ModPro AI Privacy Policy

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect and Why

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. Below we describe the categories of personal information we collect and the purpose for collecting each.

• Account and authentication data (name, email address, profile photo): Collected to create and secure your account, authenticate your identity, and enable you to log in to the Services.
• Vehicle and garage data (vehicle make, model, year, trim, modifications, photos): Collected to power your garage, display your vehicles, and enable vehicle-related features such as search and discovery.
• User-generated content (posts, comments, messages, images): Collected to enable community features, messaging, and social interactions within the Services.
• Device and usage data (IP address, browser type, device information, pages visited, interaction events): Collected automatically to improve site functionality, diagnose issues, and understand how users interact with the Services.
• Customer support data (messages and information you share when contacting support): Collected to respond to your inquiries and improve our Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information We Collect through Cookies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

• Our authentication provider, who verifies your identity and manages your account credentials on our behalf.
• When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third Party Websites and Links.

How We Use Your Personal Information

• Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including to send notifications to you related to your account, to create, maintain and otherwise manage your account, and to enable community and vehicle management features.
• AI-Powered Features. We may process your vehicle data and text inputs through artificial intelligence services to provide features such as vehicle specification lookups, content generation, and smart recommendations. This data is sent to our AI service providers solely to deliver the requested feature and is not used to train third-party AI models.
• Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites.
• Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Communicating with you. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

Analytics and Tracking

We use analytics and tracking technologies to understand how users interact with our Services, improve site functionality, and measure the effectiveness of our marketing. These technologies may collect data such as your IP address, browser type, device identifiers, pages visited, and interaction events.

• Product Analytics: We use PostHog to track user interactions, feature usage, and page views. This helps us understand which features are most valuable, identify usability issues, and improve the overall experience.
• Advertising Tracking: We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns. This may collect hashed identifiers, IP address, and user agent data to attribute conversions and optimize ad delivery.
• Performance Monitoring: We use Vercel Analytics to monitor page load performance and web vitals to ensure a fast and reliable experience.

You can manage your cookie and tracking preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of certain features.

Third-Party Service Providers

We use the following third-party service providers to operate and improve the Services. Each provider may receive only the data necessary to perform its function on our behalf:

• Clerk — Authentication and user management. Receives your email, name, and login credentials to securely authenticate your account. Privacy Policy
• Supabase — Database hosting and file storage. Stores your account data, vehicle information, images, and application data. Privacy Policy
• Vercel — Application hosting and performance analytics. Processes web requests and collects performance metrics. Privacy Policy
• Typesense — Search engine. Indexes vehicle and profile data to power search and discovery features. Privacy Policy
• Stream — Activity feeds. Privacy Policy
• PostHog — Product analytics. Collects usage events, page views, and device information to help us improve the Services. Privacy Policy
• Meta (Facebook) Pixel — Advertising and conversion tracking. May receive hashed email, IP address, and user agent to measure ad performance. Privacy Policy
• Sentry — Error monitoring. Collects error logs, stack traces, and device information to help us identify and fix bugs. Privacy Policy
• OpenAI, Google (Gemini), and Anthropic — AI services. Receives text prompts and vehicle data to power AI-driven features such as specifications lookup and content generation. Data is processed per request and is not used to train their models. OpenAI, Google, Anthropic
• Resend — Transactional email delivery. Receives your email address to deliver service-related emails. Privacy Policy
• ConvertKit — Email marketing. Receives your name and email address if you subscribe to our mailing list. Privacy Policy
• Intercom — Customer support and in-app messaging. Receives your user identity and email to enable support conversations. Privacy Policy
• Trigger.dev — Background job processing. Processes task payloads containing user and vehicle data for asynchronous operations such as search indexing and data syncing. Privacy Policy
• Dub — Link management. Processes link metadata and click analytics for shared links. Privacy Policy

Each of these providers is contractually required to handle your data in accordance with their respective privacy policies and applicable data protection laws.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With the third-party service providers listed above, who perform services on our behalf (e.g., authentication, data storage, analytics, customer support, image processing).
• With business and marketing partners, to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as through your use of social media widgets or login integrations, with your consent.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

User Generated Content

The Services may enable you to post content, share vehicle photos, and interact with other users. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

Third Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods are as follows:

• Account data: Retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Vehicle and garage data: Retained for the duration of your account. Deleted when your account is deleted.
• User-generated content: Posts, comments, and uploaded images are retained for the duration of your account unless you delete them individually.
• Messages: Retained for the duration of your account to enable conversation history.
• Analytics and usage data: Retained in aggregated or pseudonymized form for up to 24 months to improve the Services.
• Error and diagnostic logs: Retained for up to 90 days to identify and resolve technical issues.
• Marketing email preferences: Retained until you unsubscribe or request deletion.

When data is no longer needed, we securely delete or anonymize it. Some data may be retained in encrypted backups for a limited period before being permanently purged.

Security of Your Information

We implement appropriate technical and organizational measures to protect your personal information, including encryption of data in transit and at rest, access controls, and regular security assessments. However, no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know: You may request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to Delete: You may request that we delete personal information we maintain about you. You can delete your account directly through your account settings, or by contacting us at the email below.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you. You can update most information directly through your account settings.
• Right of Portability: You may request a copy of the personal information we hold about you in a structured, commonly used format.
• Right to Opt out of Sale or Sharing or Targeted Advertising: You may direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out.
• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may withdraw this consent at any time.
• Managing Communication Preferences: You may opt out of promotional emails at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account.

How to exercise your rights: You may exercise any of these rights by emailing us at dmerwin@modpro.ai. We will respond to your request within 30 days (or sooner as required by applicable law). We may need to verify your identity before processing your request.

We will not discriminate against you for exercising any of these rights. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

International Users

Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact