Privacy Policy
How we collect, use, disclose, and protect personal data when you use the platform.
These terms govern your use of the platform. Please read them carefully and retain a copy for your records.
Service operator
MODROVER AI INC, a corporation registered in Wyoming, United States, operates this platform and is the controller for account, billing, website, and service telemetry data as described below. Our role when processing customer content is explained in this Policy. Privacy questions and rights requests may be submitted through the support channels shown on the website.
Company number: 2026-002047295
- Registered address
- 312 W 2nd St, Casper, WY 82601, United States
1. Scope and roles
This Policy applies to our websites, account services, API gateway, and related support and abuse-reporting channels. We generally act as controller for account, policy-acceptance, billing, website, and service telemetry data. When we route and process prompts, reference assets, or outputs solely on a business customer's instructions, our role may be that of a processor or service provider under applicable data protection law.
2. Data we collect
We collect account and contact details, authentication and security records, immutable records of the policy versions you accept at registration (version identifier, locale, registration source, and timestamp), billing and transaction information, support and abuse-report communications, device and network information, and usage telemetry such as model, token counts, timing, status, and API-key identifiers. To support request routing, asynchronous video or multimodal task polling, self-service log inspection, and troubleshooting, we also process and briefly store sanitized request and response content (with binary, base64, and oversized payloads replaced by placeholders and embedding vectors excluded from log storage). When you browse our public website pages, we collect first-party website analytics: pages viewed, visit time and duration, referring site and campaign parameters, searches and model-ID copies in the model catalog, approximate country and region derived from your IP address (the IP address itself is not stored), and device, operating system, and browser type. Pages inside the signed-in console are not included.
3. How we use data
We use data to provide and secure the Services, authenticate users, record contractual acceptance, route model requests, calculate usage and charges, prevent and investigate abuse, handle takedown and rights-infringement notices, troubleshoot incidents, communicate service information, comply with law, and improve reliability and product experience. We never use your request prompts, parameters, reference assets, or response outputs to train or fine-tune any artificial intelligence models, nor do we access request or response bodies manually unless you authorize troubleshooting through a support ticket or where required for security/abuse investigation or legal compliance. We use website analytics to understand which model providers and models interest our visitors and to inform product, pricing, and catalog decisions; when you are or have been signed in on the same browser, it is linked to your account, including browsing on that browser before you registered. We do not use website analytics for advertising, sell it, or share it with third-party analytics providers, and the website does not use advertising, marketing, or cross-site tracking technologies.
4. How we disclose data
We may disclose data to Model Providers selected for a request, infrastructure and payment providers, professional advisers, and law enforcement or regulatory authorities where legally required (including mandatory child-safety or unlawful-content reporting). We may also disclose data in connection with a merger, financing, acquisition, or sale of assets. Providers receive only the data reasonably necessary for their function and are subject to contractual or legal obligations where applicable. We do not sell personal data for money.
5. International transfers
Our providers and model endpoints may operate in countries different from yours. Where required under GDPR, UK GDPR, or other applicable laws, we use recognized transfer mechanisms (such as Standard Contractual Clauses) or other lawful safeguards. Because routing a request to a selected model may involve an international transfer to that Model Provider, do not submit personal data that you are not authorized to transfer or that requires localization we have not expressly agreed to provide.
6. Retention and security
We apply tiered retention periods based on data type: billing, policy-acceptance, and usage metadata (such as timestamps, models, token counts, status codes, and charges) is retained as needed for reconciliation, accounting, contract proof, dispute resolution, and legal obligations, whereas sanitized request and response bodies and temporary task states are retained only briefly for delivery and troubleshooting and are automatically and permanently deleted by scheduled cleanup upon expiry. Raw website analytics events are kept for a limited period (180 days by default) and deleted by daily cleanup. We use administrative, technical, and organizational safeguards, including encryption in transit and at rest, role-based access control, and audit logging, though no system is completely secure. You are responsible for protecting your API keys and avoiding unnecessary sensitive data in prompts.
7. Your choices and rights
Depending on your location, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent where processing relies on consent. You may also appeal a denied request or complain to a supervisory authority. We may verify your identity and retain information where a legal obligation or overriding legitimate ground applies. Account settings and browser controls for cookies and site data provide additional choices.
8. Age requirement, changes, and contact
The Services are intended solely for adults aged 18 or older (or a higher age of majority required in your jurisdiction) and are not directed to anyone under 18. We do not knowingly collect personal data from minors under 18. If we learn that an account belongs to a person under 18, we will close the account and delete associated personal data except where retention is required by law. We may update this Policy and will revise the date above; material changes may receive additional notice. To exercise privacy rights or ask questions, contact us through the support or contact email shown on the website.