Privacy Policy

01Scope of the policy

This policy explains how MAGNET collects, uses, discloses and protects personal information when you visit magnet-io.com, request a demonstration, correspond with our team, or use the MAGNET platform under a subscription agreement.

It covers two distinct categories of information, and the distinction matters because different obligations attach to each:

• Information about you — the personal information you provide as a visitor, prospect, or authorised platform user. For this information MAGNET acts as the controller and this policy governs.
• Information inside your account — the business contact records, activity history and related data that a subscribing organisation loads into the platform or connects through an integration. For that information MAGNET acts as a processor on the subscribing organisation's written instructions. Its handling is governed by the subscription agreement and any data processing terms attached to it, and where those terms conflict with this policy, they prevail.

This policy does not apply to third-party websites, applications or services that MAGNET links to or integrates with. Those operate under their own terms and privacy notices, and you should review them separately before connecting them.

02Data controller

The controller responsible for the personal information described in this policy is:

EDGE HOLDING USA, LLC
131 Continental Drive, Suite 305
Newark, New Castle, Delaware 19713
United States

MAGNET is operated by EDGE HOLDING USA, LLC. Where a subscribing organisation loads its own records into the platform, that organisation is the controller of those records and MAGNET is the processor acting on its instructions.

Questions about this policy, requests to exercise the rights described in section 15, and any complaint about how personal information has been handled should be sent to inquiry@magnet-io.com. We aim to acknowledge every privacy enquiry within five business days and to resolve it within the statutory period that applies to the request.

03Information users provide

MAGNET collects the information you choose to give us. In practice this falls into four groups:

• Demonstration and contact requests — your name, business email address, telephone number where you provide one, company name, role, and the free-text description of the revenue problem you want to discuss.
• Account credentials — the username, authentication details and profile settings created when a subscribing organisation provisions you as a platform user.
• Correspondence — the content of emails, support tickets and messages you send us, together with our replies, retained so that we can follow a matter through to resolution.
• Commercial information — billing contacts, purchase order references and the details required to administer a subscription.

You are not obliged to provide any of this. Withholding it means we may be unable to respond to your enquiry, provision your access, or perform the subscription agreement.

04Information collected automatically

When you visit magnet-io.com or use the platform, certain information is recorded automatically:

• Technical data — IP address, browser type and version, operating system, device type, screen dimensions and language preference.
• Usage data — pages viewed, time on page, referring URL, navigation path, and the features and reports accessed within the platform.
• Diagnostic data — error traces, performance timings and security event logs generated while the service runs.

This information is used to keep the service available and secure, to diagnose faults, to detect misuse, and to understand which parts of the platform deliver value. It is not used to build advertising profiles, and MAGNET does not sell it.

Where this information is combined with an identifiable account it is treated as personal information under this policy.

05Information obtained from third parties

MAGNET receives information about business contacts and companies from third-party data providers and public sources, and makes it available to subscribing organisations through the platform's enrichment capability. This may include business contact details, job title, employer, seniority, professional profile links, firmographic attributes and publicly reported company signals.

MAGNET does not knowingly acquire special category data, consumer credit data, health data, or information about private individuals acting outside a professional capacity.

Where you are the subject of such information and it has reached the platform through a subscribing organisation's account, that organisation is the controller and your request is best directed to it. Where MAGNET is the controller, contact inquiry@magnet-io.com and we will identify the source category, correct inaccuracies, or suppress the record on request.

06Cookies and analytics

MAGNET uses cookies and comparable technologies for a limited set of purposes:

• Strictly necessary — session management, authentication, load balancing and security. These cannot be disabled without breaking the service.
• Preference — remembering settings such as language or a saved view, so the interface behaves consistently between visits.
• Analytics — aggregate measurement of traffic and feature usage, used to prioritise engineering work.

MAGNET does not use advertising cookies, cross-site tracking pixels, or third-party retargeting tags on magnet-io.com.

Most browsers let you review, block or delete cookies through their settings. Blocking strictly necessary cookies will prevent sign-in and may render parts of the platform unusable. Where consent is required by law, analytics cookies are set only after that consent is given, and consent can be withdrawn at any time by clearing site data or contacting us.

07How MAGNET uses personal information

Personal information is used only for purposes that are compatible with the reason it was collected:

• To respond to demonstration requests, enquiries and correspondence.
• To provision, authenticate and administer platform accounts.
• To deliver the contracted service and produce the reports and evidence records the platform is designed to generate.
• To provide support, investigate faults and communicate service notices, maintenance windows and material changes.
• To secure the service — detecting unauthorised access, abuse, automated attack and fraud.
• To administer subscriptions, billing and account records.
• To improve the platform, using aggregated and de-identified usage measurement.
• To meet legal, regulatory, tax and accounting obligations, and to establish, exercise or defend legal claims.

