Privacy policy

Who are we?

Modudek is a service of Creative Communication, Koerselsesteenweg 192, 3582 Koersel, company number BE 0683.857.720. Questions about privacy? Email info@modudek.be.

Two roles

We are responsible for the data of visitors to this website and of our own customers (those with a Modudek account). That is what this policy is about.

The data our customers keep in Modudek about their own customers (contacts, appointments, messages, orders) is processed by us only on their behalf. The customer is responsible for it and we are the processor. Those agreements are in our data processing agreement (modudek.be/en/dpa).

If a customer uses Deliveries, we also keep on their behalf the name and signature of whoever receives a delivery, the time, an anonymised (hashed) IP address, the device and photos of the delivery. The purpose is proof of receipt; the customer keeps them as long as the accounting records they belong to.

What data and why

• Request form: name, business, email, phone, sector, chosen plan and your message. To contact you about Modudek (legitimate interest and your request).
• Account: name, email address, password (encrypted) and two-step verification codes. To provide the service and secure your account (contract).
• Acceptance of the terms: time, version, an IP address made unidentifiable and your browser. As proof of what we agreed (legitimate interest).
• Billing: company name, address, VAT number and payment details. Cards are processed by Stripe; we never see your full card number (legal obligation and contract).
• Domain names: the registrant details (name, company, address, email, phone) required for registration. These go to our registrar and the registry of the extension (contract and legal obligation).
• Email on your own domain: emails you receive on a forwarding address pass through our systems to be forwarded. We do not keep the content, only the date and result (contract).
• Security: IP addresses and technical data to prevent misuse of forms and block attacks, including through our hosting provider's firewall (legitimate interest).
• Example website (modudek.be/en/website-with-chatgpt): your business details and the texts you paste, plus an anonymised IP address against abuse. To show your example; we keep it for 7 days and then delete it automatically (your request). We send nothing to ChatGPT: you use it yourself.
• Partners (agencies and accountants): name, logo, website, team members, linked clients and commission. To run the partner account and to calculate and pay out commission (contract).
• Recommending: your personal code, and which new client became a client via your code, with the reward. To give both the free month (contract). The referrer only sees numbers, no names.

Who we share data with

We never sell data. We work with these providers, who only do what we ask:

• Supabase: database, login and files, servers in Frankfurt (EU).
• Vercel: hosting of the website and the app, with firewall.
• Resend: sending and receiving emails.
• Stripe: payments and invoices.
• Anthropic: AI features, such as writing website texts, the chat on websites and the AI assistant that drafts replies, tasks and work orders (only the data needed for that; Anthropic does not use it to train its models).
• Hostinger: registration and DNS management of domain names, servers in the EU.
• Hostinger Mail: the mailboxes you take through Modudek (address and content of your mail).
• CM.com: sending appointment reminders and confirmations by SMS or WhatsApp, if a client uses them (the Netherlands, EU). WhatsApp messages go through Meta Platforms Ireland.
• OpenStreetMap (OpenStreetMap Foundation, United Kingdom): looking up the map location of the business address you put on your website, so Google and map services place your business correctly (only that address, no data about your customers).

Where a provider processes data outside the European Union, this is done under the European Commission's standard contractual clauses or another valid safeguard.

Where the law requires it, for example at the request of a court or the police, we pass data on to the competent authorities.

With a partner (agency or accountant), but only if the client gives that partner access. The client can always withdraw that access.

How long we keep data

• Requests without a customer relationship: at most 2 years.
• Account data: as long as you are a customer, and then 3 months so you can still retrieve your data.
• Proof of acceptance of the terms: as long as a dispute about the agreement is possible, at most 10 years after it ends.
• Log of forwarded emails (date and result): 12 months.
• Invoices: 7 years, as required by law.

Cookies

This website does not use advertising or tracking cookies. In the app we only use cookies needed to keep you signed in, remember two-step verification and remember your language and last opened workspace.

Your rights

You can always access, correct or delete your data, object to processing or request your data in a file. Email info@modudek.be; we reply within a month.

You can also delete your account yourself via My account. Workspaces of which you are the only member are then deleted as well, with everything in them (such as contacts, quotes and invoices). So first download what you are legally required to keep, such as your invoices. If you own a workspace with other members, a running subscription or a domain name, or if you have a partner account, sort that out first; the app shows what still needs to be done. What we ourselves must keep by law, such as our invoices to you, we keep for as long as required.

We do not make decisions about you based solely on automated processing.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Security

Connections are encrypted (https), passwords are never stored in readable form, two-step verification is mandatory and each customer only sees their own data. Access to the data is limited to those who need it. In the event of a data breach, we act in accordance with the law and notify those who need to know.