Privacy Policy

Magister Desk is an online platform where teachers create courses, assessments and assignments, and students complete them and receive their results. This policy explains what personal data we collect, why, how long we keep it, who else handles it, and what rights you have.

It applies to everyone who uses Magister Desk: teachers, students, and people a teacher has invited who have not registered yet. For any question about your personal data, write to support@magisterdesk.com.

There are two kinds of personal data on Magister Desk, and responsibility differs between them.

• Your account data (name, email address, password, and for teachers the subscription and invoices): Magister Desk decides why and how it is used. We are responsible for it.
• Students’ work inside a teacher’s courses (names and emails the teacher entered, answers, grades, uploaded files, recordings): the teacher decides why and how it is used, and Magister Desk acts on the teacher’s instructions. The teacher — or the school they work for — is responsible for it, and we are their service provider.

The Data Processing Terms in our Terms of Service set out what we commit to as a service provider for teachers. If you are a student and have a question about how your teacher uses your data, your teacher is the first person to ask; we will help them answer.

We collect only what the service needs to work. Nothing is collected for advertising or sold to anyone.

• Teachers: first and last name, email address, a password (we store only a scrambled form that cannot be turned back into the password), the courses, questions, assessments and assignments they create, their subscription plan, and their invoices. Purpose: to provide the service and to bill for it.
• Students: first and last name, email address, a password (stored the same way), the courses they joined, the teachers they are linked to, their answers, grades and feedback, files they upload for assignments, voice recordings for oral exams, automatic transcripts of those recordings, and incidents recorded during proctored assessments (for example leaving the assessment page). Purpose: to let the teacher assess the student and to let the student see their own results.
• Invited students who have not registered yet: the first and last name and email address their teacher entered. Purpose: to let them register with that email. Nothing else is collected until they do.
• Everyone: the date and version of the Terms of Service you accepted, and the technical information needed to keep you logged in securely.

We do not ask for your date of birth, address, phone number or payment card details. Payments are handled by our payment provider, who never shares card numbers with us.

Data-protection law requires a reason for every use of personal data. These are ours.

• Providing the service you asked for — your account, courses, assessments, results, billing: this is needed to perform the agreement between you and us (the Terms of Service).
• Processing students’ data inside a teacher’s courses: we act on the teacher’s instructions as their service provider; the teacher, or their school, holds the legal basis towards the student, normally their task of teaching and assessing.
• Keeping invoices and payment records for ten years: a legal obligation under accounting law.
• Keeping the service secure, preventing misuse and investigating incidents: our legitimate interest in running a safe service, which we have weighed against your interests.
• Sending you emails about your account, your subscription, or changes to these documents: needed to perform the agreement. We do not send marketing emails.
• Anything we might ever do on the basis of your consent would be asked for separately and could be withdrawn at any time, without affecting what was done before.

To create an account we need your first and last name, your email address and a password; without them the account cannot be created or recovered. Teachers who subscribe must also provide a payment method to our payment provider. Everything else — course content, uploads, recordings — is what you choose to put into the service in order to use it.

You are responsible for the accuracy of the information you give us and for keeping it up to date.

Some features use artificial intelligence to help teachers: drafting questions from a teacher’s documents, extracting lists of students or questions from files a teacher uploads (including recognising text on scanned pages), suggesting a grade for an answer, transcribing a spoken answer to text, and the assistant that answers questions about the platform.

Artificial intelligence never decides a grade. Every suggestion is shown to the teacher as a suggestion and the teacher decides. Every student or question extracted from a file is reviewed by the teacher before it is saved. Wherever something was produced by artificial intelligence, the screen says so.

Student answers and recordings, and the files teachers upload, are sent to our artificial-intelligence provider only to produce these features, within the European Union, and are not used to train any model.

We use the following providers to run the service. All are bound by contract to protect your data and to use it only on our behalf.

• A cloud hosting provider, in data centres in the European Union: runs the platform, stores files and recordings and provides the artificial-intelligence features.
• An email delivery provider, in the European Union: sends our account, exam and billing emails to you.
• A payment provider: processes subscription payments and issues receipts. It may process payment data outside the European Union under its own legal safeguards. We never see card numbers.
• A scheduling provider, only if you book a call with us through the link on our website: processes your name and email to arrange the call (see section 17).

We do not sell personal data, we show no advertising, and we do not build profiles of teachers or students. We disclose data to authorities only when the law obliges us to.

We keep personal data only as long as it is needed for the purpose it was collected for.

• Your account data: for as long as your account exists.
• Students’ work (answers, grades, files, recordings): for as long as the student keeps their account or until the student asks us to delete it. A teacher cannot delete a student’s work, and it stays available to the student even if the teacher removes them from a course or closes their own account.
• Entries for invited students who have not registered: for as long as the teacher keeps them on their list.
• Invoices and payment records: ten years, as accounting law requires. They are kept even after a teacher’s account is deleted, without the teacher’s name attached to the account.
• Backup copies: deleted data can remain in our backups for up to seven days before it is overwritten.

