Modular Automations collects information that you voluntarily provide when you interact with our services, including:
When you visit our website, we may automatically collect certain information, including:
Modular Automations uses the information we collect for the following purposes:
We do not sell your personal information to third parties.
By providing your phone number and opting in to receive text messages from Modular Automations, you consent to receive recurring automated text messages at the number provided. These messages may include:
Message frequency varies. Message and data rates may apply. Your carrier's standard messaging rates may apply.
To opt out: Reply STOP to any message to unsubscribe. You will receive a confirmation message and no further texts will be sent.
To get help: Reply HELP for assistance, or contact us at .
Your consent to receive text messages is not a condition of purchasing any goods or services. You may opt out at any time without affecting your ability to use our services.
We will not share your phone number or text message opt-in data with third parties for their marketing purposes.
Modular Automations uses artificial intelligence (AI) technology to assist with website chat (Conversation AI) and phone calls (Voice AI). This means:
Human oversight: All AI interactions are monitored. You may request to speak with a human at any time during a conversation. Complex or sensitive matters are escalated to our team.
Accuracy: While our AI is designed to provide helpful and accurate information, AI-generated responses may occasionally contain errors. For important decisions regarding our services, we recommend confirming details with a human team member.
Information collected during AI interactions is subject to the same privacy protections described in this policy.
Modular Automations uses cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us provide and improve our services.
| Tool | Purpose | Provider |
|---|---|---|
| Chat Widget | Live chat functionality and visitor identification for returning visitors | Our CRM platform |
Most web browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies, though this may affect your experience on our website. For more information, visit your browser's help documentation.
Modular Automations uses the following third-party sub-processors that may collect or process your information:
Each of these services has its own privacy policy and Data Processing Agreement governing the use of your data. We encourage you to review their privacy policies. We share only the minimum information necessary for each service to function.
We are not responsible for the privacy practices of these third-party services beyond our contractual relationships with them.
Modular Automations retains your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
Specifically:
When your personal information is no longer needed, we will securely delete or anonymize it.
You may request deletion of your personal information at any time by contacting us using the information provided at the end of this policy.
For platform tenants, the following additional retention rules apply:
action_executions
ledger are retained for seven years. After tenant offboarding the entries are
anonymized (tenant identifiers replaced with a sentinel value) but retained per
GDPR Article 17(3)(b) for legal-hold and accounting purposes.contacts, opportunities, lead_scores,
activities, content, campaigns) are exported
wholesale at offboarding and migrated to per-tenant deletion in milestone v73 of
our roadmap. Until the v73 migration ships, deletion of these tables in the
offboarding flow is a no-op (full-table truncation would affect platform data);
the customer's data in these tables is preserved with our commercial controls.If you require a custom retention window for compliance reasons (e.g., a regulated industry with shorter or longer mandated retention), contact us at privacy@modularautomations.com and we will negotiate a per-tenant retention addendum to your Data Processing Agreement.
Modular Automations operates as a multi-tenant software-as-a-service platform. Your data is logically isolated from other customers' data by a tenant identifier attached to every record we store. We do not perform queries that cross tenant boundaries in ordinary application logic.
Application-layer safeguards. Our action executor refuses to
write data to one tenant using another tenant's credentials and raises a
CrossTenantWriteAttemptError at the boundary. Such attempts are
recorded as priority-zero events in our audit ledger. We monitor cross-tenant
attempts as a Service Level Objective and alert immediately on any breach.
Encryption at rest. OAuth tokens, refresh tokens, and webhook signing keys are encrypted at rest using Fernet symmetric encryption. The encryption key is held outside the database. A database-only compromise does not yield credentials in plaintext.
Operational kill switches. Our operators can halt traffic to any sub-processor (CRM, payments, LLM provider) without a code deploy if a breach or vendor incident is suspected. Kill switches are documented in our incident runbooks and audit-logged when triggered.
Audit ledger. Every action taken on your data is recorded in
the action_executions audit table with an idempotency key, the
operator (system or admin email), and the input/output payloads. Admin reads of
your tenant data are logged in a separate admin-audit stream. Both are
exportable on request alongside the data export endpoint described in this
policy's data-rights section.
If you are a California resident, you have the following rights under the CCPA:
To exercise these rights, contact us at hello@modularautomations.com. We will respond to verifiable consumer requests within 45 days.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights regarding your personal data:
To exercise these rights, contact us at privacy@modularautomations.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Legal Basis for Processing: Modular Automations processes your personal data based on: (a) your consent, (b) performance of a contract, (c) our legitimate business interests, or (d) compliance with legal obligations.
How to exercise these rights operationally. Email us at
privacy@modularautomations.com or contact your designated administrator. For
data export and portability requests we generate a complete archive of your
tenant data via our admin endpoint at
/api/admin/tenants/{tenant_id}/export and deliver it to you in a
portable JSON-and-asset bundle. For erasure requests we
follow our 30-day grace soft-delete process: your data is immediately marked
deleted (no further processing), and is irreversibly hard-deleted after the
30-day grace window. During the grace window, you may revoke the deletion request
at no cost; after the grace window ends, your data is permanently removed except
for audit-log entries retained per GDPR Article 17(3)(b) for legal-hold and
accounting purposes.
Modular Automations are not directed to individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information as quickly as possible.
If you believe we have inadvertently collected information from a child, please contact us at hello@modularautomations.com.
Modular Automations may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 30 days.