Privacy Policy

Magnis AI (we, us, our) is a governance-first enterprise AI consulting firm with offices in Singapore, India, and Indonesia. We are the data controller for personal data collected via https://magnisai.com.

• Contact details you provide via our contact form (name, work email, company, role, message).
• Technical data from your browser including IP address, browser type, device, pages visited, and referring URL.
• Cookies and tags via Google Tag Manager and our chat widget. See section 7.
• Assessment data if you use the AI Maturity Calculator (your answers are not stored; aggregate event telemetry is captured).

• To respond to enquiries and book consultations.
• To improve our website and services.
• To meet legal and regulatory obligations.
• To send relevant insights where you have explicitly opted in.

Our lawful bases under GDPR include consent, legitimate interest, and contractual necessity.

Contact form submissions are retained for up to 36 months from last interaction. Technical and analytics data are retained according to the provider defaults (Google Analytics: 14 months). You can request earlier deletion at any time.

We share limited personal data with the following categories of processor:

• Email infrastructure (responding to enquiries).
• Form processor (Formspree) for handling contact form submissions.
• Analytics (Google Analytics via Google Tag Manager).
• Chat support (Chatbase) when you initiate a chat.

We do not sell personal data. All processors are bound by appropriate contractual terms.

Some processors are located outside Singapore, India, or Indonesia. Where transfers are necessary we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards under GDPR, PDPA, and DPDP.

We use Google Tag Manager to manage analytics and conversion tags. We also load a chat widget (Chatbase) for visitors who choose to engage. You can opt out of analytics via your browser settings or by using browser-level tracking protection.

You have the right to access, correct, delete, restrict, object to, or port your personal data. Under PDPA and DPDP, equivalent rights apply. To exercise these rights, email contact@magnisai.com. We respond within 30 calendar days.

We apply technical and organisational measures including encryption in transit, access controls, and least-privilege access to data systems. No transmission over the internet is fully secure; we cannot guarantee absolute security but we work to best-practice industry standards.

Our services are not directed to children under 16. We do not knowingly collect personal data from children.

We may update this policy from time to time. The most recent version is always at https://magnisai.com/privacy-policy. Material changes will be notified via the website or, where appropriate, by email.

For privacy questions or to exercise your rights, contact contact@magnisai.com.