Privacy Policy

1. Information We Collect

Depending on how you interact with Modex, we may collect the following categories of information:

• Account details — name, work email, organisation, job title, billing contact information, and credentials used to access subscriber desks;
• CRM, calendar & webhook data — records you authorise us to sync or receive via integrations (e.g. appointment bookings, pipeline events, calendar availability, call metadata, and operational payloads necessary to run AI workflows);
• Payment information — subscription status, invoice history, and billing identifiers. Card numbers and payment credentials are vaulted exclusively by Stripe and never stored on or transmitted through Modex servers;
• Usage & telemetry — IP address, device/browser type, access logs, API call metadata, error reports, and security audit trails;
• Customer content — files, prompts, transcripts, and outputs you upload or generate within the Services;
• Communications — support tickets, sales enquiries, and legal correspondence.

2. How We Use Your Data

We use personal and business data to:

• provision, operate, and secure the Modex AI infrastructure and subscriber products;
• process payments, metered overages, and success fees via Stripe;
• execute voice, LLM, and automation workflows you configure;
• improve product reliability, fraud detection, and platform performance using aggregated analytics;
• train or fine-tune tenant-isolated models where applicable — meaning model improvements are scoped to your organisation's environment and not commingled with unrelated clients' proprietary data without consent;
• comply with legal, tax, and regulatory obligations.

We do not sell B2B client data to third parties. We do not monetise your CRM records, call transcripts, or proprietary business content through data brokerage. Data is shared only with subprocessors listed below, strictly to deliver the Services.

3. Third-Party Subprocessors

Modex uses carefully selected subprocessors to host, bill, and power the platform. Each subprocessor processes data under contractual safeguards appropriate to UK GDPR:

• Vercel — cloud hosting, edge delivery, and deployment infrastructure;
• Stripe — payment processing, subscription billing, and PCI-compliant card vaulting;
• LLM & voice providers — including OpenAI, Anthropic, Vapi, and ElevenLabs for inference, transcription, synthesis, and telephony workflows initiated by your configuration.

We may also use email delivery, analytics, and monitoring providers under equivalent data processing terms. Where personal data is transferred outside the UK/EEA, we implement appropriate safeguards such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or equivalent mechanisms.

4. Data Retention & Deletion

We retain personal data only for as long as necessary to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

• active subscription data — for the life of the account plus a reasonable wind-down period;
• billing records — up to seven (7) years where required for tax and audit purposes;
• security logs — on a rolling basis, generally not exceeding twenty-four (24) months.

You may request full data deletion by emailing contact@modexventures.com. We will verify your identity and process valid erasure requests within thirty (30) days, subject to exceptions where retention is required by law (e.g. open invoices, fraud prevention, or statutory record-keeping).

5. Cookie Policy

Modex websites and subscriber applications use cookies and similar technologies:

• Strictly necessary / functional cookies — required for authentication, session management, security, and checkout flows (including Stripe Elements). These cannot be disabled without breaking core functionality;
• Analytical cookies — used to measure traffic, diagnose performance, and improve the platform. Where required by law, we obtain consent before setting non-essential analytics cookies.

You can control cookies through your browser settings. Blocking certain cookies may limit your ability to log in or complete subscription checkout.

6. Lawful Bases for Processing

We process personal data on the basis of: (a) contract performance — to deliver subscribed Services; (b) legitimate interests — security, fraud prevention, and product improvement, balanced against your rights; (c) legal obligation; and (d) consent where required (e.g. non-essential cookies or optional marketing communications).

7. Your Rights

Under UK GDPR, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based. To exercise your rights, contact contact@modexventures.com. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement technical and organisational measures appropriate to the risk, including TLS encryption in transit, role-based access controls, audit logging, and vendor due diligence. No method of transmission or storage is completely secure; you are responsible for safeguarding your account credentials.

9. Data Controller & Contact

Modex Ventures is the data controller for personal data described in this policy. For privacy enquiries, data subject requests, or subprocessors questions: contact@modexventures.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Services after changes become effective constitutes acceptance of the revised policy where permitted by law.