MagicTrees.ai

Data Policy

Last updated September 25, 2026

Effective date: September 25, 2026

This policy describes how Rocketing, LLC handles data across MagicTrees.ai: how it is classified, collected, stored, shared, retained, and deleted. It complements our Privacy Notice and Security Statement.

Data Classification

We classify data as Public, Internal, Confidential, or Restricted (regulated or sensitive). Classification informs handling, access, and retention.

Collection and Minimization

We collect only what is necessary for stated purposes, prefer least-privilege access, and de-identify or aggregate where feasible.

Storage and Handling

Your data is stored on cloud infrastructure (Vercel, Google Cloud, MongoDB Atlas, among others) with encryption in transit and at rest where supported. We apply role-based access controls, multi-factor authentication for privileged access, logging, and periodic access reviews. Production data is never copied to personal devices or uncontrolled environments.

Model Training and Evaluation

We do not use personal data for model improvement unless permitted by law or contract and, where required, consented or de-identified. AI processing is performed by OpenAI, Anthropic and Google under contractual safeguards.

Subprocessors and Vendors

Vendors undergo security and privacy review and sign data-processing terms. Material changes to our subprocessors are notified as required.

International Transfers

We use appropriate transfer mechanisms, such as standard contractual clauses, and supplementary measures as needed.

Retention and Deletion

Retention schedules are defined by data category. Data is deleted or anonymized when no longer needed or upon account deletion, subject to legal holds. See our Data Deletion Instructions.

Incident Response

We maintain an incident response plan with roles, timelines, user-notification criteria, and post-incident reviews. We will notify affected users where required by law.

Audits and Assessments

We conduct periodic reviews and, where required, data protection or AI risk assessments for high-risk features.

Questions: privacy@magictrees.ai