LEGAL

Privacy Policy

Last updated: August 7, 2026

This policy explains how Magellan XAI collects, uses, stores, and discloses information when you use the website and application. Magellan processes sensitive business-financial data, so the service is designed to separate deterministic calculations from optional artificial intelligence features.

Information we collect

  • Account information, including your email address and authentication identifiers.
  • Business and financial information you enter, including cash balances, income, expenses, invoices, debts, categories, dates, notes, and forecast settings.
  • Product records needed to operate the service, including snapshots, subscription state, share-link settings, reminder preferences, calculation audit metadata, and security logs.
  • Limited technical information generated by hosting and security systems, such as request timestamps, error details, and network information used to prevent abuse.

How we use information

We use your information to authenticate you, save and restore financial records, calculate forecasts and risk indicators, process subscriptions, deliver requested reminders, create user-controlled share links, secure the service, diagnose failures, and comply with legal obligations. We do not sell your financial information.

Optional AI processing

When AI features are enabled and you request AI-assisted analysis, relevant portions of your prompt and financial context may be sent to Google's Gemini service to generate narrative explanations, insights, or recommendations. We minimize the context sent and do not require direct personal identifiers in those prompts. Google processes that information as an independent service provider under its applicable terms and data-processing commitments.

You can disable AI processing in Account Settings. Turning it off blocks Magellan's AI endpoints for your account; deterministic forecasts, risk calculations, and saved-data tools remain available. Magellan does not represent that AI output is guaranteed, complete, or a substitute for professional financial advice.

Service providers

We use service providers only as needed to operate the product:

  • Supabase for authentication, database storage, and access controls.
  • Stripe for checkout, subscription management, and payment processing.
  • Vercel for application hosting, delivery, and operational infrastructure.
  • Google Gemini for optional AI-assisted features when you enable and use them.
  • Your configured email provider for account and reminder messages.

These providers may process information in locations where they operate. Their own privacy terms and contractual safeguards apply to the services they provide. Magellan does not store complete payment-card numbers.

Share links

If you create a public forecast share link, anyone with the exact link can view the information included in that share until it expires or you revoke it. Do not include confidential details that you do not intend the recipient to see. Share links are random, time-limited, and revocable, but forwarding by a recipient remains outside Magellan's control.

Retention and deletion

Active account data is retained while needed to provide the service. Financial snapshots are subject to product retention limits, while security, billing, and append-only calculation records may be retained longer where needed for fraud prevention, dispute handling, audit integrity, or legal obligations. You may request account deletion by contacting us. Some records may remain in backups or where retention is legally required.

Cookies and local storage

Magellan uses essential browser storage and authentication tokens to keep you signed in, preserve security state, and provide requested functionality. The current application does not load third-party advertising trackers. Hosting and security providers may still generate operational logs necessary to deliver and protect the service.

Security

We use access controls, encrypted network connections, server-side authorization, data validation, rate controls, and restricted service credentials. No online service can guarantee absolute security. Do not reuse your Magellan password elsewhere, and report suspected account compromise promptly.

Children

Magellan is a business-financial product and is not directed to children. Do not submit a child's personal information through financial descriptions, notes, prompts, or share links.

Changes to this policy

We may update this policy as the product, vendors, or legal requirements change. The updated date above identifies the current version. Material changes will be communicated through an appropriate product or account notice when required.

Contact

For privacy questions, access requests, corrections, or deletion requests, contact info@magellanxai.com.