • object to its processing, or have its processing restricted;
  • receive it in a format you can take to another service.

Email us at hola@magigraphy.com from your account's email address, or write to the postal address above. We will reply within one month, which may be extended if the request is complex.

If you disagree

If you believe we are not handling your data properly, you can complain to the Spanish Data Protection Agency (AEPD), at www.aepd.es.

Changes to this policy

If we change it, we will publish the new version here with its date.