Privacy.
A plain-language read on what we collect, why we collect it, and the controls you have. We do not sell personal data. We do not run third-party ad trackers on our marketing pages.
01 Scope & controller
This notice covers maincard.ai and the products listed on it, including Mage, GEOWizard, Tony (liketony.ai), Concierge, and IG Search (maincard-analytics.com).
Maincard is the data controller for personal data processed through these products. If you have a question about how your data is handled, write to privacy@maincard.ai.
02 What we collect
- Account data — name, work email, organization, role. Collected when you sign up or contact us.
- Product input — URLs, briefs, handles, and other content you submit to a product so it can do its job.
- Usage data — pages viewed, features used, error reports, approximate location from IP. Helps us fix bugs and make the right calls.
- Billing data — billing name, address, last four digits of card. Card numbers are handled by our payments processor; we never store them.
- Communications — anything you write to us by email or form.
For our free products (Tony, IG Search) we keep collection to the minimum needed to deliver the tool. No account is required to use them.
03 Why we use it
- To run the product you asked us to run.
- To keep it secure — abuse detection, rate-limiting, fraud prevention.
- To improve it — diagnostics, aggregated usage, qualitative feedback.
- To bill you, if you are on a paid plan.
- To reply to your messages, partner requests, or job inquiries.
We do not train third-party AI models on your private inputs. Where a product uses a model provider, that provider operates under a data processing agreement that prohibits training on your data.
04 Legal bases
Under the GDPR and equivalent regimes, we rely on: contract (to deliver the service you asked for), legitimate interest (to keep the service safe and improve it), consent (for non-essential cookies and marketing email), and legal obligation (for tax records and lawful requests).
06 Retention
- Account data — for as long as your account is active, plus 12 months.
- Product input on free products (Tony, IG Search) — deleted within 30 days.
- Product input on paid products — kept while your contract is active; deleted within 60 days of contract end.
- Billing records — 7 years, for tax compliance.
- Server logs — 30 days.
07 Your rights
Depending on where you live, you have the right to access, correct, port, restrict, or delete your personal data; to object to processing based on legitimate interest; and to lodge a complaint with your local data protection authority.
Send any of these requests to privacy@maincard.ai. We respond within 30 days; most are handled inside a week.
08 International transfers
Our infrastructure runs primarily in the EU and the US. When personal data moves between jurisdictions, we use Standard Contractual Clauses or equivalent safeguards. The full list of sub-processors is available on request.
09 Children
Our products are built for professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided personal data, write to privacy@maincard.ai and we'll delete it.
10 Changes & contact
When we make material changes to this notice, we'll mark the change at the top of the page and email account holders. The current version is always available at this URL.
Questions, requests, complaints — all go to privacy@maincard.ai.
Still have a question?
Our team replies to privacy requests in under a week. No bots, no form mazes.
privacy@maincard.ai →