What we do with what you give us.

MagiCastor is built and run by Ldesign Media, a Dutch company registered under KvK 86167979 at Vissershavenweg 65 - III, 2583 DL The Hague, Netherlands. Because we are established in the Netherlands, the GDPR (AVG) applies to everything described here.

Two quite different things, and it is worth separating them.

Your account: the name and email address you register with, the plan you are on, the licence keys issued to you, and a record of what your sites have generated. This is what a subscription needs in order to exist.

Your material: the syllabus, slides and documents you upload, the descriptions you type, and the course plan that comes out of them. This is yours. We hold it so the product can show you a draft and pick it up where you left it.

It is read in order to write your course. Writing a course means sending the relevant part of it to the writing service we use as a supplier, which processes it and sends the course back.

Where a course gets drawn illustrations, a separate picture service draws them from a short description of the page written for it, not from your files. It may also process outside the European Economic Area; see Where it is processed, below.

Nothing is added to your Moodle site until you choose to add it. Everything before that point happens on a draft that only you can see, which is why reading your material and shaping the plan costs you nothing.

We use your material to write your course. It is not used to train any model, not ours and not a supplier’s, it is not pooled with other customers’ material, and it is not used to improve a product anybody else will use.

Both suppliers are contractually prohibited from using what we send them to train their models. They may use it only to provide the service, to detect and prevent misuse, and where the law requires, and they keep it for at most 30 days unless it is flagged for misuse review or the law requires longer.

If this ever changes it changes here first, and we will tell you before it does.

The application and its database run on infrastructure in the Netherlands.

The writing step, and drawing illustrations where a course has them, may be processed outside the European Economic Area. Where that happens, the transfer is covered by a mechanism the GDPR permits (an adequacy decision, or the European Commission’s standard contractual clauses), with supplementary measures where appropriate. The detail, and the categories of sub-processor involved, are in the data processing agreement.

We keep the material a teacher uploads for 30 days after a course is finished, and then remove it. The account owner can change that on the account page. Deleting a draft deletes the material in it straight away.

Account and billing records are kept for as long as you are a customer, and afterwards for the seven years Dutch tax law requires of the invoices.

Ask us to delete something and we will, except where we are legally required to keep it, and we will say which.

Connections to MagiCastor are encrypted, and your licence keys are stored encrypted rather than as plain text.

Your Moodle site connects with a licence key you control. An administrator can disconnect it from the plugin’s settings page at any time, or ask us to, and a disconnected site cannot build anything.

You can ask us what we hold about you, ask for it to be corrected, and ask for it to be deleted. You can ask for a copy of it. You can object to how we are handling it, and you can complain to the Autoriteit Persoonsgegevens if you think we have it wrong.

Ask through the contact page below and a person answers. There is no form to chase and no ticket number to quote.