Privacy policy

Updated on 31 October 2026.

1. Who we are

Magma AI (“we”) is the controller of the personal data collected through this website and our portal. We are based in Tirana, Albania. Contact us at info@magmabots.com.

2. What data we collect

Registration form: first name, last name, phone, email, business type, requested service, short description and, if you give it, a link. Portal account: name, email, password (stored hashed by our authentication provider), the business details you enter and the files you upload. Our website chatbot: the messages you type are sent to our AI provider to produce the reply. We do not use advertising or tracking cookies. Your choice of country and language is stored only in your browser.

3. Visitors of our customers’ chatbots

When you use a chatbot on a business’s website, that business is the data controller and Magma AI is its processor. If you leave an email or phone number in the chat, it is sent to that business, so only share it if you want to be contacted. Our chatbots tell you that they are AI assistants.

4. Why we use it

To contact you about your request, send a confirmation email, provide and secure the service, keep records and meet legal obligations.

5. Legal basis

Your consent, contract (when you use the service), our legitimate interest in security and preventing abuse, and legal obligations. You can withdraw consent at any time.

6. Who we share it with and where it is stored

We use service providers: Netlify (hosting), Supabase (database, authentication, files), Resend (email), Zoho (our mailbox) and Anthropic (the AI model provider that processes chatbot messages). Some may process data outside your country; where required we use legal safeguards such as standard contractual clauses. We do not sell your data.

7. How long we keep it

Registration requests: as long as needed to handle the request. Customer accounts: for as long as the service lasts. After an account is deactivated we keep the data for 2 years so you can reactivate it. After that we may keep an archive copy of account records where needed for legal, accounting, security or dispute purposes. You can ask for erasure at any time; we will erase unless the law requires us to retain it.

8. Your rights

You have the right to request access, rectification, erasure, restriction, objection and portability of your data, and to withdraw consent. Write to info@magmabots.com. Details under the law of your country are below.

9. Security

We use secure connections (HTTPS), role-based access limits and password hashing. No system is completely secure, but we take reasonable measures to protect your data.

10. Children and changes

The service is not directed at children under 16. If we change how we process data we will update this page and its date.

Law that applies to you

Choose your country to see your rights under local law: