Legal

Data Processing

Effective May 30, 2026. This page summarizes processing roles, data categories, subprocessors, and security commitments for business customers.

1. Purpose and Scope

This Data Processing page summarizes how PlayerMagnet processes Customer Personal Data for business customers that use the service to generate Minecraft server marketing videos.

If you need a signed data processing addendum, security review, or vendor questionnaire, contact us before uploading regulated or sensitive data.

2. Roles

For Customer Content and workspace data that you upload or instruct us to process, you are generally the controller or business responsible for deciding what data is submitted, who may access it, and how Output is used.

PlayerMagnet generally acts as a processor or service provider for Customer Content processed to provide the service. PlayerMagnet acts as a controller for account administration, billing, fraud prevention, security, analytics choices, legal compliance, and communications.

3. Processing Details

Subject matter: providing a SaaS platform that uploads gameplay clips, stores workspace metadata, generates scripts, creates voiceovers, renders videos, manages credits, and delivers downloadable promotional assets.

Data subjects may include account users, customers' staff or contractors, creators, players, streamers, or other people appearing or heard in uploaded gameplay footage, audio, images, chat, or generated videos.

Data categories may include names, emails, account IDs, server details, gameplay footage, usernames, voices, likenesses, images, chat or text visible in footage, prompts, scripts, captions, generated videos, billing identifiers, analytics events, and support messages.

Duration: processing continues for the term of your use of PlayerMagnet and for any retention period needed for backups, billing, security, legal, dispute, fraud-prevention, and operational purposes.

4. Customer Instructions

PlayerMagnet processes Customer Personal Data according to your instructions in the dashboard, your workspace settings, your generation requests, these policies, the Terms and Conditions, and any separate written agreement.

You are responsible for ensuring that your instructions are lawful, that you have permission to upload Customer Content, and that you do not submit sensitive or regulated data unless a separate written agreement permits it.

5. Subprocessors and Providers

Supabase: authentication, database, row-level access control, and application data storage.

Stripe: checkout, subscriptions, invoices, billing portal, payment processing, tax, fraud, and compliance support.

PostHog: product analytics and error telemetry when analytics is configured and consented to.

S3-compatible object storage providers, including AWS S3 or configured equivalents: media uploads, thumbnails, CTA images, generated videos, and download delivery.

OpenAI: AI-assisted planning, prompt processing, and script generation.

ElevenLabs: voiceover synthesis, voice presets, voice previews, and related audio processing.

Hosting, infrastructure, monitoring, and email providers: service hosting, delivery, security, reliability, notifications, and support.

6. Security Measures

PlayerMagnet uses reasonable safeguards designed to protect Customer Personal Data, including authentication, workspace ownership checks, Supabase row-level security, server-side authorization, signed upload and download URLs, webhook signature verification, and access-limited service credentials.

You are responsible for account hygiene, reviewing generated Output before publication, and limiting Customer Content to data appropriate for the service.

7. International Transfers

PlayerMagnet and its providers may process Customer Personal Data in multiple countries. Where transfer safeguards are required, we rely on provider data processing terms, contractual protections, or other legally recognized transfer mechanisms.

8. Assistance, Deletion, and Return

Upon reasonable request, and subject to account status, technical limitations, legal requirements, and fees where appropriate, PlayerMagnet will help you access, export, delete, or correct Customer Personal Data in your workspace.

After termination or workspace deletion, PlayerMagnet may delete or retain Customer Content and Output according to operational, backup, legal, billing, dispute, fraud-prevention, and security requirements.

9. Legal Requests and Incidents

If we receive a legal request for Customer Personal Data, we will handle it according to applicable law and our provider obligations. Where legally permitted and practical, we may notify the relevant customer.

If we become aware of a security incident affecting Customer Personal Data, we will assess the incident and provide notices required by applicable law.

10. Contact

Questions about data processing or subprocessors can be sent to support@playermagnet.com or Discord: discord.playermagnet.com.