Introduction
This Privacy Policy explains how Magigram, operated by MAGIGRAM GLOBAL SL, collects, processes, and protects your personal data. Our goal is to operate our platform in compliance with applicable data protection laws, including the GDPR.
Data Controller
Legal Company Name: MAGIGRAM GLOBAL SL. Registered Address: Urb. Tancat del alter 21-7B, 46220 Picassent, Valencia, Spain. Contact Email: [email protected].
Data Collection and Processing
We collect and process the following types of data: account details provided during registration; profile information; learning progress and activity within the platform; payment and subscription details; and communications you send us. When you follow or confirm a referral invitation, we also process the referral alias, visit and attribution timestamps, an opaque referral-intent token whose hash is stored server-side, and the attribution source and status. If a referral is applied to an account or generates a reward or commission, we process the permanent account-to-referrer relationship and related first-transaction, reward, commission, and payout records. The relevant referrer may see the referred member's public username and avatar, attribution details, and first-transaction status; creators also see separate commission amounts and timing without a referred-user identifier. Authorized administrators can inspect referral and payout records. We do not retain raw IP addresses, user agents, referral-link query strings, or browser fingerprints for referral tracking.
Legal Basis for Processing
Our processing of personal data is based on: your explicit consent; contractual necessity to fulfill our obligations to you; and adherence to applicable data protection laws and regulations.
Your Rights
Under the GDPR, you have the right to access your data, rectify inaccurate data, request deletion, restrict processing, receive your data in a portable format, and object to processing. To exercise these rights, contact us at [email protected].
Data Retention and Security
We retain your personal data for as long as necessary to fulfill the purposes described in this policy, based on legal, contractual, and business requirements. The mg_referral_intent cookie and an active referral intent last for up to 30 days. Completed, declined, superseded, ineligible, and expired intents become inactive, while minimal visit and intent audit facts remain server-side. An attribution applied to an account is permanent, and related reward, commission, payout, and accounting records are retained with account and transaction records. We implement security measures including encryption and access controls to protect your data against unauthorized access, alteration, or disclosure.
Contact
If you have any questions or concerns about this Privacy Policy, contact us at [email protected].