MAGNET does not sell personal information, does not share it for cross-context behavioural advertising, and does not use the contents of a subscribing organisation's account to train general-purpose models for the benefit of other customers.

08Legal bases for processing

Where data protection law requires a legal basis, MAGNET relies on the following:

• Performance of a contract — provisioning accounts, delivering the platform, providing support, and administering subscriptions.
• Legitimate interests — securing the service, preventing abuse, measuring and improving the product, and responding to business enquiries directed to us. We balance these interests against your rights and stop where those rights prevail.
• Consent — non-essential cookies and optional marketing communications, where consent is required. Consent can be withdrawn at any time without affecting processing already carried out.
• Legal obligation — retention of financial records and response to lawful requests from competent authorities.

Where MAGNET acts as a processor for a subscribing organisation, that organisation determines the legal basis for the records it loads, and warrants in the subscription agreement that it has one.

09AI processing and automated analysis

MAGNET applies automated analysis to records held in a subscribing organisation's account. The platform scores accounts and contacts against defined criteria, enriches records, ranks priority, drafts outreach for human review, and produces reporting on the outcome.

Three governance principles apply to this processing, and they are product commitments, not marketing language:

• Evidence is retained. Every score and recommendation is traceable to the inputs that produced it. The platform is designed so that a conclusion can be inspected rather than merely accepted.
• A human decides. Outbound actions with legal or comparable significance require human approval. The platform prepares and ranks; it does not conclude contracts or make final decisions about individuals on its own.
• Scope is bounded. Automated analysis operates on the records within an account and for the purposes the subscribing organisation has defined.

Where a person is subject to a decision they consider significant, they may request human review by contacting the subscribing organisation, or MAGNET at inquiry@magnet-io.com.

10How information is shared

Personal information is disclosed only in the following circumstances:

• Within the subscribing organisation — to the users it has authorised, under the permissions it has configured.
• To service providers — the categories described in section 11, bound by written terms and processing only on our instructions.
• To professional advisers — legal, accounting and audit advisers under duties of confidentiality.
• In a corporate transaction — to a counterparty in a merger, acquisition, financing or asset sale, subject to confidentiality, with continuity of protection and notice where required.
• Where legally compelled — in response to a valid order from a competent authority. We assess each request, disclose no more than required, and notify the affected party unless prohibited.

MAGNET does not disclose personal information to data brokers or advertising networks.

11Service providers and subprocessors

MAGNET engages service providers to operate the platform. Each is bound by written terms that limit them to processing on MAGNET's documented instructions, impose confidentiality, require appropriate security measures, and oblige them to assist with data subject requests and breach notification.

The categories engaged are:

• Cloud infrastructure and hosting — compute, storage and network for the platform and website.
• Data enrichment providers — business contact and firmographic data supplied to the enrichment capability.
• Communications delivery — transactional email and messaging.
• Product analytics and error monitoring — usage measurement and fault diagnosis.
• Payment and billing administration — subscription invoicing and collection.
• Customer support tooling — ticketing and correspondence management.

A current list of named subprocessors is maintained and made available to subscribing organisations on request to inquiry@magnet-io.com. Subscribing organisations are notified before a new subprocessor is added and may object on reasonable data protection grounds under the subscription agreement.

12International data transfers

MAGNET is operated from the United States and engages service providers that may process information in other countries, including within the European Economic Area, the United Kingdom and the Gulf Cooperation Council states. Personal information may therefore be transferred across borders, and the destination country may not provide the same level of protection as the country in which the information was collected.

Where such a transfer takes place, MAGNET puts in place a transfer mechanism recognised by the applicable law — which may include standard contractual clauses, an adequacy decision, or an equivalent instrument — together with supplementary technical and organisational measures where the circumstances of the transfer require them.

Subscribing organisations may request details of the mechanism applied to their account, and a copy of the relevant clauses, by contacting inquiry@magnet-io.com.

13Data retention

Personal information is retained only as long as it serves the purpose for which it was collected, or as long as the law requires. Retention is governed by the following principles:

• Enquiry and demonstration records — retained while a commercial discussion is live and for a defined period afterwards, then deleted or anonymised.
• Account and user records — retained for the term of the subscription and for a defined wind-down period after termination, so that the subscribing organisation can export its data.
• Records inside a customer account — retained under the subscribing organisation's instructions. On termination they are deleted or returned in accordance with the subscription agreement.
• Security and diagnostic logs — retained for a limited period proportionate to their security purpose.
• Financial records — retained for the statutory period applicable to tax and accounting.

