Privacy Policy
Last updated: 11 October 2026
This Privacy Policy explains how personal data is processed when you use USEMAGISTER at usemagister.com. USEMAGISTER is the service brand of Granlund Kompetansesenter AS, org. no. 989 434 624, Markadompa 5, 2760 Brandbu, Norway.
Who is responsible
The controller for personal data processed in USEMAGISTER is Granlund Kompetansesenter AS, org. no. 989 434 624, Markadompa 5, 2760 Brandbu, Norway. Contact for privacy questions: support@usemagister.com, phone +47 412 74 004. When an organisation buys a company plan and gives its employees access, the organisation decides why its employees use the service. For that use we act as data processor on the organisation's behalf, under a data processing agreement with the organisation.
What we collect
• Account details: name, email address, password (stored only in encrypted, one-way hashed form), preferred language and, if you provide it, phone number. • Company and billing details: company name, organisation and VAT number, billing address, contact person, purchase order number. • Subscription and payment details: plan, period, status, invoices and payment status. Card details are handled by our payment provider Mollie and never reach our servers. • Learning profile: department, knowledge areas, experience level, your answers in the onboarding test and the learning profile generated from them. • Learning activity: enrolments, progress, time spent learning, quiz and assignment answers and results, certificates, notes and bookmarks. • Content you upload: images for AI Safety Analysis, files and assignment submissions. • Questions you ask AI Coach and your feedback on its answers. • Support requests, contact form messages and newsletter sign-ups. • Technical data: IP address, browser and device information in security and login logs.
Why we use it and our legal basis
• To provide the service you signed up for: your account, learning content, progress, certificates and AI features. Legal basis: contract (GDPR Art. 6(1)(b)). • Payments, invoices and accounting. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)), including the Norwegian Bookkeeping Act. • Security, fraud prevention and keeping the service stable. Legal basis: legitimate interest (Art. 6(1)(f)). • Improving the service using usage statistics. Legal basis: legitimate interest. • Reminder emails to people who tried a premium feature for free, about relevant subscriptions. Legal basis: legitimate interest. Every email has an unsubscribe link. • Newsletter. Legal basis: consent, which you can withdraw at any time.
Personalisation and AI
USEMAGISTER uses automated analysis to personalise learning: to suggest programs and topics, adapt test questions to your level, and answer your questions in AI Coach. This has no legal effect on you or similarly significant effect, and you can always choose your own learning content. AI-generated content can be incomplete or wrong. It is guidance, not professional advice.
AI Safety Analysis and uploaded images
When you upload an image for AI Safety Analysis, it is stored on our server in the EU and sent to Google (Gemini API) for analysis. Our AI server holds the image only while it is being analysed and does not keep a copy. We use Google's paid API service. Under its terms, Google does not use the content to train or improve its models. Google may keep requests for a limited period to detect abuse. We remove location data (GPS) and similar hidden metadata from photos when they are uploaded. Please do not photograph people, name badges, documents or other confidential information. If people appear in an image by accident, the organisation that uploads it must have a lawful basis for doing so. You can ask us to delete an image at any time.
Who we share data with
We do not sell personal data. We use these service providers (data processors) to run USEMAGISTER: • Hosting of the website and application: our server provider, servers in Frankfurt, Germany (EU). • Database: MongoDB Atlas, servers in Frankfurt, Germany (EU). • AI analysis of images and text: Google (Gemini API). • Lesson audio: ElevenLabs, which turns lesson text into speech. It receives course text only, not personal data. • Payments: Mollie B.V., Netherlands. • Email: Microsoft 365 for customer service, and an email delivery service for system emails such as account verification and receipts. If you belong to an organisation, your trainers and the organisation's administrators can see your learning progress and results.
Transfers outside the EU/EEA
Some providers, such as Google, may process data outside the EU/EEA. Such transfers are covered by appropriate safeguards, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep data
• Account and learning data: for as long as your account is active. When an account is closed, the data is deleted or anonymised within a reasonable time, unless the law requires us to keep it. • Invoices and accounting records: 5 years, as required by the Norwegian Bookkeeping Act. • Uploaded images and AI analyses: for as long as your account is active, or until you ask us to delete them. • Security and login logs: as long as needed for security purposes.
Your rights
You have the right to access, correct and delete your personal data, to restrict or object to processing, and to receive your data in a portable format, as set out in the GDPR. Where processing is based on consent, you can withdraw it at any time. You can download a copy of your data and delete your account yourself, under My Profile → Your data and privacy. For any other request, or if your account was set up by your employer, email support@usemagister.com. We answer within one month. You can complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.
Changes
We will update this policy when the service or the law changes. Significant changes will be announced on the website or by email.