Privacy Policy

Overview

This Privacy Policy explains what personal data MoodleMCP collects, what we use it for, who we share it with, and what rights you have over it. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Data controller

Studio LXD, S.L. — Tax ID (NIF) B24941411. Avenida Menéndez Pelayo, 36, 3.º, D. 28007 Madrid, Spain. [email protected]. Full identification details in the Legal notice.

Information we collect

• Account and organization data — name, email address, and authentication metadata when you sign up or join an organization.
• Moodle connection data — when you connect your Moodle instance, we store your Moodle web service token and associated MCP keys encrypted (AES-256-GCM), together with a log of tool calls made. These are technical credentials for your own Moodle installation — we don't access its content beyond operating the connection you authorise.
• AI chat usage data — when you use the conversational assistant, your messages and the Moodle data the assistant retrieves to answer you are sent to the AI provider you've configured (Anthropic, OpenAI, or Google) to generate the response. See "Who we share your data with" below.
• Payment data — processed by Stripe. Card numbers never reach our servers; we only store a reference to your Stripe customer and your subscription status.
• Contact form data — name, email address, and message content, if you write to us.
• Cookies — see our Cookie Policy.

Beyond the data needed to create your account, connect your Moodle, and process your subscription payment, everything else is optional. If you don't provide the required data, we won't be able to provide the service.

Legal basis for processing

Purpose	Legal basis
Account, organization, Moodle connection, AI chat	Performance of a contract (GDPR art. 6.1.b)
Payments and billing	Performance of a contract and legal obligation
Transactional communications	Performance of a contract
Contact form	Consent (GDPR art. 6.1.a)
Analytics and marketing cookies	Consent
Tax and accounting obligations	Legal obligation (GDPR art. 6.1.c)

How we use your data

• To provide the service: manage your account, connect your Moodle, and operate the AI assistant.
• To process payments and manage your subscription.
• To communicate important service updates (transactional emails).
• To respond to support or contact requests.
• To comply with legal obligations (e.g. tax and accounting).

Who we share your data with (processors)

We share data with the following providers, to the extent necessary to provide the service, under a data processing agreement:

• Stripe — payment and subscription processing.
• Anthropic, OpenAI, and Google — the AI model providers powering the conversational assistant. Only the provider you've configured receives your queries and the associated Moodle data.
• Cloudflare — CDN, bot protection (Turnstile), and file storage.
• Netcup — server hosting, in Frankfurt, Germany.
• Sentry — technical error monitoring, in its EU (Frankfurt) region.
• Google Analytics — web analytics, if enabled (see Cookie Policy).

We do not sell your personal data to third parties or use it for advertising purposes unrelated to the service.

Under their respective APIs' current terms of use, Anthropic, OpenAI, and Google do not use data submitted through their API to train their general-purpose AI models. This reflects each provider's public policy as of the date of this Policy — we recommend checking their current terms if this matters to you.

International transfers

Anthropic, OpenAI, and Google (as AI and Analytics provider) are based in the United States. Where these providers process your data, they do so under the European Commission's Standard Contractual Clauses or another valid GDPR transfer mechanism. Netcup and Sentry's EU region keep data within the European Union.

Retention periods

• Account and organization data — while your account remains active, and up to 30 days after closure, unless a legal obligation requires longer.
• Invoices and billing data — 6 years, per Spanish commercial law (Código de Comercio art. 30).
• Moodle tool-call detail logs (including arguments and results) — 90 days, after which they are automatically deleted.
• Aggregate usage statistics (daily counters, no identifying data or content) — kept indefinitely to show your organization's usage history.
• Security audit logs — these record sensitive actions (who did what, and when) for security, traceability and dispute-resolution purposes, and are kept in two stages. The technical data identifying the connection — IP address and browser user agent — is erased after 90 days; the record of the action itself is kept for 2 years and then deleted automatically. If you delete your account, the IP address and user agent on your entries are erased immediately, without waiting for those periods.
• Contact form data — until your request is resolved, and no more than 12 months.

Security measures

We apply appropriate technical and organisational measures to protect your data: encryption in transit (TLS) across all communications, encryption at rest (AES-256-GCM) of your Moodle connection credentials, role-based access control, and error monitoring. No system is 100% breach-proof, but we actively work to minimise risk.

Minors

MoodleMCP is not directed at minors. If you are a minor and want to use the service, it should be done on your behalf by a responsible adult (for example, your organization or educational institution).

Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability at any time by writing to [email protected].

If you believe we haven't properly handled your request, you can file a complaint with the Spanish Data Protection Agency (aepd.es, Calle Jorge Juan, 6, 28001 Madrid).

Changes to this policy

We may update this Privacy Policy to reflect changes to the service or applicable law. Material changes will be announced in advance.