This Privacy Policy explains what personal data Modd collects, why we collect it, and your rights over it. Modd is the trading name used for the service at moddcv.com and acts as the data controller for the processing described here. You can contact the controller at support@moddcv.com or Modd, Dene Mansions, London NW6 1QU, United Kingdom.
1. What we collect
- Account data: email, password hash, OAuth identifier.
- Your Content: uploaded CVs and pasted/linked job descriptions.
- Generated content: rewritten CVs, scores and reports.
- Job-application tracker data: employer, role, status, priority, application date, notes, reminders, linked CV or report, and any job-source URL or text snapshot you choose to save.
- Usage and run data: pages visited, actions taken, basic device and browser information, report-run status and diagnostics, and approximate city and country inferred from hosting-network headers when a report run starts. We do not use precise GPS location.
- Anonymous shared-result totals: daily counts of public shared-result loads and “Get your free report” selections, grouped only by fixed source and campaign labels. The counter does not retain a shared-result link, account or visitor identifier, name, company, role, score, CV or job content, query string, referring URL, IP address or user agent. To deter automated inflation, an ephemeral keyed network-address hash uses a one-minute expiry in server memory; Modd does not write that hash to the counter table or application logs.
- Redacted diagnostic screenshots: when you choose “Report this error” for a rendered system or report-run error, Modd may capture the visible failure interface so we can diagnose it. The capture excludes images and sensitive sections and redacts form values, filenames and other privacy-marked text before upload. It is linked to the relevant account and, where available, the failed run or incident.
- Acquisition data (with your consent): campaign source, medium, campaign, content, referral code, referring-site hostname and landing path. We do not retain the full referring URL.
- Optional product analytics (with your consent): privacy-filtered page paths, clicks, form interactions without field values, dead-click signals, page-exit and scroll measurements, web performance metrics, privacy-filtered session replays, referring-site hostname, anonymous browser identifier and basic browser and device information. Replay is limited to public, legal and sign-in pages plus the authenticated workspace while you add inputs or wait for processing. It keeps ordinary interface text and styling visible, but masks all form values, filenames, role excerpts, account details and errors, redacts potentially private element attributes, and blocks images before upload. Replay stops before a completed report is shown. Report, result, dashboard, welcome, authentication-callback and administrator pages are excluded. We do not send CV or job-description text, typed values, emails, query strings, URL fragments, console logs, network contents or raw errors to product analytics.
- Billing data: payment-customer, checkout, transaction, subscription, plan and renewal-status identifiers used to provide paid access and payment support. Hosted checkout means Modd does not receive your full card number.
2. Why we use it and our legal bases
- Contract: to create and administer your account, analyse and rewrite your CV, provide reports, respond to service requests, and manage billing and pass access.
- Legitimate interests: to secure the Service, prevent fraud and abuse, diagnose failed runs, and improve reliability. We use this basis only where those interests are not overridden by your data-protection rights.
- Consent: for non-essential cookies and attribution measurement. You may withdraw consent from the Cookie Policy page at any time without affecting processing that took place before withdrawal. Aggregate cookieless traffic totals are processed for our legitimate interest in understanding whether the Service is being reached and whether its public pages work across common devices. Anonymous shared-result action totals are processed for the same purpose: understanding whether the public sharing feature leads people to Modd.
- Legal obligation: where we must retain or disclose limited information to comply with law, regulatory requests, or the establishment, exercise or defence of legal claims.
3. AI processing
We send your CV and the target job description to OpenAI's API to generate and enrich your report. OpenAI processes that content under the applicable service, privacy and data-processing terms for our API account.
4. Sharing
We do not sell your data. We share it only with sub-processors that host, monitor or provide the Service (cloud, database, analytics, AI providers, email and payments). Dodo Payments receives the information needed to host and process checkout, prevent fraud, manage the subscription and provide payment support. We keep provider-issued identifiers so we can match verified payment events to your Modd account.
Redacted diagnostic screenshots are stored privately and can be retrieved only by authorised Modd support or administrator personnel using a short-lived access link.
5. Retention
We keep your CVs and reports until you delete them or your account. Job-application tracker entries remain until you delete the entry or your account. Report-run diagnostics, including approximate city and country where available, remain linked to your account until account deletion. Backups are purged within 30 days of deletion. Pending campaign data stays in your browser for no more than 30 days; consented first-touch attribution attached to your account remains until account deletion or until you withdraw measurement consent on the Cookie Policy page. Aggregate Vercel traffic data has a one-month reporting window on our current plan. Optional PostHog event analytics is retained under the project's current analytics retention setting, up to one year; masked session replays are retained for 30 days. Anonymous daily shared-result counters may be retained as aggregate statistics because they contain no visitor or shared-result identifier. Redacted diagnostic screenshots are retained for no more than 30 days and are also removed when the linked account is deleted. When account deletion completes, Modd removes account-linked billing mappings and receipts. We retain only pseudonymous payment-provider customer, subscription and payment identifiers for up to 90 days so delayed, verified billing events can be recognised and cannot restore access or create a new account link. Those identifiers are then deleted, unless a legal hold or another binding legal obligation requires longer retention. The payment provider may retain payment records under its own legal duties and published privacy policy.
6. Security
We use reasonable technical and organisational safeguards appropriate to the information we process. These include encryption in transit and at rest where supported, access controls based on job need, separation of production secrets from browser code, logging and monitoring, and controlled backups. No online service can guarantee absolute security. If you believe your Modd account or data may be at risk, contact us promptly.
7. Your rights (UK GDPR and GDPR)
- Ask for access to, correction of, or deletion of your personal data.
- Ask us to restrict processing or provide eligible data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where consent is the legal basis.
You can delete your account from Settings, visit our Contact page, or email support@moddcv.com. We respond without undue delay and normally within one month after receiving your request and any information reasonably needed to verify your identity. Where the law permits more time for a complex or numerous request, we will tell you within the first month and explain why. Postal requests may be sent to Modd, Dene Mansions, London NW6 1QU, United Kingdom.
Please contact us first if you have a concern about how we use your data. You also have the right to complain to the UK Information Commissioner's Office (ICO) using its data-protection complaint guidance, or to your local supervisory authority where applicable.
8. International transfers
Our sub-processors may be located outside your country. We rely on Standard Contractual Clauses for transfers from the EEA/UK.
9. Children
Modd is not intended for children under 16.
10. Changes
We will notify you of material changes by email or in-app banner before they take effect.