Privacy Policy

Effective Date: February 10, 2026

1. Quick Overview

If you read nothing else, read this: We collect what we need to run the marketplace (account info, usage data, payment data via Stripe). We share data with services that help us operate (Stripe, Resend, Meta, etc.) but we never sell your personal data. You can delete your account and all your data at any time.

2. Who We Are

We're Magic Nothing Inc, a small company based in Los Angeles that built a marketplace for indie music.

Magic Nothing Inc ("Magic Nothing," "we," "us," or "our") operates an online marketplace connecting independent artists with playlist curators at app.magicnothing.xyz (the "Platform").

For the purposes of data protection law:

Our contact details:

Magic Nothing Inc
5101 Santa Monica Blvd, Ste 8 PMB 49
Los Angeles, CA 90029
info@magicnothing.com

3. Information We Collect

We only collect what we need to run the marketplace. Here's exactly what that means.

3.1 Information You Provide

3.2 Information Collected Automatically

3.3 Information from Third-Party Sources

3.4 What We Do NOT Collect

4. How We Use Your Information

We use your data to run the marketplace, pay curators, and keep you updated. Here's the breakdown by legal basis.

4.1 Contract Performance

We process your data to fulfill our obligations under our Terms of Service:

4.2 Legitimate Interest

We process certain data based on our legitimate business interests, balanced against your privacy rights:

4.3 Consent

We process certain data only with your consent, which you can withdraw at any time:

4.4 Legal Obligation

We process data when required by law:

5. How We Share Your Information

We share data with services that help us run the platform — including Stripe for payments, Meta for ad measurement, and AI tools for optional features. We never sell your data.

5.1 Service Providers

We share data with the following service providers, each of which processes data under their own privacy policies and our contractual agreements:

5.2 What We Do NOT Do

We do not sell your personal information as defined under the CCPA. We do not rent, lease, or trade your data for monetary consideration.

5.3 Publicly Visible Information

The following information is visible to other users on the Platform:

Submission content (track details, artist messages, feedback) is shared only with the reviewing curator and is not publicly visible.

5.4 Discord Community

Our Discord community is a separate third-party platform operated by Discord Inc. Any information you share there is governed by Discord's Privacy Policy, not this one.

6. Cookies & Tracking

We use cookies to keep you logged in and measure ad performance. Here's what's on your device and how to control it.

6.1 Essential Cookies (Always Active)

These cookies are necessary for the Platform to function:

6.2 Analytics & Advertising

6.3 How to Control Cookies

7. Data Retention

We keep your data while your account is active. Delete your account and we delete your data — with a few exceptions for legal compliance.

8. Marketing Communications

We may send marketing emails. You can opt out anytime — we'll stop immediately.

8.1 Transactional Emails (Always Sent)

These are service communications you'll always receive while your account is active:

8.2 Marketing Emails

We may send promotional communications including welcome series, platform digests, milestone celebrations, and newsletters. Our legal basis for sending these is legitimate interest under GDPR Recital 47 (direct marketing for our own similar services).

8.3 Opting Out

You can opt out of marketing emails at any time by:

Opt-outs are honored immediately. Opting out of marketing will not affect transactional emails.

9. International Data Transfers

We're based in the US. If you're outside the US, your data crosses borders when you use the Platform.

All data processing occurs in the United States. If you are located outside the US, your personal data will be transferred to and processed in the US.

For users in the EU/EEA, we rely on:

For users in the UK, similar protections apply under UK GDPR and the UK extension to the Data Privacy Framework.

10. Your Privacy Rights

You have rights over your data. Here's what you can do, depending on where you live.

10.1 All Users

Regardless of your location, you can:

10.2 EU/EEA Users (GDPR)

In addition to the above, EU/EEA users have the right to:

10.3 California Users (CCPA)

See Section 12 for your specific rights under California law.

10.4 How to Exercise Your Rights

To exercise any of these rights, email us at info@magicnothing.com with:

Response time: We aim to respond within 30 days. For complex requests, we may need up to 90 days and will notify you of any extension.

Identity verification: We may need to verify your identity before processing certain requests to protect your privacy.

Note: Account deletion is permanent and cannot be reversed. All your data — including playlists, submissions, feedback, and uploaded files — will be permanently removed.

11. Data Security

We take security seriously, but no system is perfect. Here's what we do to protect your data.

We implement reasonable technical and organizational measures to protect your personal data, including:

While we implement these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

12. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under state law. Here's what applies to you.

12.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information (as defined by the CCPA):

12.2 Sources of Information

12.3 Business Purposes

We use personal information for the following business purposes:

12.4 Categories of Third Parties

We share personal information with the following categories of third parties:

12.5 Sale and Sharing of Personal Information

We do not sell your personal information for monetary consideration.

12.6 Your California Rights

As a California resident, you have the right to:

To exercise these rights, email info@magicnothing.com. You may also designate an authorized agent to submit requests on your behalf, provided the agent can verify authorization.

13. Children's Privacy

Magic Nothing is for adults (18+). We don't knowingly collect data from minors.

Magic Nothing is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected information from someone under 18, we will delete that information promptly. If you believe a minor has provided us with personal data, please contact us at info@magicnothing.com.

14. AI Features

We use AI for certain features. You're always in control of whether to use optional AI features.

Magic Nothing uses AI tools to power certain features. Current and planned AI features may include:

These features are:

Quality scoring on the Platform is algorithmic and based on objective playlist performance metrics, not individual profiling.

15. Changes to This Policy

Important changes get 30 days' email notice. Minor changes just update the date at the top.

Material changes — including changes to what data we collect, how we share it, or your rights — will be communicated via email to your registered address at least 30 days before they take effect.

Non-material changes (clarifications, formatting, minor updates) will be reflected with an updated "Effective Date" at the top of this page.

Previous versions of this policy are available upon request by emailing info@magicnothing.com.

16. Contact

Questions about your privacy? Here's how to reach us.

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Magic Nothing Inc
5101 Santa Monica Blvd, Ste 8 PMB 49
Los Angeles, CA 90029
info@magicnothing.com

EU/EEA users also have the right to lodge a complaint with their local Data Protection Authority if they believe their data has been processed unlawfully.