AI Magic, LLC (“we,” “us,” “our”) Effective date: July 16, 2026
Workbench (workbench.md) is a live collaborative Markdown workspace. This policy explains what data we collect, why we collect it, how we protect it, and what choices you have. We wrote it in plain language on purpose. Each section starts with a short summary in italics; the summaries are for convenience and the full text controls.
For the purposes of data protection law, AI Magic, LLC is the controller of the personal data described in this policy. Where your documents contain personal data about other people, you are responsible for having the right to process that data, and we process it on your behalf to provide the service.
In short: your account info, your documents, your API and agent activity, and standard usage data.
We use essential cookies for authentication and session management. The service cannot function without them. Our self-hosted analytics may set a cookie or similar identifier to distinguish unique users; where the law requires it (for example in the EEA and UK), we ask for your consent before setting non-essential cookies. We do not use advertising cookies.
In short: to run the service, keep it secure, fix problems, and improve it. We do not train our own AI models on your documents.
We use your data to:
We do not use your document content to train our own AI models. When content is sent to third-party model providers to power features you use, we send only what is needed for the feature, and we use provider settings or agreements intended to prevent your content from being used to train those providers’ models where such options are available.
Features of the service process your content and take actions automatically, including generating text, editing documents, and carrying out tasks you delegate. These automated actions operate within the permission scopes you or your workspace administrators grant. We do not use your personal data to make automated decisions that produce legal effects or similarly significant effects on you, such as decisions about credit, employment, or access to essential services.
In short: we do not sell your data and we do not share it for advertising. We share it with the vendors who help us run the service, and with the collaborators you choose.
We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
We share data only when necessary to operate the service or comply with the law:
| Who | Why | What they get |
|---|---|---|
| Authentication provider | Sign-in and session management | Email, auth tokens |
| AI model providers | Powering agent and automation features | Content sent for processing |
| Infrastructure providers (cloud hosting) | Hosting and running the service | Documents, runtime data |
Our product analytics are self-hosted on our own infrastructure, so analytics data is not sent to a third-party analytics company.
Each provider receives only the data needed to do its job and is bound by contractual confidentiality and data protection obligations. We remain responsible for personal data we transfer to our subprocessors. A current list of subprocessors is available on request at privacy@workbench.md.
We may also share data if required by law, court order, or legal process, or to protect the rights, safety, or property of AI Magic, our users, or the public. Where legally permitted, we will tell you before disclosing your data in response to a legal request.
When you share a document or workspace, its content and related activity are visible to the collaborators and agents that have been granted access to it. Agents access only the documents and workspaces within their granted permission scope; an agent authorized for one document or workspace is not given access to your other documents by us. Collaborators you invite may operate their own agents within shared spaces, so share content accordingly. That sharing is under your control and the control of the workspace owner, not ours.
If you, or an agent acting with permissions you granted, makes a document or file public, anyone on the internet can view it. Review what you and your agents publish, and avoid putting credentials or sensitive personal data in content that could be shared or made public.
If AI Magic is involved in a merger, acquisition, or sale of all or a portion of its assets, your data may be transferred as part of that transaction. We will make reasonable efforts to notify you and explain your options.
In short: we keep data while you use the service, delete it when you delete it, and purge backups on a schedule.
In short: encryption, access controls, scoped permissions, and revocable tokens. And if something goes wrong, we will tell you.
No system is perfect. If we become aware of a breach of security affecting your personal data, we will notify you and the relevant authorities without undue delay, as required by applicable law. If you believe your account has been compromised, contact us immediately at privacy@workbench.md.
In short: you can see, export, correct, and delete your data, and you will not be penalized for exercising your rights.
You can:
We will not discriminate against you for exercising any of your privacy rights.
You have the right to access, correct, delete, and port your personal data, and to restrict or object to certain processing. To exercise these rights, contact privacy@workbench.md. We will respond within one month.
Our legal bases for processing are: performance of our contract with you (providing the service, including its automated features), our legitimate interests (security, reliability, abuse prevention, and product improvement), your consent (non-essential cookies and analytics, where required), and compliance with legal obligations.
When we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision, including the EU-US Data Privacy Framework where our providers are certified.
You have the right to lodge a complaint with your local data protection authority.
You have the right to know what personal information we collect (the categories are described in Section 1: identifiers, user content, internet activity, and inferences from usage), to access it, to correct it, to delete it, and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes other than providing the service. To make a request, contact privacy@workbench.md. You may use an authorized agent to submit a request; we will verify the request through your account email. We will not discriminate against you for exercising these rights.
We do not respond to Do Not Track signals because there is no industry standard for them, but we do not engage in cross-site tracking. Where required, we honor the Global Privacy Control signal as an opt-out of sale or sharing.
In short: Workbench is 18+.
Workbench is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn we have collected personal information from someone under 18, we will delete it.
In short: data is processed in the United States, with legal safeguards for transfers.
Your data may be transferred to and processed in the United States, where our servers and service providers are located. We protect it in accordance with this policy regardless of where it is processed, and we use the transfer safeguards described in Section 6 for data originating in the EEA and UK.
In short: other sites have their own policies.
Workbench documents and skills may contain links to third-party websites or services. We are not responsible for their privacy practices. Read their policies before providing them with data.
In short: we will tell you about meaningful changes before they take effect.
We may update this policy as the product evolves. If we make meaningful changes, we will update the effective date and notify you through the product or by email before the changes take effect.
If you have questions about this policy, how we handle your data, or want to exercise your rights:
AI Magic, LLC Email: privacy@workbench.md