Your project data stays in Workamajig
MagicusPM is built to need as little as possible: it runs only on your Workamajig address, inside your own session, and your project data never comes to us.
Where your data lives
What stays between your browser and Workamajig
- Projects, tasks, descriptions and hours
- To-dos and conversations
- Client and contact information
- Your Workamajig password and session
What MagicusPM stores
- Your name and email, and your company's name
- Your company's Workamajig address
- Which features are on, company settings and personal preferences
- Subscription status (payments are handled by Stripe)
- Extension version and when it last checked in
How it's protected
Minimum browser permissions
The extension asks for access to your company's Workamajig address only, and nothing at install time.
Your Workamajig permissions apply
Everything happens in your own signed-in session, so you can't see or change anything Workamajig doesn't already allow.
No remote code
All of the extension's code ships through the Chrome Web Store. It only downloads settings (which features are on), never code to run.
Company data is kept apart
Every company's account, settings and people are separated in the database and checked on every request.
Revocable connections
Owners and admins can see each connected browser and disconnect it. Removing someone from the team ends their access.
Honest about limits
No browser extension can be made tamper-proof. That's why everything that matters (accounts, billing, settings) is enforced on our servers.
Questions about security?
We're happy to walk your IT team through it.