LEGAL DOCUMENT
Effective date: 7 August 2026 ยท Last updated: 7 August 2026
MAGMAS is a skills-verification platform. We help people demonstrate professional competence through recorded workplace simulations, and produce verified evidence they can share with employers.
For the purposes of UK data protection law, MAGMAS is the data controller for the personal data described here.
Contact: support@magmasv.co.uk
What personal data we collect, why, what we do with it, who else sees it, how long we keep it, and what rights you have. It applies to candidates, recruiters, and visitors to our website.
If you sign in with Google, we receive your name and email address from Google.
Voice recordings and transcripts. When you take part in a voice simulation, the call is recorded and transcribed. This is central to how MAGMAS works โ the recording is the evidence behind any verified skill, and the transcript is what our assessment system reads. You are told before each simulation that it will be recorded, and you choose afterwards whether to save it.
Video recordings, where you select the video option.
Written task submissions โ text you write in response to platform exercises.
Assessment results โ the behaviours identified in your performance, the exact words demonstrating them, and where they occur in the recording. Also skills you did not demonstrate and coaching notes; these are private to you and never shown to recruiters.
Usage data โ which tracks and sections you have worked in, and when.
Essential cookies to keep you signed in and remember settings such as dismissed prompts.
We do not ask for special category data such as health, ethnicity, religion or sexual orientation.
Voice and video recordings may incidentally reveal information about you โ an accent, a health condition affecting speech, a disability. We do not use any such information in assessment. Our assessment rules record only specific professional behaviours, and explicitly exclude accent, fluency, confidence, hesitation and speech patterns from consideration.
We do not create voiceprints, perform speaker recognition, or use voice to identify anyone. Voice is processed as speech content only, transcribed to text.
| What we do | Lawful basis |
|---|---|
| Create and operate your account | Performance of a contract |
| Record and transcribe your simulations | Performance of a contract |
| Assess your performance and produce verified evidence | Performance of a contract |
| Show your Competency Passport to recruiters | Performance of a contract, and your choice โ nothing appears until you publish it |
| Respond to support requests | Performance of a contract |
| Keep the platform secure and prevent misuse | Legitimate interests |
| Improve the platform using aggregated, anonymised information | Legitimate interests |
| Comply with legal obligations | Legal obligation |
We do not use your recordings, transcripts or assessment results to train AI models โ neither our own nor our suppliers'.
MAGMAS uses artificial intelligence to assess your performance:
What this does and does not do. It records what you demonstrably did. It does not score you, rank you, or produce a rating. It does not decide whether you are suitable for a job, and it does not decide whether you are hired.
Hiring decisions are made by employers, not by MAGMAS. Recruiters see the evidence, including the recording, and reach their own conclusions.
Your rights over this. You can ask us to explain how a finding was reached. You can challenge a finding you believe is wrong, and we will review it. You can hide or delete any entry from your Competency Passport at any time.
Recruiters using MAGMAS can see your name, country and status; your verified skills grouped by competency; the words you said demonstrating each skill and the recording it came from; which track the evidence is from; and anything you have added to your profile.
They cannot see skills you have not demonstrated, anything you have hidden or deleted, your skill gaps or coaching notes, discarded simulations, or any score or ranking โ we do not produce one.
You control this. Nothing appears until you save it to your Competency Passport, and you can hide or remove any entry at any time. If you share your Passport link outside MAGMAS, anyone with that link can view it.
We use the suppliers below. They process data on our behalf under contract and may not use it for their own purposes.
| Supplier | What they do |
|---|---|
| Supabase | Database and file storage (EU region) |
| Vercel | Website hosting |
| Retell AI | Runs the voice simulations |
| Anthropic | AI assessment of transcripts |
| ElevenLabs | Speech for the in-platform assistant |
| Zendesk | Support ticket handling |
| Resend | Sends service emails |
| Adzuna | Job listings shown on the platform โ we retrieve listings; we do not send them your data |
We do not sell your personal data, and we do not share it with advertisers. We do not share it with anyone not listed here, except where legally required โ for example a valid court order โ or to protect someone's safety.
Some suppliers process data outside the UK. Where that happens we rely on the UK's adequacy regulations, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards in place.
When you delete your account we delete your personal data within 30 days, except where we must keep something to comply with a legal obligation.
We protect your data with encryption in transit and at rest, access controls, database-level security preventing users accessing one another's data, and isolated credentials for third-party services.
No system is completely secure. If a breach occurs that is likely to risk your rights and freedoms, we will report it to the ICO within 72 hours and tell you directly where the risk is high.
You have the right to be informed; to access your data and receive a copy; to have inaccurate data corrected; to have your data deleted in certain circumstances; to restrict processing; to data portability; to object to processing based on legitimate interests; to rights relating to automated processing; and to withdraw consent where we rely on it.
To exercise any of these, email support@magmasv.co.uk. We will respond within one month. It is free, and we will not treat you differently for asking.
If you are unhappy with how we have handled your personal data, tell us first.
Email support@magmasv.co.uk.
We will acknowledge your complaint within 30 days of receiving it, investigate without undue delay and keep you informed of progress, and tell you the outcome.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office:
MAGMAS is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has given us personal data, email support@magmasv.co.uk and we will delete it.
We may update this policy. If we make a significant change we will tell you by email or through the platform before it takes effect. The date at the top shows when this version was published.