Data protection & security
GDPR, EU hosting, encryption, data export and deletion — how we handle your data.
Is MAGSARO GDPR-compliant?
Yes. Your data lives on servers in the EU, every company gets its own isolated database schema, and you can export your data anytime or have it deleted completely. There are no US-cloud dependencies for your customer data.
Where is my data hosted?
On European servers in the EU. That goes for customer data, invoices and documents as well as for the email mailboxes — important for your own GDPR documentation towards your customers.
Can I export my data?
Yes, anytime and without asking: contacts, newsletter subscribers and inventory as CSV, the website as a ZIP with HTML, CSS and images, timesheets as an export for payroll, invoices as PDFs. Your data is our guest, not our hostage.
What happens when I delete my account?
All of your data is removed completely — GDPR-compliant, with no leftovers in third-party systems. Export what you want to keep first; after that, deletion is final.
How secure is my data?
All connections are TLS-encrypted, the team chat additionally with AES-256. Each company's data lives in its own isolated database schema — cleanly separated from all other customers.
Does my website get an imprint and privacy policy?
Yes — imprint, privacy policy and terms are generated automatically, and a GDPR-compliant cookie banner is built in. Review the texts against your details before publishing — they don't replace binding legal advice.