Privacy Policy
EFfective date: August 4, 2026
On Magic by reSEAT ("On Magic," "reSEAT," "we," "us," or "our") provides AI-assisted communications, scheduling assistance, and operational tools for fitness studios. This Privacy Policy explains how we collect, use, store, disclose, and protect information when fitness studios, studio personnel, members, prospects, and other users interact with On Magic.
1. Our relationship with studios and members
Fitness studios use On Magic to communicate with members and prospects and to assist with bookings, waitlists, seating, class information, customer support, and studio operations.
When we process personal information on behalf of a participating studio, the studio determines the purposes for which that information is processed and On Magic acts as the studio's service provider or processor. Members may contact their studio directly with questions about the studio's privacy practices or their personal information.
For information collected directly through reSEAT accounts, our website, or our support services, reSEAT determines how that information is processed as described in this Privacy Policy.
2. Information we collect
Depending on how you interact with On Magic, we may collect the following categories of information.
Account and business information
We may collect names, business email addresses, telephone numbers, studio names, roles, login information, account preferences, and information provided during onboarding or customer-support requests.
Studio and scheduling information
We may receive class schedules, instructors, locations, rooms, seat availability, bookings, waitlists, attendance information, membership status, member preferences, and related information from participating studios and their authorized scheduling platforms. The studio's scheduling platform remains the system of record for bookings, memberships, payments, and class information.
Communications
We may process emails, text messages, Instagram direct messages, support requests, and other communications sent to or from On Magic or a participating studio. When enabled and permitted by applicable law, communication information may include telephone call details, recordings, and transcripts.
Technical information
We may collect IP addresses, browser and device information, timestamps, diagnostic logs, security events, cookie information, and information about how our website and services are used.
Integration information
We may collect information and authorization credentials needed to connect On Magic with scheduling, email, telephone, text-messaging, Instagram, and other services selected and authorized by a studio.
Google account and Gmail information
When a studio administrator connects a Google or Gmail account, we collect and process only the limited information described in Section 4, "Google Workspace API and Gmail Data."
3. How we use information
We use information to:
Provide, maintain, secure, and operate On Magic.
Authenticate users and maintain authorized account connections.
Answer member questions and provide studio-authorized customer support.
Assist with bookings, waitlists, seating, schedules, and studio policies.
Send transactional and service-related communications authorized by a studio.
Connect with scheduling, email, telephone, SMS, Instagram, and other services selected by a studio.
Generate AI-assisted drafts and responses for user-facing studio communications.
Provide customer support and troubleshoot technical problems.
Monitor performance and improve the functionality, safety, and reliability of our services.
Detect fraud, abuse, security threats, and unauthorized access.
Enforce our agreements and comply with applicable laws.
We do not use personal information for purposes that are materially different from those described in this Privacy Policy without providing appropriate notice and obtaining consent when required.
4. Google Workspace API and Gmail Data
A studio administrator may choose to connect an authorized Google or Gmail account to On Magic. Connecting Gmail is optional.
Information and permission requested
When a studio connects Gmail, On Magic requests:
The Google account's primary email address and basic sign-in identity.
Permission to send email from the connected Gmail account using the
https://www.googleapis.com/auth/gmail.sendscope.
We use this access only to identify the connected mailbox, maintain the studio-authorized connection, and send transactional or service-related messages from that mailbox on the studio's behalf.
The gmail.send scope permits On Magic to create and send a new message. On Magic does not request permission to read, search, download, modify, or delete the connected account's inbox, existing messages, drafts, contacts, files, or attachments. We do not use the Gmail API to retrieve inbound messages.
Actions taken through Gmail
When an authorized studio user or a studio-enabled workflow sends a message, On Magic transmits the recipient, subject, message content, and necessary mail headers directly to the Gmail API. The sent message then appears in the connected Gmail account's Sent folder. On Magic does not perform mailbox-management or deletion actions.
Information stored for the Gmail connection
We may store:
The connected Google email address.
The permissions granted to On Magic.
Connection status and relevant timestamps.
OAuth access and refresh tokens, encrypted at rest.
Limited sending records, such as the Gmail-returned message identifier, sending status, timestamps, and technical errors.
OAuth credentials are used only to provide and maintain the authorized Gmail connection. Active access and refresh tokens are removed from the connection when the studio disconnects Gmail. A user may also revoke access at any time through the security settings in the user's Google Account.
Google Workspace data and artificial intelligence
On Magic does not use information obtained from Google Workspace APIs to create, train, or improve a generalized or foundational artificial-intelligence or machine-learning model.
On Magic does not transfer Google OAuth tokens, Gmail API responses, Gmail-returned message identifiers, or other information obtained from Google Workspace APIs to Anthropic, OpenAI, Google Gemini, ElevenLabs, or any other third-party AI or machine-learning provider.
On Magic may create a proposed outgoing message before calling the Gmail API. That draft may be generated using studio information and communications received through separately authorized channels, such as a studio-configured email-forwarding address. The Gmail API is used only after the message is ready and authorized for sending. On Magic does not use the Gmail API to supply inbound mailbox content to an AI provider.
Prohibited uses and Limited Use compliance
On Magic does not:
Sell Google user data.
Use Google user data for advertising, retargeting, or personalized marketing.
Use Google user data to determine creditworthiness or for lending purposes.
Use Google user data to create, train, or improve generalized AI or machine-learning models.
Allow humans to access Google user data except with the user's affirmative permission, when necessary to investigate a security or technical problem, or when required by law.
Transfer Google user data except as necessary to provide the user-requested feature with consent, protect security, comply with law, or complete a legally permitted corporate transaction with any required consent.
