1. Overview

Magntk Systems (“Magntk,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through compliance with this Privacy Policy. This Privacy Policy describes how we collect and use your Personal Information when you visit our website at https://www.magntk.com, use the Magntk Systems Platform as described in our Terms of Service, or communicate with us electronically.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, do not use the Platform. By accessing or using the Platform, you agree and consent to this Privacy Policy. Magntk may update this Privacy Policy at any time at its discretion. Continued use of the Platform after we make changes constitutes acceptance of those changes, so please check periodically for updates.

This Privacy Policy is subject to and governed by the Magntk Terms of Service.

2. Information Collection

Magntk may collect two types of information from you when you visit the Platform:

Personal Information: Data by which you may be personally identified, such as name, email address, employer, job title, department, and telephone number.

Non-Personal Information: Data that is about you but does not identify you specifically. If you only browse, read pages, or view content, we collect information about your visit that does not personally identify you.

How We Collect Information

Directly from you when you subscribe to a newsletter, create an account, make a purchase, request information, set up an appointment, or otherwise contact us. If you submit Personal Information about other people, you are responsible for ensuring you have authority to do so and that we may use that information in accordance with this Privacy Policy.

From third parties, including advertising and marketing companies, data vendors, public database providers, social media platforms, partners, event hosts, and enterprises that use Magntk Services. We take steps to confirm that information received from these third parties was collected with your consent or that those parties are otherwise legally permitted to disclose it to us.

Automatically as you navigate through the Platform. We collect information about how you interact with the Platform through the use of cookies, pixel tags, and similar technologies. Please review our separate Cookies Policy for more information.

3. How Magntk Uses Personal Information

We use Personal Information we collect for the following purposes:

Platform functionality and development: To provide, operate, and personalize the Platform and Magntk Services, including data analysis, product testing, and development of new features.

Customer support and reporting: To provide customer support, deliver updates, analyze performance, and ensure the Platform works properly.

Business operations: Accounting, billing, fraud prevention, legal compliance, and fulfillment of contractual obligations.

Communications: To send service-related messages, security updates, marketing materials (in accordance with your preferences), and responses to your inquiries.

Advertising and marketing: To deliver personalized content and measure the effectiveness of campaigns.

Statistical analysis: To compile traffic reports and understand user needs to improve the Platform experience.

Legal Basis (EEA and United Kingdom Visitors)

If you are in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your Personal Information will depend on the information concerned and the specific context in which we collect it. We collect Personal Information only where we have your consent, where we need it to perform a contract, where we have a legal obligation, or where processing is in our legitimate interests and not overridden by your data protection rights.

Retention of Your Personal Information

We retain your Personal Information only as long as reasonably necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, tax, accounting, or reporting requirements. To determine appropriate retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements. In some circumstances, we will anonymize your Personal Information for research or statistical purposes, in which case we may use it indefinitely.

4. How Magntk Protects Your Information

The Platform is designed with reasonable and appropriate administrative, technical, and organizational security measures to protect your Personal Information against loss, destruction, unauthorized access, alteration, use, or disclosure. We require our suppliers and vendors to apply similar protections when they access or use Personal Information that we share with them.

We use OAuth 2.0 to authenticate access to third-party platforms on behalf of clients. OAuth credentials are handled securely, are not shared with unauthorized parties, and are not stored in publicly accessible systems.

No technology, data transmission, or system can be guaranteed to be 100% secure. If you believe your interaction with us is no longer secure, please notify us immediately using the contact details in Section 13.

5. When Magntk Shares Your Information

We work through affiliates, authorized suppliers, and business partners to provide the Platform and Magntk Services. When we share your Personal Information with these entities, we put in place appropriate measures to limit use of your information to lawful, authorized purposes consistent with this Privacy Policy.

We may disclose Personal Information in the following circumstances:

Affiliates and Subsidiaries: For purposes consistent with this Privacy Policy.

