Privacy policy

Who is responsible

Magma, in Montreal, Quebec, decides what happens with the information described here.

The person responsible for the protection of personal information is reachable by email at the address written at the bottom of this page.

What we collect

What you write in a form, your name, your email, the name of your business and your message.

What it takes to build your site, your contact details, your hours, your services, your photos and your social links.

What you write to the chat bot on this site.

Technical data, the IP address, the browser and the pages visited.

We do not collect your card number. Stripe handles it and keeps it on its side.

Why we collect it

To answer your questions and send you a quote.

To build, publish and maintain your site.

To bill the subscription and keep our books.

To improve the service, measure what works and stop abuse.

We never sell your information and we draw no targeted advertising from it.

Consent

You give us your information freely, when you write, when you subscribe or when you talk to the chat bot.

You can withdraw your consent at any time. Some withdrawals stop us from delivering the service and we tell you before that happens.

The chat bot and your questions

Questions sent to the chat bot travel to Anthropic, which generates the answer.

Never write sensitive information into a chat bot, no password, no social insurance number and no medical record.

We keep the exchanges to understand the questions that come back and improve the answers.

Who processes your data for us

Vercel hosts the site, Supabase holds the database and Stripe processes the payments.

Resend sends the email, Anthropic runs the chat bot and Google measures how the sites perform.

Each one acts on our instruction and under a written agreement that frames what it may do.

Outside Quebec

Some of these suppliers store or process data outside Quebec, notably in the United States.

We assess the level of protection before trusting anything to them and we retain suppliers that offer protection comparable to the one here.

How long we keep it

A message sent through the form is kept for 24 months.

The information of an active customer is kept for as long as the subscription lasts.

After a subscription ends, the site content is kept for 30 days and then deleted.

Accounting records are kept for 7 years, as tax law requires.

Your rights

See the information we hold about you.

Have it corrected when it is inaccurate or incomplete.

Have it deleted when nothing obliges us to keep it any more.

Receive a copy of it in a format usable elsewhere.

Complain to the Commission d'accès à l'information du Québec if our answer does not satisfy you.

We answer within 30 days.

Cookies

This site sets one cookie to remember your language and one technical cookie for form security.

No advertising cookie and no tracker from an outside network.

The portal sets a session cookie that keeps you signed in.

Security

Traffic runs over HTTPS and database access is restricted row by row.

No system is invulnerable. Facing a confidentiality incident that carries a risk of serious harm, we warn the people affected and the Commission d'accès à l'information, as the law requires.

Minors

The service is meant for businesses and for adults.

We do not knowingly collect the information of a child under 14.

Changes

This policy can change. The date at the top of the page says when.

An important change is announced by email before it applies.