Privacy Policy

1. Who we are

This Privacy Policy describes how CivilAI handles personal information when you use the website, workspace, and related services. Contact us at sales@civilmagic.com for privacy requests.

2. Information we collect

We collect the following categories of information:

• Account data: name, work email, organization name, role, and authentication records.
• Workspace data: projects, drawings, prompts, uploads, generated drafts, comments, and documents you save.
• Billing data: plan, credit ledger, invoice identifiers, and the payment status returned by Stripe. Card numbers are collected by Stripe, not stored by CivilAI.
• Usage data: feature used, model, token or image usage, credit entries, approximate time, and diagnostic logs needed to run and secure the Service.
• Device data: browser type and a session cookie that records whether you are signed in and which door you used (organization or platform console).

3. How we use it

We use this information to:

• Provide the workspace, drawings, AI features, and billing you request.
• Calculate credits, prevent duplicate charges, and show usage to your organization and, for platform operations, to Super Admins.
• Authenticate users, prevent abuse, and keep audit records of administrative actions.
• Send transactional email such as verification, invoices, and security notices.
• Improve reliability. We do not sell personal information.

4. Processors

AI prompts and reference images you submit for generation are sent to the model provider configured for that feature, currently OpenAI for image and text features that are enabled. The provider processes that content to return the result.

Stripe processes checkout, invoices, and card payments. Email delivery uses the mail provider configured for the platform. These processors act only to provide the corresponding part of the Service.

5. When we share information

We share information with the processors above, with members of your organization according to their roles, and with Super Admins who operate the platform. We also share information if a law, court, or competent authority requires it, or if disclosure is needed to investigate fraud or a security incident.

We do not share your drawings or prompts with other customers.

6. Retention

We keep account and workspace data while the organization is active and for a limited period afterward so you can export work and so we can complete billing and security investigations. Credit and payment records are kept for the period required by tax and accounting law. You may ask us to delete an account, subject to those legal holds.

7. Your choices

Organization owners can update profile and company details in the product. You may request access, correction, or deletion of personal information by emailing sales@civilmagic.com. We may need to confirm that you control the account before we act. If a request conflicts with a record we must keep, we will explain the limit.

8. Security

We use access controls, encrypted transport, and hashed session tokens. No method of storage or transmission is perfectly secure. You are responsible for protecting passwords and for removing members who should no longer have access.

9. Children

The Service is for professional and organizational use. It is not directed at children under 18, and we do not knowingly collect their personal information.

10. Changes

We may update this Policy and will change the date below when we do. This Policy was last updated on 22 October 2026.