Privacy Policy

1. Introduction

90mod ("we," "us," or "our") operates the 90mod platform at 90mod.com and app.90mod.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

By accessing or using 90mod, you agree to the terms of this Privacy Policy. If you do not agree, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, company name, and role when you register or request access.
• Contact form submissions: Name, email, company, and message content when you contact us through our website.
• Business data: Information you enter into the platform, including contacts, deals, invoices, projects, and other operational records.
• Payment information: Billing details processed securely through Stripe. We do not store full credit card numbers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, timestamps, and interaction patterns within the platform.
• Device information: Browser type, operating system, device type, and screen resolution.
• Network data: IP address, referring URL, and general geographic location.
• Cookies: Session cookies for authentication and preferences. We do not use third-party tracking cookies.

2.3 AI Usage Data

When you use 90mod's AI assistant, we process conversation content to generate responses. AI conversations are scoped to your organization and are not used to train third-party models. Token usage is tracked for billing purposes.

3. How We Use Your Information

• To provide, maintain, and improve the 90mod platform.
• To process transactions and send related information, including confirmations and invoices.
• To respond to your inquiries and provide customer support.
• To send administrative information, such as updates, security alerts, and service notices.
• To enforce our terms of service and protect against unauthorized use.
• To monitor platform health, performance, and security.
• To comply with legal obligations.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• Service providers: Trusted third parties that help us operate the platform (e.g., Stripe for payments, email delivery services). These providers are bound by contractual obligations to protect your data.
• Legal compliance: When required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data.
• With your consent: When you explicitly authorize sharing.

5. Data Security

We implement industry-standard security measures to protect your information:

• TLS encryption for all data in transit.
• Encryption at rest for stored data.
• Role-based access control with object-level permissions.
• Full audit trail on critical data changes.
• Brute-force protection via Fail2ban and rate limiting.
• Regular security audits and dependency monitoring.
• API keys stored as cryptographic hashes, never in plaintext.

No system is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or legitimate business purposes (e.g., billing records, audit logs).

7. Multi-Tenant Isolation

90mod is a multi-tenant platform. Your organization's data is logically isolated from other organizations at the database query level. Data boundaries are enforced automatically. Your data is never accessible to other tenants.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact our team.

9. Cookies

We use only essential cookies required for platform functionality:

• Session cookies: Maintain your authenticated session. Expire when you close your browser or after 24 hours of inactivity.
• Preference cookies: Remember your display preferences (e.g., timezone, locale).

We do not use advertising cookies, analytics trackers, or third-party tracking scripts.

10. Children's Privacy

90mod is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. International Data Transfers

Your data is stored on servers located in the United States. If you access 90mod from outside the United States, your information may be transferred to and processed in the United States. By using 90mod, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Continued use of 90mod after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, get in touch with our team.