Privacy Policy
Last updated: 31 July 2026
Magic is a product operated by ForeFront Labs Pty Ltd (ABN 89 698 420 263)("ForeFront Labs", "we", "us" or "our"). This policy explains how ForeFront Labs handles personal information through the Magic website, applications and services.
1. Information We Collect
We collect account and contact details, business profiles, team records, client records, bookings, forms, documents, invoices, quotes, messages, automations, marketing lists, integration settings, device and usage information, support requests, and payment status or provider references. Client records may include treatment, allergy or other health-related information that a business chooses to record.
2. How We Collect Information
We collect information directly from account holders, team members and people who use Magic-powered booking, inquiry, form or payment pages. We also receive information from integrations a business connects, such as calendars, messaging tools and payment providers. Businesses using Magic are responsible for giving their clients any privacy notices and obtaining any consents required for the information they place in Magic.
3. How We Use and Disclose Information
We use and disclose information to provide and secure Magic, process subscriptions and connected payments, run customer-requested workflows, deliver communications, provide support, troubleshoot errors, prevent misuse, comply with legal obligations, and improve product reliability. We do not sell personal information. When a business stores its own client data in Magic, we handle that data to provide the service to that business.
4. Storage, Security and Overseas Processing
Application data is stored using Supabase infrastructure hosted on AWS. We use measures including encryption in transit, provider-managed encryption at rest, row-level security, role checks, audit logging where available, and least-privilege service access. No system is completely secure. Some service providers process information outside Australia, including in the United States, depending on the provider and configuration.
5. Service Providers and Integrations
Magic uses or may use Supabase, AWS, Pinch Payments, Resend, Twilio, PostHog, Sentry, Anthropic, Meta, WhatsApp, Vercel, Cloudflare, and similar providers for hosting, payments, email, SMS, analytics, error monitoring, AI assistance, messaging, deployment and abuse prevention. Cloudflare Turnstile may verify that public-form visitors are human; see Cloudflare's Turnstile Privacy Addendum. Some providers are only active when a business enables the related integration. Payment card details are collected and processed by the connected payment provider rather than stored as full card numbers by Magic.
6. Access, Correction and Deletion
You may request access to or correction of personal information ForeFront Labs holds about you. Account holders can also access, correct, export or delete workspace data where product controls exist. If your information was collected by a business using Magic, contact that business first so it can action the request through its workspace. We may retain limited records where required for security, legal, tax, billing, abuse-prevention, backup or dispute-resolution purposes.
7. Privacy Complaints
Email a written privacy complaint to info@bridgetoai.com.au. Please describe the issue and how we can contact you. We will acknowledge the complaint and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
8. Cookies and Analytics
We use essential cookies and local storage for authentication, session continuity, security and product preferences. If analytics is enabled, PostHog may collect product usage events to help us understand reliability and adoption. We do not use third-party advertising cookies.
9. Retention
We retain customer workspace data while an account is active and for a reasonable period after closure for backups, legal obligations, security review and billing records. Backup copies expire through the normal backup lifecycle.
10. Changes to This Policy
We may update this policy from time to time. We will update the date above and notify account holders of significant changes by email or through Magic where appropriate.
11. Contact
For privacy questions, access or correction requests, or a copy of this policy in another form, contact info@bridgetoai.com.au.