Suppliers and Vendors: Authorized vendors who require Personal Information to provide contracted services, such as website hosting, data analysis, IT services, auditing, or customer support. Our contracts with these parties include provisions to protect your Personal Information.

Partners: Third parties working with us to offer joint products, marketing opportunities, research, or platform services. Additional terms or privacy policies may be provided in those cases.

Advertising and Marketing: Third-party companies engaged to prepare and deliver advertising and marketing content, in accordance with your preferences. Magntk does not share your Personal Information with non-affiliated third parties for their own advertising or marketing purposes without your permission.

Legal and Safety Requirements: When required by law, to respond to legal process, to protect our customers or the public, or to protect our legal rights.

Business Transactions: In connection with a merger, acquisition, sale, or transfer of all or part of our business or assets, including in connection with bankruptcy proceedings.

With Your Consent: Where you have provided explicit permission for disclosure.

Magntk does not sell your Personal Information.

6. Third-Party Services and API Access

Client Account Access

As a marketing services provider, Magntk Systems accesses third-party advertising, analytics, and customer relationship management platforms — including but not limited to Google Ads, Google Analytics, Google Business Profile, Meta Ads Manager, and GoHighLevel — on behalf of clients who have explicitly authorized us to do so. This access is granted directly by the client through the platform’s own admin or manager-account permissions.

Google Ads API

Magntk Systems uses the Google Ads API to access and manage Google Ads account data on behalf of clients. This includes campaign performance data, reporting metrics, account settings, and related advertising data. We access this data solely to provide campaign management, optimization, and reporting services to the authorizing client.

Data accessed via the Google Ads API is:

Used only for the purpose of delivering services to the client whose account is being accessed

Not sold, transferred, or shared with third parties for advertising, retargeting, interest-based advertising, credit determinations, or any secondary purpose

Retained only for the duration of the client engagement plus a reasonable archival period, after which it is deleted upon request

Stored and transmitted using reasonable administrative, technical, and organizational security measures

Magntk Systems does not use data obtained through Google API Services to serve ads, conduct retargeting, perform interest-based advertising, make credit determinations, or for any purpose beyond the direct delivery of client services as described in this section. Our use of Google API Services is limited to practices explicitly disclosed in this Privacy Policy.

OAuth 2.0 Authentication

Where Magntk accesses third-party platforms on behalf of clients using OAuth 2.0, we treat all OAuth credentials (including client IDs, client secrets, and refresh tokens) as confidential. We do not share these credentials with unauthorized parties, do not store them in publicly accessible systems, and reset them promptly if we believe they have been compromised.

7. Your Legal Rights

Access, Correction, and Deletion: You may request access to, correction of, or deletion of your Personal Information by contacting us using the details in Section 13. We may retain certain information as required for recordkeeping, legal compliance, or to complete pending transactions.

EEA and UK Rights: If you are in the EEA or UK, you may object to processing of your Personal Information, request restriction of processing, or request portability of your data. If we collected your Personal Information with your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Advertising and Marketing Choices: You may update your contact details and modify your communication preferences at any time. Opting out of marketing communications does not affect service-related communications such as security updates or policy changes.

Magntk is the Data Controller of all Personal Information collected through the Platform in the EEA and the United Kingdom, except with respect to the Services (where Magntk acts as Data Processor) or where a supplemental Privacy Policy states otherwise.

8. Do Not Track

Some browsers incorporate a “Do Not Track” (DNT) feature that signals to websites that you do not want to be tracked. At this time, the Platform does not respond to DNT signals.

9. Information From Children

We do not knowingly collect, use, or disclose Personal Information from children under 13 in the United States (consistent with the Children’s Online Privacy Protection Act, or COPPA) or under 16 in the European Economic Area. If we learn that we have collected Personal Information from a child below the applicable age threshold, we will take steps to delete that information as soon as possible.

If you are under 13 (or under 16 in the EEA), do not provide any Personal Information to Magntk. If you become aware that a child’s information has been submitted to us, please contact us using the details in Section 13.

