Privacy Policy

Modoo Today ("Company") respects your privacy and processes personal data in accordance with applicable law, including the Republic of Korea's Personal Information Protection Act (PIPA). This policy describes what we process and why.

1. Data We Process

We process the minimum needed to run the service.

• Account: email address (your login identifier, used for sign-in, recovery, and billing notices), password (stored only as a one-way hash), and two-factor authentication data (TOTP secret and recovery codes, stored encrypted)
• Sessions & devices: session metadata (creation and last-seen time, browser/client hint; we do not store your IP address) and a device register (your device label and link time) for devices you link to your account
• License & usage: device identifier (machine ID)
• Service usage records: which screens you open and which features you use, kept for product improvement. Your account identifier is stored only as an irreversible hash, and none of your writing, titles, or source materials are included.
• Your content: (a) titles and source materials — passed through our servers to AI model providers to generate your post; we do not store the source materials, (b) writer style profiles — derived from the posts you submit, stored on our servers and deleted when you delete that writer, and (c) result library — the title, body, and writer name of finished output, stored on our servers for 90 days so you can retrieve it from another device, and deleted as soon as you delete it or close your account. Content may contain personal information, so we disclose it here. Account details, machine ID, and session data are never sent to AI model providers.
• Billing: email address and payment details (handled by our payment processor), transaction records. We do not store your name, phone number, or address; where required, the name and phone you enter at checkout are passed to the payment processor and not retained by us
• Support: information you provide when contacting us

2. Purpose & Retention

We retain data only as long as needed for these purposes or as required by law, then delete it. Writer style profiles are deleted when you delete that writer; source materials are never stored. Result library entries are deleted 90 days after they are saved, or as soon as you delete them — and immediately, without waiting out the 90 days, when you close your account.

3. Processors & International Transfer

We use cloud infrastructure (e.g., Cloudflare, Inc.), a payment processor, and an email-delivery provider (e.g., Mailgun, for account verification and recovery codes) that may store and process data in the United States and other countries. The data transferred is limited to the items listed in Section 1 (such as your email address, password hash, two-factor authentication data, device identifier, and payment identifiers). Where personal data is transferred to a country other than the one you are in, we rely on appropriate safeguards to the extent required by laws applicable to that transfer; for transfers subject to EU/UK data protection law, this may include the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms. Your content is also transferred: AI model providers process it to generate and evaluate your posts. Those providers are Google LLC (United States — generation and, regardless of the provider you pick, always the quality evaluation), OpenAI Group PBC, Anthropic, PBC (Anthropic Ireland, Limited if you reside in the EEA, Switzerland, or the UK), and X.AI LLC (United States — only when you select them), and Perplexity AI, Inc. (United States — only when you request web research). All of these are in the United States; your content is not transferred to any other country. Only your content is sent to them; your account details, machine ID, and session data are not.

4. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To the extent the EU or UK GDPR applies to a particular processing activity, our legal bases are the performance of our contract with you and our legitimate interest in operating and securing the service, and you may have the right to lodge a complaint with your local data protection authority. Under the California Consumer Privacy Act (CCPA, as amended by the CPRA), you have rights to know, access, correct, and delete your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information, and we will not discriminate against you for exercising your rights. Contact support@modoo.today to exercise your rights.

5. Children

Minago is an adults-only service intended solely for users aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal data from anyone under 18. Consistent with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal data from children under 13. If we learn that we have collected data from a person under 18, we will delete it. If you believe a minor has provided us personal data, contact support@modoo.today.

6. Contact

support@modoo.today