Privacy Policy

modulate.pro is operated by Nupik Wenpach LLC (“we”, “us”). This policy explains what the service collects, why, how long it is kept, and who else touches it.

Privacy enquiries: noah@nupikwenpach.com.

Three kinds of information, and nothing beyond what the product needs to work.

• ·Account information. Your email address, optionally your first and last name, a hashed form of your password (never the password itself), and, if your employer has an organization account, which organization your email domain belongs to.
• ·The content you create. Notes, checklists, tags, deadlines and reminder settings, images you attach, messages and reactions in chats, and the connections you form with other people. This is your material; we store it so the product can show it back to you.
• ·Technical information needed to run the service. Session cookies, whether a request came from a phone or a desktop (used to show “added from your phone” on a note), and, if you turn on notifications, the push subscription your browser issues. Ordinary server logs record requests and errors.
• ·Which pages get visited. We count page views so we know whether anyone is finding the site. Each view records the path, the site you arrived from (its domain only, never the full address), whether it was a phone or a desktop, your account if you were signed in, and a random identifier your browser generates for itself and stores locally. That identifier lets us count people rather than only clicks. It is not derived from your device, it identifies nothing outside this site, and clearing your browser data replaces it. We do not record IP addresses for this.
• ·What you agreed to, and when. Creating an account records the moment you accepted these terms. If you ticked the box asking for occasional tips, that records the moment too, and which screen you were on. Leaving the box unticked records nothing, which is the same as never having been asked.

There is no advertising, no third-party analytics, no tracking pixels, no third-party cookies, no cross-site tracking, no fingerprinting, and no sale or sharing of personal information for advertising purposes. The page-view counting described above is entirely our own and never leaves our servers.

We process this information to provide the service you asked for, to keep accounts secure, to bill for paid plans, and to comply with the law. Where the GDPR applies, the legal bases are performance of a contract with you, our legitimate interest in operating and securing the service, and your consent where you have given it, notifications and the tips email being the clearest examples, both of which you can withdraw at any time.

Email you did not ask for is email we do not send. The only messages that go out without being requested are the ones the service cannot work without: a sign-in link you asked for, a password reset you started, a receipt for something you bought, or notice of a change to these terms. Tips and product news are opt-in, the box is never ticked for you, every one of those messages carries an unsubscribe link, and unsubscribing has no effect on your account or the transactional messages above. We do not sell, rent or share your address with anyone for their own marketing.

We use a small number of service providers, each doing one job. They act on our instructions and may not use your data for their own purposes.

• ·Railway. Hosting, application servers, and the database where your content is stored.
• ·Resend. Delivery of email such as sign-in links, invitations, password resets, and the occasional tips message if you asked for one. Receives your email address and the message. Your notes are never in any of them.
• ·Your browser’s push service. Apple, Google or Mozilla depending on your device, only if you enable notifications. Receives the notification, so avoid putting anything sensitive in a note title if that concerns you.
• ·Stripe. Payment processing for paid plans. Card details go directly to Stripe and are never seen by or stored on our servers; we keep only a customer identifier and the subscription status.

We may also disclose information if legally compelled to, or to protect the rights and safety of our users. If the business is ever sold or merged, your data may transfer as part of it, and this policy continues to apply until you are told otherwise.

The service is hosted in the United States. If you use it from outside the US, your information is transferred there and processed under this policy.

Your content is kept for as long as your account exists. Delete a note and it is removed; delete your account and your notes, tags, attachments and account record are removed with it.

Two deliberate exceptions. Messages you sent in a shared chat are anonymised rather than deleted, so that other people’s conversations remain readable. And we retain billing records for as long as tax and accounting law requires, independent of account deletion.

You can access and correct your details, export your content, and delete your account from inside the product, with no need to email anyone and wait. Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to a data protection authority.

Anything you cannot do from your account settings, write to noah@nupikwenpach.com and we will handle it.

Traffic is encrypted in transit. Passwords are stored only as salted hashes and cannot be recovered, only reset. Access to your notes is checked on every request against your own account rather than assumed from the interface. No system is perfectly secure, and we will not pretend otherwise. But if a breach affects you we will tell you.

This service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact noah@nupikwenpach.com and we will remove it.

If this policy changes materially we will update the effective date above and, for changes that affect how your information is used, tell you in the product or by email before they take effect.

Nupik Wenpach LLC. Email noah@nupikwenpach.com.