Our use and transfer of information received from Google Workspace APIs adheres to the Google Workspace API User Data and Developer Policy, including its Limited Use requirements, and the Google API Services User Data Policy.
5. SMS and mobile messaging
When a user provides a mobile telephone number or communicates with On Magic or a participating studio by text message, we may collect the telephone number, message contents, opt-in and opt-out records, delivery status, timestamps, and related technical information.
We use this information to provide studio-authorized transactional and service communications, including booking confirmations, reminders, waitlist updates, scheduling assistance, class information, and customer-support messages.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories described in this Privacy Policy exclude text-messaging originator opt-in data and consent; this information will not be shared with third parties. Messaging providers may process this information solely on our behalf as necessary to deliver and operate the messaging service.
We do not sell, rent, or transfer SMS opt-in lists or messaging consent. Users may opt out at any time by replying STOP and may receive one final confirmation message. Reply HELP for assistance. Message frequency varies, and message and data rates may apply. Consent to receive text messages is voluntary and is not a condition of purchasing goods, obtaining a membership, or using unrelated services.
6. Instagram and Meta data
When a studio connects an Instagram Business or Creator account, On Magic may receive information authorized through Meta, including the studio's Instagram account identifier, Instagram-scoped user identifiers, names or usernames, direct-message contents, attachments, message and conversation identifiers, timestamps, conversation metadata, and information required to maintain the authorized connection.
We use this information to route messages to the correct studio, display and manage studio conversations, provide member support, generate AI-assisted response drafts, send studio-authorized replies, protect the service, and troubleshoot technical problems.
Instagram access credentials are encrypted when stored. On Magic does not sell Instagram data, use Instagram data for advertising, or access information outside the permissions authorized by the studio. Meta and Instagram may separately process information under their own privacy policies and terms.
Users may request deletion of Instagram-related information by contacting their participating studio or emailing legal@reseat.ai.
7. Artificial intelligence and automated communications
On Magic uses automated systems, including AI assistants, to answer questions, generate response drafts, support telephone interactions, and help participating studios provide services to members and prospects.
Depending on the features enabled, third-party service providers may include:
Anthropic for text analysis and response drafting.
Google Gemini and OpenAI for voice-assistant language processing and service continuity or failover.
ElevenLabs for speech recognition and speech generation.
These providers process only the information reasonably necessary to provide the applicable user-facing feature under commercial service arrangements. On Magic does not authorize these providers to use Google Workspace API data to train generalized AI models, and, as explained in Section 4, we do not transmit information obtained from Google Workspace APIs to these providers.
Automated responses may not always be accurate. Participating studios remain responsible for their policies, booking rules, scheduling records, and final operational decisions. Users should confirm important booking, payment, membership, health, or legal information through the studio's official systems or staff.
8. How we disclose information
We may disclose information to:
The participating studio with which the user is communicating.
Scheduling platforms and integrations authorized by the studio.
Service providers supporting hosting, databases, security, communications, AI processing, analytics, and customer support.
Professional advisers when reasonably necessary.
Government authorities or other parties when required by law or necessary to protect rights, safety, and security.
A successor organization as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable legal requirements.
Service providers may process information only to perform services for On Magic and are required to protect the information appropriately. We do not sell personal information for money. The disclosures described in this section do not include selling or sharing mobile telephone information or text-messaging opt-in data for marketing or promotional purposes.
9. Data retention, disconnection, and deletion
We retain information only for as long as reasonably necessary to provide our services, maintain an active studio or user relationship, fulfill the purposes described in this Privacy Policy, satisfy contractual and legal obligations, protect security, resolve disputes, and enforce agreements.
Google and other integration credentials are retained while the authorized connection remains active. When a studio disconnects Gmail, the active Google access and refresh tokens are removed from the connection and On Magic can no longer send through that account. Limited connection, audit, security, and sending records may be retained when reasonably necessary for security, fraud prevention, legal compliance, accounting, or dispute resolution.
Information may remain temporarily in protected backups until those backups are deleted or replaced through our ordinary backup processes.
To request access, correction, or deletion, contact legal@reseat.ai. Studio members may also contact their participating studio directly. We may need to verify the requester's identity and authority before completing a request.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include access controls, encrypted transmission, and encryption of stored integration credentials.
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Privacy choices and rights
Depending on a user's location and relationship with On Magic, the user may have the right to request access to, correction of, deletion of, or a copy of personal information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent.
Users may also:
Disconnect Gmail, Outlook, Instagram, or another integration through On Magic.
Revoke Google access through their Google Account security settings.
Opt out of text messages by replying STOP.
Contact legal@reseat.ai regarding a privacy request.
We will not discriminate against users for exercising applicable privacy rights.
12. Cookies and similar technologies
Our website and services may use cookies and similar technologies to maintain sessions, remember preferences, protect account security, understand service usage, and improve performance. Users may control certain cookies through browser settings. Disabling necessary cookies may prevent portions of the service from working properly.
13. Children's privacy
On Magic is intended for fitness studios, studio personnel, and eligible users of studio services. Our services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without appropriate authorization. If you believe a child has provided information improperly, contact legal@reseat.ai.
14. International data processing
Information may be processed in the United States and other locations where reSEAT or its authorized service providers operate. Where required, we use appropriate safeguards for international transfers of personal information.
15. Changes to this Privacy Policy
We may update this Privacy Policy periodically. When we make changes, we will publish the revised policy on this page and update the effective date. If a change materially affects how personal information is used, we will provide additional notice or request consent when required.
16. Contact us
For privacy questions, concerns, or requests, contact:
On Magic by reSEAT
Email: legal@reseat.ai