The specific periods applied to each category are recorded in MAGNET's internal retention schedule and are made available to subscribing organisations on request. Where information no longer serves a purpose and no legal obligation requires its retention, it is deleted or irreversibly anonymised.

14Information security

MAGNET maintains technical and organisational measures appropriate to the risk of the processing, including:

• Encryption of data in transit using current TLS, and encryption of data at rest.
• Role-based access control, least-privilege provisioning, and access review on a defined cycle.
• Segregation of production from development and test environments.
• Logging of administrative access and security-relevant events.
• Vulnerability management, dependency patching and change control.
• Backup with tested restoration procedures.
• Confidentiality obligations and security training for personnel with access to personal information.

No system is immune from compromise, and MAGNET does not represent that it is. Where a personal data breach occurs that is likely to result in a risk to affected individuals, MAGNET will notify the relevant supervisory authority and the affected subscribing organisations without undue delay and within the period the applicable law prescribes, together with the information needed to assess and respond to the incident.

15User privacy rights

Depending on where you are located, you may have some or all of the following rights over your personal information:

• Access — confirmation of whether we process your information, and a copy of it.
• Rectification — correction of inaccurate or incomplete information.
• Erasure — deletion where the information is no longer necessary or has been processed unlawfully.
• Restriction — limitation of processing while a dispute over accuracy or legitimate interests is resolved.
• Portability — receipt of information you provided in a structured, machine-readable format.
• Objection — to processing based on legitimate interests, and at any time to direct marketing.
• Withdrawal of consent — where processing rests on consent, without affecting prior processing.
• Non-discrimination — no denial of service or degraded terms for exercising these rights.

MAGNET does not charge for exercising these rights, except where a request is manifestly unfounded or excessive. You also have the right to lodge a complaint with your supervisory authority; we would ask that you contact us first so we can try to resolve the matter directly.

16Account deletion and data requests

To exercise any right in section 15, or to request deletion of an account, send the request to inquiry@magnet-io.com from the address associated with the account, describing what you are asking for.

How the request is handled depends on the role MAGNET plays:

• Where MAGNET is the controller — we handle the request directly, acknowledge within five business days, and respond within the statutory period, which is one month under the GDPR and forty-five days under the CCPA, extendable where the law permits and we tell you why.
• Where MAGNET is a processor — the records belong to a subscribing organisation. We forward the request to that organisation without undue delay and assist it in responding. The organisation, not MAGNET, decides the outcome.

We may ask for information sufficient to verify your identity before acting, and will use it only for that verification. Where we cannot fulfil a request in whole or in part, we will explain why and identify any remedy available to you.

On termination of a subscription, account data is deleted or returned in accordance with the subscription agreement, subject to any retention the law requires.

17Children's privacy

MAGNET is a business-to-business platform. It is not directed to children, it is not designed for them, and it is not marketed to them. Accounts may be created only by individuals authorised by a subscribing organisation who are of full legal capacity in their jurisdiction.

MAGNET does not knowingly collect personal information from anyone under the age of sixteen. If we become aware that such information has been collected without a valid legal basis, we will delete it promptly.

If you believe a child's personal information has reached the platform, contact inquiry@magnet-io.com and we will investigate and act.

18Changes to the policy

This policy is reviewed periodically and updated when our practices, the platform, or the law change. The effective date and last-updated date at the top of this page always identify the version in force.

Where a change materially affects how personal information is handled, MAGNET will provide notice before it takes effect — by email to account administrators, by a notice within the platform, or by a prominent notice on this page, as the circumstances warrant. Where the change requires consent, we will obtain it before relying on the change.

Previous versions are retained and are available on request. Continued use of the platform after a change takes effect constitutes acceptance of the updated policy, except where the applicable law requires express consent.

19Contact and privacy requests

For any question about this policy, any request to exercise the rights described in section 15, or any complaint about how personal information has been handled:

Email: inquiry@magnet-io.com

Postal address:
EDGE HOLDING USA, LLC
131 Continental Drive, Suite 305
Newark, New Castle, Delaware 19713
United States

Please mark privacy correspondence clearly so that it is routed correctly. We acknowledge privacy enquiries within five business days and respond within the statutory period applicable to the request. If you are not satisfied with our response, you retain the right to complain to the supervisory authority in your jurisdiction.