How we handle personal data under the GDPR. Plain-language summary first, details below.
Controller: [Company legal name and address]. Contact: hello@modilo.io.
Account data (name, email). Process content you enter to be mapped and analysed. Usage data (technical server logs only — we run no analytics).
To provide the service (map, analyse, recommend), to secure and improve it, and to communicate with you. Legal bases: contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
To generate your maps and analysis, your process content is sent to Anthropic PBC (United States), acting as our sub-processor. It is used only to produce your output and is not used to train any model. See our DPA and Security page.
Your identified workspace is kept separate from an anonymised, aggregated market-insights pool used only to improve the product. Identifiers (company, people, locations, brands) are stripped before anything enters the pool.
The service is hosted in the EU, in Frankfurt (Germany), on Render. Your account, your maps and your analyses are stored there.
One transfer leaves the EU, and we would rather name it than bury it. When you generate a map, the process text you entered is sent to Anthropic PBC in the United States to produce the output. That transfer takes place under the EU Standard Contractual Clauses in Anthropic's data processing terms. No other category of data leaves the EU. Full details in the DPA.
We keep account data while your account is active, and process content only as long as needed to provide the service. [Exact retention periods to be confirmed].
Deleting your data: you can delete any saved map or analysis from inside the app at any time. To delete your whole account and everything in it, email hello@modilo.io and we will action it and confirm to you in writing.
Access, rectification, erasure, restriction, portability and objection under Arts. 15–21 GDPR. Contact hello@modilo.io. You may lodge a complaint with a supervisory authority.
We run no analytics and no tracking of any kind. There are no third-party scripts on this site. The only cookie we set is pa_session, which keeps you signed in; it is strictly necessary, so there is no cookie banner to click.
Last updated: 13 September 2026.