10. Links to Other Websites and Services

We are not responsible for the privacy practices of websites or services linked to or from the Platform. This Privacy Policy does not address the policies of third parties or other organizations not operating on Magntk’s behalf, including any site to which the Platform links (inclusion of a link does not imply endorsement), or any app developer, social media platform, operating system provider, wireless service provider, or device manufacturer.

11. California Privacy Rights

This section applies to California residents only and supplements the rest of this Privacy Policy with information required under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Your Rights Under CCPA/CPRA

Subject to certain exceptions, California residents have the right to:

Know about the categories and specific pieces of Personal Information collected about them

Know whether their Personal Information is sold, shared, or disclosed, and to whom

Opt out of the sale or sharing of their Personal Information

Request deletion of their Personal Information

Request correction of inaccurate Personal Information

Limit the use and disclosure of Sensitive Personal Information

Not be discriminated against for exercising any of these rights

What We Collect and Why

Over the preceding 12 months, Magntk has collected the following categories of Personal Information from California residents:

Identifiers: Name, email address, phone number, IP address, account ID. Collected directly from you or automatically. Used for platform operation, communications, and business operations. Retained for the duration of our relationship plus up to 3 years or as required by law.

Commercial Information: Purchase history and billing information. Collected directly from you. Used for billing, accounting, and business operations. Retained for up to 7 years for tax and accounting purposes.

Internet and Network Activity: Browsing behavior on the Platform, cookie data. Collected automatically. Used for platform improvement and analytics. Retained for up to 2 years.

Professional or Employment Information: Employer, job title, department. Collected directly from you. Used for account management and service delivery. Retained for the duration of our relationship.

Geolocation Data: General location derived from IP address. Collected automatically. Used for platform operation and localization. Retained for up to 2 years.

Sale and Sharing of Personal Information

Magntk does not sell your Personal Information. If you wish to opt out of Magntk using your Personal Information for cross-contextual targeted advertising (“sharing” under CCPA), you may do so by contacting us using the details in Section 13, or by clicking the “Do Not Share My Personal Information” link on the Platform.

Sensitive Personal Information

If Magntk collects Sensitive Personal Information as defined under CCPA/CPRA, we limit our use to purposes you have authorized, purposes required to fulfill your requests for goods or services, or purposes otherwise permitted by law.

How to Submit a Request

California residents may submit requests to exercise their CCPA/CPRA rights by contacting us using the details in Section 13. We will ask you to verify your identity before fulfilling any request. The information required for verification will depend on the nature of your prior interactions with Magntk and the sensitivity of the Personal Information at issue.

You may designate an authorized agent to submit a request on your behalf. We may require you to verify your identity or confirm that you authorized the agent to act on your behalf. If you have provided an authorized agent with power of attorney under California Probate Code sections 4000 to 4465, we will respond to requests from that agent in accordance with CCPA/CPRA requirements.

If we deny your request, we will explain why. We will not discriminate against you for exercising your rights under CCPA/CPRA.

12. International Compliance

Magntk is headquartered in the United States. We may transfer your Personal Information between the United States and our affiliates, business partners, and third-party service providers in other countries. We transfer information internationally to operate efficiently, improve performance, and create redundancies to protect data.

Whenever Magntk transfers Personal Information originating in the EEA or the United Kingdom to a Magntk entity outside those regions that does not have an adequate level of protection as determined by the European Commission, we do so on the basis of lawful transfer mechanisms such as EU or UK Standard Contractual Clauses. We will process your Personal Information in a manner consistent with this Privacy Policy and applicable law wherever we transfer it.

13. How to Contact Us

For questions about this Privacy Policy, to exercise your rights, or to report a privacy concern, please contact us at:

Magntk Systems

ATTN: Legal Department

138 E 12300 S Ste C #160

Draper, UT 84020

Email: [email protected]

Website: https://www.magntk.com