1. Introduction
WA Global LLC ("Company," "we," "us," or "our"), operating under the brand name CutMagic, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cutmagic.io and use our AI-powered background removal service (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Company Information
WA Global LLC
30 N Gould St
Sheridan, WY 82801
United States
Email: info@cutmagic.io
3. Information We Collect
3.1 Personal Information
When you create an account or use our Service, we may collect the following personal information:
- Account Information: Full name, email address, and encrypted password when you register for an account.
- Payment Information: If you subscribe to a paid plan, we collect billing information including payment card details, billing address, and transaction history. Payment processing is handled by third-party payment processors, and we do not store your full credit card number.
- Communication Data: Any information you provide when contacting our support team, including email correspondence and feedback.
3.2 Automatically Collected Information
When you access the Service, we automatically collect certain information, including:
- Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
- Usage Data: Pages visited, features used, time spent on the Service, click patterns, and referring/exit pages.
- Log Data: IP address, access times, and server logs.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies as described in our Cookie Policy.
3.3 Image Data
When you use our background removal tool, you upload images to our Service for processing. We want to be transparent about how we handle your images:
- Images are processed in real-time and are not permanently stored on our servers.
- Uploaded images are transmitted to our AI processing pipeline, processed, and the result is returned to your browser.
- We do not use your uploaded images for training AI models, marketing, or any purpose other than providing the background removal service.
- Temporary processing data may exist in server memory during the processing period and is automatically purged.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, operate, and maintain the background removal service.
- Account Management: To create and manage your user account, authenticate your identity, and provide customer support.
- Payment Processing: To process payments, manage subscriptions, and handle refunds.
- Communication: To send you service-related notifications, updates, security alerts, and support messages.
- Improvement: To analyze usage patterns, diagnose technical issues, and improve the Service's performance and features.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
- Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contractual Necessity: Processing necessary to perform our contract with you (e.g., providing the Service, managing your account).
- Legitimate Interests: Processing necessary for our legitimate interests, such as improving the Service, fraud prevention, and security, provided these interests are not overridden by your rights.
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
- Legal Obligation: Processing necessary to comply with legal obligations to which we are subject.
6. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: We share information with third-party service providers who assist us in operating the Service, including cloud hosting providers, payment processors, analytics services, and email delivery services. These providers are contractually obligated to protect your information.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
- Protection of Rights: We may disclose information to protect the rights, property, or safety of WA Global LLC, our users, or the public.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account Data: Retained for the duration of your account and for up to 30 days after account deletion to allow for account recovery.
- Payment Records: Retained for up to 7 years as required by tax and financial regulations.
- Usage Logs: Retained for up to 90 days for security and diagnostic purposes.
- Image Data: Not retained. Images are processed in real-time and are not stored.
8. Your Rights
8.1 Rights Under GDPR (EEA, UK, Switzerland)
If you are located in the EEA, UK, or Switzerland, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restrict Processing: Request restriction of processing of your personal data.
- Right to Data Portability: Request transfer of your personal data in a structured, machine-readable format.
- Right to Object: Object to processing of your personal data based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
8.2 Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: Opt out of the sale or sharing of your personal information. Note: We do not sell your personal information.
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
- Right to Correct: Request correction of inaccurate personal information.
8.3 Exercising Your Rights
To exercise any of these rights, please contact us at info@cutmagic.io. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer data internationally, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Ensuring recipients are in countries with adequate data protection laws.
- Obtaining your explicit consent where required.
10. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL.
- Encryption of passwords using PBKDF2 with random salt.
- Regular security assessments and vulnerability testing.
- Access controls and authentication for internal systems.
- Secure cloud infrastructure with reputable providers.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
11. Children's Privacy
The Service is not intended for children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@cutmagic.io.
12. Third-Party Links
The Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.
13. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. We currently do not respond to DNT signals, as there is no industry-wide standard for compliance. However, you can manage your cookie preferences as described in our Cookie Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
WA Global LLC (CutMagic)
30 N Gould St
Sheridan, WY 82801
United States
Email: info@cutmagic.io
For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.