Privacy Policy

Last updated 12 September 2026

We collect the least we can get away with, we do not sell any of it, and we never see your card number. This page says exactly what we do hold and what you can make us do about it.

1. Who we are

Musketeers, based in Pretoria, Gauteng, South Africa, is the responsible party (under South Africa’s POPIA) and the data controller (under the GDPR and UK GDPR) for the personal information described here. Reach us at hello@musketeers.io for anything on this page, including a request to see or delete your data.

This policy covers shop.musketeers.io and every product sold through it, listed on the products page.

2. What we collect

Because you gave it to us

Account details — your email address, and a name if you choose to give one. If you sign in with Google, we get your email address and an account identifier from them, not your Google password.
What you put into the products — prompts, text, code, documents, and for the language app, recordings of your voice and what was said in a lesson.
What you write to us — support emails and whatever is in them.

Because the software recorded it

Usage — which features you used and when, how much of a product you have consumed, and what your credit balance is.
Technical logs — IP address, browser or client, timestamps, and errors. These are how we keep the service up and spot abuse.
Billing records — what you bought, when, for how much, and the country you bought from.

We do not buy personal information about you from anyone, and we do not run advertising trackers or ad-network pixels on this site.

3. Payments

Your card details never reach us. Payments are taken by Paddle, our merchant of record, who handles the card data under their own privacy policy and to the card industry’s security standards.

What comes back to us from Paddle is the transaction: an id, the amount, the currency, the country, what was bought, your email address, and whether it succeeded. Not your card number, and not your full billing address.

4. Why, and on what basis

To give you what you paid for — running your account, granting access, tracking credits, answering support. Basis: performing our contract with you.
To take payment and keep books — invoicing, tax, accounting records. Basis: contract, and legal obligation.
To keep the service working and safe — debugging, capacity, fraud and abuse prevention. Basis: our legitimate interest in running a service that stays up.
To tell you things you need to know — an outage, a price change, credits about to expire, these terms changing. Basis: contract, and legitimate interest.
To send you product news, if you asked for it. Basis: your consent, withdrawable in one click from any such email.

We do not make decisions about you by automated means that have a legal or similarly significant effect on you.

5. Your content and AI models

To produce what you asked for, the products send your content to AI models — including models run by third parties on our behalf, such as Anthropic’s Claude. This is how the products work, and it is worth being clear about it.

We send only what is needed to answer the request.
We do not sell your content, and we do not use it to train our own models or to build a general model, unless you have separately and explicitly opted in.
Our model providers are engaged as processors under terms that stop them training their models on what we send. Their own policies apply to what they do while processing it, and we will name our current providers if you ask.
We may look at a specific piece of your content when you ask us to debug something, or where we have to in order to investigate abuse. Not otherwise.

Only service providers who need it to make the product work, each under a contract that limits them to our instructions:

Payments — Paddle, as merchant of record.
Sign-in — Google, where you use it to sign in.
AI model providers — as described above.
Hosting and infrastructure — the cloud providers our services run on.
Email delivery — for the receipts and notices we send you.
Error and performance monitoring — so we find faults before you have to report them.

Beyond that, we share personal information only where the law requires it, where we need to establish or defend a legal claim, or — with notice to you where we are allowed to give it — if the business is sold or reorganised, in which case the buyer is bound by this policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We keep the list of our current providers up to date and will send it to you on request, rather than publishing a table here that goes stale.

7. Where it goes

We are in South Africa and our providers are mostly in the European Union and the United States, so your information is processed outside your country and probably outside ours. Where we send personal data out of the EEA or the UK we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum, or an adequacy decision, as applicable. Transfers out of South Africa are made on the bases POPIA section 72 allows.

8. How long we keep it

Account and content — while your account is open. If you close it, we delete or anonymise within 30 days, except what is listed below.
Billing and tax records — 5 years from the end of the relevant tax year, because South African tax law requires it. We cannot delete these on request.
Technical logs — up to 12 months, then deleted or aggregated into figures that are not about anyone.
Support emails — up to 24 months.
Suppression records — if you unsubscribe or ask for deletion we keep the minimum needed to honour that, indefinitely. It is the only way to remember not to contact you.

9. Your rights

Wherever you live, you can ask us to:

Show you what we hold about you;
Correct anything wrong;
Delete it — subject to the records we must keep;
Export it in a portable format;
Restrict or object to processing we do on the basis of legitimate interest;
Withdraw consent you gave, without affecting what was done before you withdrew it.

One email to hello@musketeers.io does any of these. We answer within 30 days, free, and we will ask you to confirm your identity first — usually just by replying from the address on the account.

10. Cookies

This site sets no analytics or advertising cookies. What it does use:

Local storage to remember whether you chose the light or dark theme. It stays in your browser and never reaches us.
A session cookie on the signed-in pages, so you stay signed in. Strictly necessary, and the site does not work without it.
Paddle’s checkout sets what it needs to process your payment and prevent fraud, on its own frame and under its policy.

Because none of this is used for tracking or advertising, there is no consent banner to click through.

11. Security

Everything travels over HTTPS; access to production data is restricted to the people who need it; card data never touches our systems at all. We take the technical and organisational measures that are appropriate for a service of this size — but no one can promise perfect security, and we do not. If a breach affects your personal information we will notify you and the relevant regulator as the law requires.

12. Children

Our products are not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.

13. Changes

We will update this page when what we do changes; the date at the top says when it last did. For a change that materially affects your rights we will email account holders before it takes effect.

14. Contact and complaints

Anything on this page: hello@musketeers.io. Tell us first if you are unhappy — we would rather fix it than have you escalate.

If we do not put it right, you can complain to a regulator:

South Africa — the Information Regulator, inforegulator.org.za.
EU — the data-protection authority in the country you live in.
UK — the Information Commissioner’s Office, ico.org.uk.

Read the terms of sale · Read the refund policy