1. Our Commitment to Your Privacy
MODS LTD ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use the Mods.chat platform (the "Platform").
For the purposes of the EU General Data Protection Regulation (GDPR), MODS LTD is the data controller responsible for your personal data. We are also committed to complying with the California Consumer Privacy Act (CCPA) and other applicable data protection laws.
By using the Platform, you acknowledge that you have read and understood this Privacy Policy and our Terms of Service. If you do not agree with our data practices, please do not use the Platform.
2. Information We Collect
We collect information to provide and improve our services. The types of data we collect fall into two categories:
A. Information You Provide Directly
When you create an account and use the Platform, you may provide:
- Account and Contact Data: Full name, email address, phone number, and country of residence
- Professional and Application Data: Resume/CV, work history, education, skills, language proficiency, assessment results, and uploaded documents
- Financial Data: Payout account information (bank details, payment method preferences) for processing compensation
- Communications Data: Messages you send to us through support channels, including the content and metadata of those communications
B. Information Collected Automatically
When you access the Platform, we automatically collect certain information about your device and usage:
- Usage Data: Pages visited, features used, actions taken, time spent on the Platform, and referring URLs
- Device Information: IP address, browser type and version, operating system, screen resolution, and device identifiers
- Location Data: Approximate geographic location based on your IP address
- Analytics Data: We use Vercel Analytics and Google Analytics to collect anonymized performance and usage metrics
- Cookies and Similar Technologies: We use cookies and similar technologies to collect usage data. For details, see our Cookie Policy.
3. Legal Basis for Processing
Under GDPR Article 6, we process your personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
- Contract Performance (Art. 6(1)(b)): Processing necessary to provide our services to you — including account creation, opportunity matching, application facilitation, and compensation processing. This is the primary legal basis for most of our data processing activities.
- Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as receiving marketing communications or optional analytics. You may withdraw consent at any time by contacting us at privacy@mods.chat.
- Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving the Platform, preventing fraud and abuse, and ensuring platform security — provided these interests do not override your fundamental rights and freedoms.
- Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal and regulatory obligations, such as tax reporting, record-keeping requirements, and responding to lawful government requests.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Providing Core Services: Creating and maintaining your account, building your professional profile, and matching you with relevant opportunities
- Facilitating Applications: Transmitting your profile and application materials to Clients when you apply for positions, and communicating updates about your application status
- Processing Compensation: Managing payout accounts and processing payments for completed work
- Platform Improvement: Analyzing usage trends, diagnosing technical issues, developing new features, and enhancing the overall user experience
- Communications: Sending service notifications, application status updates, opportunity alerts, and responding to your inquiries
- Security and Fraud Prevention: Protecting the Platform and its users by detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity
5. Disclosure of Your Information
Your privacy is not for sale. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We share your data only in the following circumstances:
- Clients: When you apply for an opportunity, we share your profile and application materials with the relevant Client. You control which opportunities you apply for.
- Service Providers: We engage trusted third-party service providers who
process data on our behalf under strict contractual obligations. These include:
- AWS & Vercel — Cloud infrastructure and web application hosting (United States, Germany)
- Neon — PostgreSQL database hosting (United States, Germany)
- Resend — Transactional email delivery (United States, Ireland)
- Infisical — Secrets and encryption key management (European Union)
- Documenso — Contracts and electronic signatures (European Union)
- Legal Compliance: We may disclose your information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your data.
6. International Data Transfers
MODS LTD is based in the United Kingdom. When you use the Platform, your personal data may be transferred to and processed in countries outside the United Kingdom, including the United States, where some of our service providers are located.
We ensure that international data transfers comply with applicable data protection laws through the following safeguards:
- Standard Contractual Clauses (SCCs): We enter into EU-approved Standard Contractual Clauses with our service providers to ensure adequate protection for personal data transferred outside the EEA
- Data Processing Agreements: All service providers processing personal data on our behalf are bound by contractual obligations that require them to protect your data in accordance with GDPR standards
- Security Measures: We implement appropriate technical and organizational security measures for all data transfers, including encryption in transit and at rest
For more information about the safeguards we have in place, please contact us at privacy@mods.chat.
7. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal data:
Rights Under GDPR (EEA Residents)
- Right of Access (Art. 15): Request a copy of the personal data we hold about you
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data
- Right to Erasure (Art. 17): Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations
- Right to Restrict Processing (Art. 18): Request that we limit how we process your data in certain circumstances
- Right to Data Portability (Art. 20): Request your data in a structured, commonly used, machine-readable format and transfer it to another controller
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes
- Right to Withdraw Consent (Art. 7): Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing performed before withdrawal
- Right to Lodge a Complaint: File a complaint with your local supervisory authority if you believe your data protection rights have been violated
Rights Under CCPA (California Residents)
- Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
- Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions
- Right to Opt-Out: Opt out of the sale of personal information. Note: we do not sell your personal information.
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights
How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@mods.chat. We will respond to verified requests within 30 days as required by GDPR (Article 12). In certain circumstances, we may need to verify your identity before processing your request. If we require an extension, we will inform you within the initial 30-day period.
8. Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption: Sensitive data is encrypted using AES-256-GCM encryption. All data in transit is protected using TLS 1.2 or higher.
- Access Controls: Role-based access controls ensure that only authorized personnel can access personal data, with the principle of least privilege applied throughout our systems
- Secure Infrastructure: Our infrastructure is hosted on trusted platforms with industry-standard security certifications
- Secrets Management: Encryption keys and credentials are managed through dedicated secrets management infrastructure, never stored in application code
- Regular Reviews: We regularly review and update our security practices to address emerging threats and vulnerabilities
While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at privacy@mods.chat.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are:
- Account Data: Retained for the duration of your active account, plus 90 days after account closure to allow for reactivation and to resolve any pending matters
- Application Data: Retained for as long as necessary to fulfill business and legal requirements, including compliance with employment regulations
- Financial Data: Retained in accordance with tax and financial reporting requirements (typically 7 years)
- Communications Data: Support correspondence is retained for up to 2 years for quality assurance and dispute resolution
- Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely as it cannot be used to identify you
When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.
10. Children's Privacy
The Platform is designed for professional use and is intended solely for individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18.
If we discover that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete that information. If you believe that a child has provided us with personal data, please contact us at privacy@mods.chat so we can take appropriate action.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. For material changes, we will provide at least 30 days' notice before the updated policy takes effect.
Notification may be provided by email to the address associated with your account or by posting a prominent notice on the Platform. We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when this policy was most recently revised.
12. How to Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:
- Data protection and privacy requests: privacy@mods.chat
- General inquiries: hi@mods.chat
We will respond to all data protection requests within 30 days in accordance with GDPR Article 12. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
Related Policies