You have the right to:

• know whether we hold personal data about you and receive a copy of it;
• receive your data in a common, machine-readable format so you can take it elsewhere;
• have inaccurate data corrected;
• have your data deleted;
• ask us to restrict how we use your data while a question about it is resolved;
• object to a use of your data based on our legitimate interest;
• withdraw any consent you gave, at any time;
• not be subject to a decision made solely by automated means that significantly affects you — which is why artificial intelligence on this platform only suggests and a teacher always decides;
• lodge a complaint with the data-protection authority of the country where you live.

How to use them:

• If you can log in: open the Privacy and data page in your dashboard. "Request a copy of my data" sends you an archive of everything we hold about you. "Delete my account" deactivates your account immediately and we delete all your data within thirty days.
• If you can no longer log in, or for anything else: write to support@magisterdesk.com. We will ask you to confirm your identity before acting — normally by replying from the email address on the account — so that nobody can exercise your rights in your place.

We answer every request within one month, free of charge. If a request is unusually complex we may take up to two further months, and we tell you within the first month if so.

Deleting a student’s account deletes their work. Deleting a teacher’s account deletes the teacher’s personal data but not their students’ work, which stays available to the students who produced it. If you are a student and your request concerns how your teacher uses your data, we may hand it to your teacher to answer, and help them do so.

Magister Desk stores a small amount of information in your browser, all of it needed for the service to work:

• A secure cookie that keeps you logged in between visits.
• Your login state, answers you have typed but not yet saved, the state of a running proctored assessment, your display preferences, and the text of your conversations with the assistant.
• Voice recordings waiting to be uploaded, so that a dropped connection during an oral exam does not lose your answer.

None of this is used for analytics, advertising or tracking across other websites, so we do not show a cookie banner. You can clear this information at any time through your browser settings; you will be logged out.

Magister Desk is for people aged sixteen or older. When you register you confirm that you are sixteen or older, and teachers confirm that they will only invite students who are sixteen or older. If we learn that an account belongs to someone younger, we delete it.

Your teacher entered your name and email address into Magister Desk so that you can register and join their courses. We hold them for that purpose only. If you do not want to register, write to support@magisterdesk.com and we will delete them.

All data is stored and processed in data centres in the European Union. Payment data may be processed by our payment provider outside the European Union under legal safeguards that give equivalent protection.

Data is stored and transmitted in encrypted form. Files and recordings open only through private links that expire after a short time. Every request to see or change something is checked against who is logged in. Access to production systems is limited to the people who run the service. Backups are taken continuously.

If a security incident ever affected your personal data, we would inform the competent authority within seventy-two hours and, where the risk to you is high, inform you directly.

The service is offered only in the countries listed on our Supported countries page. Where the law of your country gives you additional rights or requires a named contact for data-protection matters, that contact is the owner of the service, reachable at support@magisterdesk.com.

• We collect the minimum. No date of birth, no address, no phone number, no tracking. A student is identified to us only by what their teacher needs: a name and an email address.
• We keep a record of every way we process personal data: what, why, for how long, and who receives it.
• Because the platform handles young people’s work, proctoring and artificial-intelligence suggestions, we have carried out a data-protection impact assessment and keep it up to date as the product changes.
• Privacy is part of how features are designed, not added afterwards: teachers cannot delete student work, students always see their own results, artificial intelligence only suggests, and the limit of proctoring incidents informs the teacher rather than ending the exam.
• Everyone who works on the service is bound to confidentiality, and access to personal data is limited to what the work requires.
• We never use personal data for a purpose other than running the service, and we never sell it.

Browsing our public pages collects no personal data: there are no analytics, advertising or tracking cookies. If you book a call with us through the scheduling link, the scheduling provider processes your name and email under its own privacy policy to arrange the call.

If you write to support@magisterdesk.com, we keep your message and our reply for as long as needed to deal with your request and to show that we did, and then delete them.

If your school adopts Magister Desk, the school is responsible for its students’ data and we are the school’s service provider. The Data Processing Terms in our Terms of Service are our data processing agreement with you; accepting the Terms when registering accepts them. On request we provide the information you need for your own record of processing and impact assessment, and we help you answer students’ and parents’ requests about their data.

When we change this policy we publish a new version. The version date is shown at the top of this page, together with a short note on what changed. If a change affects how we use your data, we tell you by email before it takes effect.

For any question about this policy or about your personal data, write to support@magisterdesk.com. Magister Desk is run by its owner, who is also the person responsible for data protection.