Privacy Policy

1 Data Controller & Business Identification

MagicApp Store LLC ("Company", "We", "Us", or "Our") operates the App Store Pro platform and acts as the Data Controller responsible for the processing of your personal data under global data protection laws (including the General Data Protection Regulation - GDPR, and the California Consumer Privacy Act - CCPA/CPRA).

We are committed to maintaining the privacy, confidentiality, and security of all personal information submitted through our web storefront, single sign-on (SSO) authentication system, and software management dashboard.

2 Information We Collect

We collect personal information necessary to provide our software licensing marketplace and Single Sign-On (SSO) authentication services:

• Account & Profile Data: Full name, email address, password hash, and account registration timestamp when you register an account.
• Transactional Data: Purchase history, subscription plan selections, order reference numbers, billing country, and transaction status logs.
• Technical & Log Data: Internet Protocol (IP) address, browser type, device identifiers, operating system, referral source, and session timestamps.
• Single Sign-On (SSO) Tokens: HMAC-SHA256 authenticated single sign-on tokens used to verify software access across authorized partner apps without transmitting password credentials.

3 PCI-DSS Financial Data Security

During checkout, your payment card information is securely tokenized and sent directly via 256-bit SSL/TLS encryption to our payment gateway partners. Our systems only receive payment status confirmations (e.g. success/decline) and masked card details (such as card brand and last 4 digits) for billing reference.

4 How We Use Your Information

We process your personal data for legitimate business purposes under lawful bases including contract fulfillment, legal compliance, and legitimate business interest:

• To process purchases, issue software plan licenses, and provide instant electronic delivery to your User Dashboard.
• To authenticate your identity across our Single Sign-On (SSO) network when launching partner applications.
• To send essential transactional notifications, billing receipts, and account security alerts.
• To detect, prevent, and investigate fraudulent transactions, unauthorized access, and payment chargebacks.
• To fulfill financial auditing, tax reporting, and legal recordkeeping obligations.

5 Data Sharing & Third-Party Services

We do NOT sell, rent, or trade your personal data to third-party data brokers or marketing agencies.

We share data strictly with trusted service providers necessary to operate our marketplace:

• Payment Gateways & Acquiring Banks: To authorize card transactions and process refunds.
• SSO Partner Applications: When you click "Launch App", our SSO bridge verifies your active subscription plan using encrypted tokens containing your user email and plan identifier.
• Cloud Infrastructure Providers: Secure hosting environments adhering to ISO 27001 and SOC 2 security standards.
• Legal Authorities: When required by court order, law enforcement, or statutory regulations.

6 Cookies & Tracking Technologies

We use essential and functional cookies to ensure proper operation of the platform:

• Essential Session Cookies: We utilize strict session cookies (e.g. appstore_demo_sid) to maintain your secure authenticated state across pages.
• Security Cookies: To prevent Cross-Site Request Forgery (CSRF) and secure user forms.
• Cookie Control: You can configure your browser to decline cookies, though disabling essential cookies may impact your ability to log in or access your purchases.

7 Data Retention & Security Standards

We maintain comprehensive administrative, technical, and physical safeguards to protect your personal information:

• Encryption: All data in transit is protected using SSL/TLS 1.3 encryption. Passwords are stored using strong salted cryptographic hashing algorithms.
• Data Retention: We retain account data for as long as your account remains active. Transactional records are retained for a minimum of 7 years to comply with tax and financial auditing standards.

8 Your Data Protection Rights (GDPR & CCPA)

Depending on your geographic location, you possess the following data privacy rights:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may update your account details at any time through your User Dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal account, subject to statutory recordkeeping requirements.
• Right to Object & Restrict: You may object to or restrict processing of your personal data.
• Non-Discrimination: We will not discriminate against any user for exercising their privacy rights.

To submit a privacy request, please contact our privacy officer at [email protected]. We respond to all verified requests within 30 days.

9 Children's Privacy Notice

Our marketplace and software applications are directed strictly to adults aged 18 and older. We do not knowingly collect or solicit personal information from individuals under the age of 16. If we learn that we have inadvertently collected data from a minor, we will promptly delete such information.

10 Policy Updates & Privacy Contact

We may update this Privacy Policy from time to time to reflect changes in legal requirements or platform functionality. Any modifications will be posted on this page with an updated effective date.