Privacy Policy

Privacy Policy for ModKie β€” data controller, collection, legal bases, retention, rights, and third-party AI providers.
Jun 28, 2026

Overview

Last updated: 2026-06-28

ModKie ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use the ModKie AI API platform at modkie.com (the "Service").

Please read this Policy before using the Service. By using the Service, you acknowledge this Policy. We may update it from time to time; material changes will be notified as described in Section 13.

1. Data Controller

The data controller for the Service is the legal entity operating ModKie. For controller identity and registered address, see About Us or contact:

2. Information We Collect

2.1 Information You Provide

  • Account data: name, email, password (stored hashed), team membership, locale, and profile settings.
  • Payment data: transaction amounts, order status, and limited metadata from payment processors. We do not store full payment card numbers on our servers (see Section 5).
  • Support communications: emails and tickets you send to us.
  • Content you submit: prompts, uploaded media, training datasets, annotations, and Playground inputs needed to fulfill requests.

2.2 Information Collected Automatically

  • Device and network: IP address, browser type, device information, time zone, and referral data.
  • Usage data: pages visited, feature usage, session duration, and diagnostic logs.
  • API telemetry: API key identifiers (not secret values after creation), endpoints, provider/model names, task IDs, latency, status, credits charged, and error messages.

2.3 Third-Party Sign-In

If you sign in with Google or GitHub, we receive basic profile information authorized by that provider.

3. How We Use Information

PurposeLegal basis (where GDPR applies)
Provide and maintain the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract / legitimate interests
Service notices (billing, security, policy updates)Legitimate interests
Security, fraud prevention, and abuse detectionLegitimate interests
Product improvement and analyticsLegitimate interests
Legal complianceLegal obligation

We may aggregate or de-identify data for statistics. Aggregated data cannot reasonably identify you.

We do not sell your personal information, including as "sale" is defined under laws such as the CCPA.

4. Cookies and Similar Technologies

TypePurposeCan disable
Strictly necessarySign-in, security, core featuresNo
FunctionalLanguage and preferencesYes
AnalyticsUsage measurement and product improvementYes

You can control cookies through browser settings. Disabling some cookies may affect functionality.

5. Sharing and Disclosure

We share information only as needed:

  • Service providers: cloud hosting, authentication, payment (Stripe, PayPal, Creem), storage, analytics, and customer support, under confidentiality obligations. Payment card data is processed by PCI-DSS compliant payment providers and is not stored on ModKie servers.
  • AI and infrastructure providers: when you invoke third-party models through ModKie, necessary request data is transmitted to fulfill your task.
  • Team collaborators: when you use shared workspace features.
  • Legal requirements: when required by law, court order, or valid government request.
  • Business transfers: merger, acquisition, or asset sale, subject to appropriate safeguards.
  • With your consent: for other purposes where you have given explicit consent.

6. Data Security

We use reasonable technical and organizational measures, including TLS/HTTPS, access controls, hashed passwords, and logging. No system is completely secure.

If a security incident likely affects your rights, we will notify you and regulators within 72 hours of becoming aware, where required by law.

7. Retention

Data typeRetention periodAfter expiry
Account dataWhile account is active; 90 days after deletion request or closureDelete or anonymize
Transaction / billing recordsAs required for tax and accounting, typically up to 7 yearsArchive or delete per law
Support tickets24 monthsSecure deletion
API usage logs24 months for metering and abuse preventionDelete or aggregate
Uploaded / generated mediaPer product features and upstream provider policiesDelete per schedule
Training datasetsUntil you delete or close the projectDelete subject to backups

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing, and to withdraw consent. Contact [email protected]; we aim to respond within 30 calendar days.

You may also lodge a complaint with your local data protection authority.

9. Marketing Communications

We may send product updates or promotional emails only where permitted by law and your preferences. You may opt out via unsubscribe links or account settings. Opting out does not affect essential service messages (billing, security, legal notices).

10. International Transfers

Our servers and providers may operate in countries other than yours (for example the United States, Singapore, or the EU). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

11. Children's Privacy

The Service is intended for users aged 18 and older. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided data; we will review and delete where appropriate.

The Service may link to or integrate third-party sites or services. This Policy applies only to information we collect directly. Review third-party policies before use.

13. Changes to This Policy

Material changes will be posted here with an updated date and, where appropriate, notified at least 15 days in advance by email or in-product notice. Continued use after the effective date constitutes acceptance.

14. Contact

See also our Terms of Service and Acceptable Use Policy.

Privacy Policy