Privacy Policy
Last updated: January 1, 2026
1. Overview
Magic Self (“we,” “us,” “our”) operates the website magic-self.dev. This Privacy Policy explains how we collect, use, and protect your personal information when you use Magic Self.
We are committed to protecting your privacy. We do not sell, rent, or trade your personal data to third parties under any circumstances.
2. Data We Collect
When you use Magic Self, we collect the following information:
- Account information — your email address and name via Clerk authentication
- Resume data — the PDF file you upload and the structured data extracted from it (name, contact details, work experience, education, skills)
- Usage data — pages visited, features used, and interactions with the platform, collected via Vercel Analytics
- Username — the URL slug you choose for your public profile
3. How We Use Your Data
Your data is used exclusively to:
- Generate and host your personal website at magic-self.dev/yourname
- Allow you to edit and manage your website content
- Authenticate your identity and secure your account
- Improve the platform based on anonymous usage patterns
We do not use your resume data to train AI models, sell to recruiters, or share with any third party for marketing purposes.
4. Data Storage & Security
Your data is stored in Supabase (PostgreSQL database) hosted on secure cloud infrastructure. Uploaded PDF files are stored in Supabase Storage with access controls. All data is transmitted over HTTPS. We use Clerk for authentication, which maintains SOC 2 Type 2 compliance.
5. Public Profile
When you publish your website, your profile page at magic-self.dev/yourname becomes publicly accessible and indexed by search engines. Only content you explicitly publish is visible publicly. Drafts are private. You can unpublish your site at any time, which immediately removes it from public access.
6. Your Rights (GDPR)
You have the right to:
- Access — view all data we hold about you
- Correction — update your resume data at any time through the editor
- Deletion — delete your account and all associated data permanently from the account settings page
- Portability — your resume data is available to you in the editor at any time
When you delete your account, all data — including your PDF file, extracted resume data, username, and public profile — is permanently and irreversibly deleted from our systems. This is handled automatically via our GDPR-compliant deletion webhook.
7. Third-Party Services
Magic Self uses the following third-party services:
- Clerk — authentication and user management
- Supabase — database and file storage
- OpenRouter / GLM 4.5 Air — AI parsing of your resume PDF (data is processed and not retained by the AI provider)
- Vercel — hosting and analytics
8. Contact
For privacy questions or data deletion requests, contact us at kazakis.th@gmail.com.