Privacy Policy

Effective date: July 20, 2026 · Version 1.0

1. Introduction

This Privacy Policy explains how HercuList ("Company," "we," "us") collects, uses, and shares information in connection with HercuList MagicBox and pages published to themagicbox.ai (the "Service"). It is part of our Terms of Service. By using the Service, you agree to this Policy. Where this Policy and the HercuList privacy policy both apply, this Policy governs information handled through MagicBox.

2. Information We Collect

2.1 Account information

When you access MagicBox through HercuList, we process your HercuList account identifiers (such as your username and membership level) to authenticate you and determine your Plan and feature access.

2.2 Content you create

We collect and store the Content you create or generate, including page text, images you select or upload, links, offers, and forms, so we can provide the Service and publish your Pages.

2.3 Payment information

Paid subscriptions are processed by our third-party payment processor (currently Authorize.net). We receive limited transaction details (such as confirmation, amount, and subscription status) but do not store your full payment card number.

2.4 Usage and device data

We collect usage data such as feature usage, generation counts, timestamps, IP address, and basic device/browser information to operate, secure, and improve the Service, and to enforce quotas and rate limits.

2.5 Cookies and similar technologies

We use cookies and similar technologies to keep you signed in and to operate the Service. For example, we set an authentication cookie (such as "mb_pass") so the builder can verify your session. [List all cookies and their purposes and durations. Add a cookie banner/notice where required.]

2.6 Leads collected by Members

Members can use Capture Pages to collect contact information (such as email addresses) from their own visitors ("Leads"). For that Lead data, the Member is the controller and we act as a processor on the Member's behalf. We store and make Leads available to the relevant Member and do not use Leads for our own marketing.

3. How We Use Information

To provide, maintain, secure, and improve the Service.
To authenticate Members and enforce Plans, quotas, tier limits, and rate limits.
To process subscriptions, billing, renewals, and cancellations.
To operate Swaps, referral attribution, and reputation features.
To respond to support requests and abuse reports and to enforce our Terms and AUP.
To comply with legal obligations and protect the rights, safety, and property of the Company, Members, and others.

4. How We Share Information

We do not sell personal information. We share information with:

Service providers who help us operate the Service (for example, payment processing, hosting, and image/video search), under appropriate confidentiality and data-processing terms.
The HercuList platform, as needed to authenticate you and provide the integrated Service.
Referred and referring Members, to the extent referral attribution requires (for example, crediting a referrer when someone signs up through a Page).
Authorities or third parties when required by law, to enforce our terms, or to protect rights and safety.
A successor entity in connection with a merger, acquisition, or sale of assets.

5. Data Retention and Deletion

We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. Members may request export or deletion of their MagicBox Content and account data by contacting herculist@herculist.com. For Leads a Member has collected, the Member is responsible for responding to their subscribers' requests; we will assist Members as a processor as required. We keep your saved work and Leads for as long as your account is active, and for a reasonable period afterwards so you can recover them if you return. You can delete saved work and Leads yourself at any time.

6. Security

We use reasonable technical and organizational measures designed to protect information, including access controls and transport encryption. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact herculist@herculist.com and we will take appropriate steps.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact herculist@herculist.com. We will respond as required by applicable law (for example, GDPR or CCPA/CPRA). [Confirm applicable frameworks and add required disclosures, including any "Do Not Sell/Share" mechanism if applicable.]

9. International Transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted with a new effective date and, where required, communicated to you. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy questions or requests, contact herculist@herculist.com or HercuList.