Privacy Policy
Last updated: September 18, 2026
1. Introduction
Modaflow LLC ("Company", "we", "us", or "our") operates Modaflow (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you register, we collect your name, email address, and password.
- Payment Information: Payment details are processed by our third-party payment processor (Polar.sh). We do not store your credit card numbers.
- Uploaded Content: Garment images you upload to generate try-on images.
- Communications: Information you provide when contacting us for support.
2.2 Information Collected Automatically
- Usage Data: Information about how you use the Service, including features accessed, generations created, and credits used.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP address, access times, pages viewed, and referring URLs.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and manage your account and credits
- Send you service-related communications (account verification, purchase confirmations, technical notices)
- Respond to your inquiries and provide customer support
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
4. How We Share Your Information
We may share your information with:
- Service Providers: Third parties that help us operate the Service, including:
- Polar.sh (payment processing)
- Cloudflare (content delivery and security)
- AI providers (image generation - images are processed but not retained)
- Email service providers (transactional emails)
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell your personal information to third parties.
5. Data Storage and Security
Your data is stored on secure servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Uploaded images and generated content are stored in secure cloud storage (Cloudflare R2). While we take reasonable precautions, no method of transmission or storage is 100% secure.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Account Information: Retained while your account is active and for a reasonable period thereafter.
- Uploaded Images: Retained until you delete them or close your account.
- Generated Images: Retained until you delete them or close your account.
- Transaction Records: Retained as required for tax and legal compliance.
You can delete your content at any time through the Service interface.
7. Your Rights
7.1 All Users
You have the right to:
- Access and update your account information
- Delete your uploaded content and generated images
- Close your account
7.2 European Economic Area (GDPR)
If you are in the EEA, you have additional rights:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
7.3 California Residents (CCPA)
California residents have the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Opt out of the sale of personal information (we do not sell personal information)
- Access your personal information
- Request deletion of personal information
- Not be discriminated against for exercising these rights
To exercise any of these rights, please contact us at [email protected].
8. Cookies
We use essential cookies necessary for the Service to function properly:
- Session Cookies: To maintain your logged-in state
- Security Cookies: To prevent cross-site request forgery
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this policy.
10. Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Email: [email protected]