Privacy Policy

Last updated September 15, 2026

01Who we are and what this covers

Magik Mirror AI is a brand of Zen Motherfucker LLC, an Arizona limited liability company based in Tucson, Arizona, United States ("Magik Mirror," "we," "us," or "our"). We help founders, teams, and established brands see their brand clearly through AI-powered strategy work that is reviewed by human consultants.

This Privacy Policy explains how we collect, use, share, and protect personal information when you:

• visit magikmirror.ai and any page we operate under that domain (the "Site");
• use The Brand Quizard, our hosted team brand-vision quiz and dashboard (the "Quizard");
• engage us for a Brand Reflection or other consulting deliverable produced with our Brand Reflector system (an "Engagement");
• contact us, subscribe to updates, or otherwise interact with us.

Together we call these the "Services." This Policy applies wherever it is linked or referenced. Where an Engagement agreement, statement of work, or data processing addendum says something different about a specific dataset, that document controls for that dataset.

02Information we collect

Information you give us

• Contact and inquiry details. When you use our contact form or email us: your name, email address, company or brand name, the topic of your inquiry, and the message you write.
• Newsletter preference. Whether you asked to receive news and release updates from us.
• Quizard account and workspace data. When you purchase and set up a Quizard workspace: your name, email address, brand or company name, the answers you and your invited teammates submit, and any names or emails you enter to invite them.
• Engagement materials. Anything you share so we can produce your Brand Reflection: brand concepts, websites and URLs, documents, existing brand assets, interview notes, and feedback on drafts. These materials may include personal information about you, your team, or your customers; you are responsible for having the right to share them.
• Billing details. Your name, email, billing address, and payment confirmation. We never see or store your full card number — payments are processed by Stripe (see Section 6).

Information collected automatically

• Site analytics. We use Vercel Web Analytics, a privacy-focused service that records page views and general visit information (referring page, country and region, device type, browser) without setting cookies or building a profile of you across sites.
• Technical and log data. Our hosting providers keep standard server logs — IP address, request time, page requested, user agent — for security, debugging, and abuse prevention.
• Quizard session data. The Quizard uses strictly necessary cookies or tokens to keep you signed in to your workspace and to protect against cross-site request forgery.

Information from third parties

• Payment status from Stripe (paid, refunded, disputed) so we can activate and manage your access.
• Publicly available brand information — for example, the public content of a website you ask us to analyze.

We do not knowingly collect sensitive personal information (such as health, biometric, or precise geolocation data), and we ask that you do not include it in materials you share with us.

03How we use information

We use personal information to:

• Provide the Services — respond to inquiries, run your Quizard workspace, produce and deliver your Brand Reflection, and support you along the way.
• Process payments and keep accurate financial and tax records.
• Communicate with you about your inquiry, purchase, engagement, or account, including service notices and changes to these terms.
• Send updates you asked for — news, launches, and releases — which you can stop at any time.
• Operate, secure, and improve the Services: monitor performance, prevent fraud and abuse, debug problems, and understand which parts of the Site are useful.
• Refine our frameworks. We learn from the work we do. We may retain de-identified and aggregated insights — patterns, phrasing, structures — to sharpen our brand-strategy methods. We do not use your identifiable brand materials to build products for anyone else, and we do not use your data to train public AI models.
• Comply with law and enforce our agreements.

04How AI is involved

Our work is AI-powered and human-validated. To produce a Brand Reflection, and in some Quizard features, we submit the materials you provide — brand concepts, website content, questionnaire answers, and related context — to large language models operated by third-party AI providers (for example Anthropic, OpenAI, and Google) through their business APIs. Those providers process the content to return a response to us and are bound by their enterprise or API terms, which prohibit using API inputs to train their models and require deletion within a limited retention window.

We choose which models to use, we review and refine what they produce, and a human consultant validates every Brand Reflection before it reaches you.

If you engage us for a Fully Local Brand Reflection, the AI processing runs on models we operate on our own hardware; your brand materials are not sent to third-party AI providers for that Engagement.

Please keep in mind that AI-generated strategy is a starting point, not a guarantee. It can be wrong. That is exactly why a person reviews it, and why decisions about your brand remain yours.

