Privacy Policy

1. Who we are

MAGCODE LTD, company number [company number], registered office [registered office address], is the controller of the personal data described here. Contact us about privacy at [support email].

2. What stays with you

MFI AI Gateway

Your prompts and responses, your provider keys and account logins, your users and their gateway keys, and your usage and cost data stay on the server you run. We have no access to them. For that data, you are the controller.

AfterFormatAIO

Screen recognition runs on your computer. We don't receive screenshots or anything else from your screen. Programs are downloaded directly from your computer to their makers' websites, and each maker's own privacy policy applies to that visit. [Confirm: the program list and settings stay on the computer]

3. What we collect

Customer account

Your email address and sign-in details, and your account settings.

Purchases

Payments are processed by Stripe. We receive confirmation of each payment and the details we need for our records, such as the product, amount, date and payment reference. We don't receive or store your full card number.

Licence checks

When a product activates a licence key or checks its licence, our licence server records the IP address and time of the check, along with the details below. Licence keys are never sent to us in plain text.

• MFI AI Gateway: licence and activation IDs; your server's public key fingerprint; the gateway version and platform; installation integrity signals used to detect licence misuse.
• AfterFormatAIO: [List exactly what AfterFormatAIO sends, for example licence and activation IDs, app version and Windows version]

Updates

Update checks and downloads, including program profile updates for AfterFormatAIO, with the IP address, time and version involved.

Support

The messages and files you send us in support tickets or by email.

Website and customer portal

Our servers keep technical logs, such as IP address, browser type, the pages requested and the time, to run and secure our services. Our website loads fonts from Google Fonts, so your browser connects to Google, which receives your IP address.

Cookies

Our website doesn't set cookies. The customer portal uses only the cookies needed to keep you signed in. We don't use advertising or analytics cookies.

4. Why we use it

• To provide what you bought (your account, delivering licences, updates and support): this is needed for our contract with you.
• To check licences and detect misuse (activation, device limits and integrity signals): needed for our contract with you, and in our legitimate interest in protecting our software.
• To run and secure our services (technical logs): our legitimate interest.
• To keep accounting and tax records: our legal obligation.

We don't sell your personal data or use it for advertising.

5. Who we share it with

• Stripe, to process payments. See Stripe's privacy policy.
• Hosting and infrastructure providers that run our website, customer portal, licence server and update service for us.
• Service providers that help us operate, for example to send account emails.
• Professional advisers, and authorities where the law requires it.
• A buyer of our business, if it is ever sold, under the same protections.

Our service providers act on our instructions and under contract.

6. International transfers

Some of our service providers, including Stripe, may process data outside the UK. When they do, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Addendum.

7. How long we keep it

• Account details: while your account is open, and deleted within 3 months after it closes, except what we must keep by law.
• Payment and order records: 6 years, for UK accounting and tax rules.
• Licence and activation records: while your licences are in use, and for 12 months after your last licence period ends.
• Technical logs: up to 90 days.
• Support messages: while your account is open, and for 12 months after it closes.

8. Security

We protect personal data with technical and organisational measures, including encrypted connections and access limited to the people who need it.

9. Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Email [support email] and we'll respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk. If you live in the EU, you can complain to your local data protection authority.

10. Children

Our services are not for anyone under 18.

11. Changes to this policy

We'll add a section for each new product before it's released. We'll publish any changes on this page with a new date, and tell you by email about significant changes.