Privacy Policy

MagicGourd is operated by DeepFlywheel Hong Kong Limited. This policy explains how we handle your information when you use our browser extension and official website. For privacy questions, please contact support@deepflywheel.com.

Your Reading Content

The extension needs access to the current page to support highlighting, restoring highlights, and reading features. We sync the page information, highlights, notes, tags, and collections you choose to save. We do not collect the full text of unsaved pages in the background.

When you use Ask the Highlight or Enhance the Note, we send the materials needed to fulfill your request to cloud AI services for processing. These materials include the current page's text, relevant highlights and notes, images you select, questions, and conversation context. AI inputs and outputs are not recorded in product diagnostics or operational logs. Completed Ask the Highlight chats are saved only in the current browser and do not sync across devices. They are cleared on sign-out, account switching, account deletion, or deletion of the associated highlight.

Neither we nor the AI services we engage may use your personal information, reading content, or questions and answers for model training. This restriction also applies to anonymized content derived from that data.

Accounts, Diagnostics, and Feedback

We use email addresses and verification codes to create and verify accounts, and retain the account information needed to provide the service. Phone numbers associated with early public beta accounts will also be used for sign-in or account migration. The website uses cookies to keep you signed in.

To troubleshoot issues and improve features, we collect feature usage events, timestamps, versions, language, basic browser and device information, and de-identified installation, account, and email delivery information by default. These diagnostics do not include reading text, notes, raw email addresses, phone numbers, or sign-in credentials. Settings does not offer a product diagnostic data switch; choices to turn it off saved in earlier versions remain effective. Essential security and service logs are not affected by that choice.

When you choose to send feedback, we address and respond to your questions by email. “Include diagnostic information” is selected by default and can be deselected. Before sending, you can see the environment information and the current page address with query parameters and fragments removed. Feedback is used only to troubleshoot and respond to issues, not for advertising or user profiling.

When you submit an enterprise inquiry, we store your work email, company name and size, expected users, job title, additional information and interface language to assess your needs and contact you. Only authorized administrators can access this information. We retain it for as long as needed to handle the inquiry; you may request deletion using the email above.

Sharing and Protection

We engage service providers, including infrastructure, email, and AI providers, to process information only as needed to provide the service, and require confidentiality, data protection, and limits on use. When disclosure is required by law or separately authorized by you, we provide information within the corresponding scope.

Your account information and reading content synced to the cloud are stored in the United States, and information required for AI features is also processed in the United States. We take appropriate data protection measures in accordance with applicable law. We protect information through encryption in transit, content encryption, and access controls. Content encryption uses server-managed keys; it is not end-to-end encryption in which only you hold the keys. If an information security incident occurs, we will take remedial measures and provide notice as required by law.

Retention and Deletion

Account information and reading content are retained for as long as needed to provide the service. Raw product diagnostic events are retained for 180 days by default, and daily aggregated metrics for 24 months by default. Feedback is retained only as long as needed to address the issue; information that must be retained by law is handled according to the statutory retention period.

You can export or delete reading content, or select “Delete account” in settings. After account deletion, we will delete all personal information in the account in accordance with the law. We retain a minimal account deletion marker, which cannot be used to sign in, so updated clients can clear local copies after reconnecting. Offline or inactive devices may retain local copies until then. You manage exported files and system backups separately. Information that must continue to be retained by law is used only for storage and necessary security protection. Uninstalling the extension does not delete your cloud account.

Your Choices and Contacting Us

You can access, correct, copy, or request deletion of personal information, and withdraw consent-based authorization. If you stop providing information necessary for a feature, that feature will be affected; turning off non-essential diagnostics does not affect other features.

Please submit requests through “Contact us” in settings or at support@deepflywheel.com. After verifying your identity, we usually respond within 5 business days; in special circumstances, within 15 business days, unless otherwise required by law.

If there are material changes to processing purposes, the scope of data, or your rights, we will notify you through in-product notices, email, or website announcements, and obtain your consent again where required by law.