05Legal bases for processing

If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with similar requirements, we rely on the following legal bases:

06How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only in these situations:

• Service providers who process data on our behalf under contract and only for our purposes. Currently these include: Vercel (Site hosting and analytics), Render (application hosting and database for the Quizard), Stripe (payment processing), Resend (transactional email delivery for form submissions), our business email and document providers, and the AI providers described in Section 4.
• Your own team. In the Quizard, the person who owns a workspace can see the responses submitted within it. Individual answers may be visible to that owner and to other teammates according to the workspace's settings.
• Professional advisers — accountants, lawyers, and insurers — under duties of confidentiality.
• Legal and safety reasons — to comply with law, a court order, or a lawful request; to enforce our agreements; or to protect the rights, property, and safety of Magik Mirror, our clients, or others.
• Business transfers. If Magik Mirror is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.
• With your direction or consent — for example, if you ask us to share a deliverable with your designer or agency.

07Cookies and analytics

The marketing Site sets no advertising or tracking cookies. Vercel Web Analytics measures traffic without cookies and without identifying individual visitors.

The Quizard application uses strictly necessary cookies or local tokens to keep you signed in and to secure forms. These cannot be switched off without breaking the application. Stripe's checkout pages may set cookies that Stripe uses for fraud prevention; those are governed by Stripe's privacy policy.

Because we do not track you across sites, we do not respond differently to browser "Do Not Track" signals; there is nothing to turn off. We honor Global Privacy Control signals as opt-outs of any sale or sharing, which we do not do in any case.

08How long we keep information

• Inquiries and correspondence: as long as needed to respond and for a reasonable period afterward for continuity, then deleted or archived.
• Newsletter preferences: until you unsubscribe or ask us to remove you.
• Quizard workspaces: for the duration of your subscription and for up to 12 months afterward so you can renew without losing your team's reflection, unless you ask us to delete the workspace sooner.
• Engagement materials and deliverables: for the life of the Engagement and afterward as part of our professional records and to support follow-on work you may request; you may ask us to delete working materials at any time after final delivery.
• Billing and tax records: for the period required by applicable law, typically seven years.
• Server logs: a short rolling window set by our hosting providers.

When retention ends we delete or de-identify the information. Copies may persist in encrypted backups for a limited time before they are overwritten.

09Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information: encrypted connections (HTTPS/TLS) across the Site and the Quizard, encryption at rest with our hosting providers, access limited to the people who need it, strong authentication on our accounts, and payment handling delegated entirely to Stripe, a PCI-DSS Level 1 provider.

No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you and any regulator as required by applicable law.

10International transfers

We are based in the United States and our service providers store and process information in the United States and in other countries where they operate. If you are outside the United States, your information will be transferred to, stored, and processed there. Where required, we rely on appropriate safeguards for such transfers — including standard contractual clauses and the data-transfer frameworks our providers participate in.

11Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy in a portable format;
• Correct inaccurate or incomplete information;
• Delete your information, subject to exceptions (for example, records we must keep by law);
• Restrict or object to certain processing, including processing based on legitimate interests;
• Withdraw consent at any time where processing is based on consent, without affecting processing already carried out;
• Opt out of marketing emails using the link in any message or by emailing us;
• Lodge a complaint with your local data-protection authority.

California and other U.S. state residents

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, or another state with a comprehensive privacy law, you have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of its sale, sharing for targeted advertising, or use for certain profiling. We do not sell or share personal information for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf; we will ask for proof of authorization.

How to exercise your rights

Email info@magikmirror.ai with the subject line "Privacy request." We will verify your identity using the email address associated with your information (and, for a Quizard workspace, your account) and respond within the time required by law — generally within 30 to 45 days. If we decline a request in whole or in part, we will explain why and how to appeal.

Quizard teammates

If you answered a Quizard questionnaire that a colleague set up, the workspace owner controls that workspace's data. You may contact us directly to exercise your rights, and we may need to involve the workspace owner to fulfill your request.

12Children

The Services are designed for businesses and working professionals and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13Third-party links

The Site links to third-party sites and services — including Stripe checkout, our hosted applications, and social platforms. Their privacy practices are their own; we encourage you to read their policies.

14Changes to this Policy

We may update this Policy as the Services and the law evolve. The "Last updated" date at the top tells you when it changed. For material changes we will give more prominent notice — for example, an email to Quizard workspace owners or a notice on the Site — before the change takes effect. Your continued use of the Services after that date means you accept the updated Policy.

15Contact us

Questions, requests, or concerns about privacy are welcome. We answer every one.