Privacy Policy

Modus AI Private Limited (“Modus”, “we”, “us”, “our”) builds an AI-powered risk-intelligence platform for banks, NBFCs and other regulated financial institutions. This Privacy Policy explains what personal data we collect through our website and platform, why we collect it, how we use and protect it, and the choices and rights available to you. It applies to visitors of modussecure.com, prospective and existing customers, and individuals whose data is processed through the Modus platform on behalf of our customers.

Website and business data — information you or your organisation give us directly (e.g. filling a contact form, booking a demo, applying for a role) or that is generated by your use of our website (e.g. analytics). This Policy governs that data as the data controller.

Customer Data processed through the platform — where a bank or NBFC uses the Modus platform, that customer submits data (which may include personal data of their own customers) for processing. In that relationship, our customer is the data controller/fiduciary and Modus acts as a data processor, handling that data under the terms of the applicable customer agreement and data processing addendum rather than under this Policy. If you believe your personal data has reached us through one of our customers, please contact that institution directly, or write to us and we will direct your request appropriately.

We may collect the following categories of information through our website and business interactions:

• Contact and identity data — name, work email, phone number, job title, employer, submitted through forms such as “Book a Demo” or “Contact”.
• Careers data — resume/CV, cover letter, and application details submitted for open roles.
• Usage and device data — pages visited, referring URL, browser and device type, and approximate location, collected automatically via analytics tools.
• Communications — records of correspondence with us, including support and sales enquiries.

We collect data directly from you when you interact with our website or contact us, automatically through cookies and similar technologies (see our Cookie Policy), and occasionally from publicly available professional sources (e.g. LinkedIn) or referrals when evaluating a business or hiring relationship.

We use personal data for purposes including to:

• respond to enquiries, schedule demos, and communicate about our products and services;
• operate, secure, and improve our website and understand how it is used;
• evaluate job applications and manage recruitment;
• send product updates, newsletters, or event invitations, where you have opted in or as otherwise permitted by law (you may opt out at any time); and
• comply with legal obligations, and establish, exercise or defend legal claims.

Where required, we process personal data on the basis of your consent, the necessity of processing to take steps at your request prior to entering into an agreement, our legitimate interests in operating and promoting our business (balanced against your rights), and compliance with legal obligations, consistent with the Digital Personal Data Protection Act, 2023 and, where applicable to individuals outside India, equivalent frameworks such as the GDPR.

We do not sell personal data. We may share it with:

• Service providers who support our operations, such as hosting, analytics, email and scheduling providers, under contractual confidentiality and data-protection obligations;
• Professional advisors, including legal, audit and financial advisors, where necessary;
• Regulators or authorities, where required by law, court order, or to protect our rights, users, or the public; and
• A successor entity in connection with a merger, acquisition, financing or sale of assets, subject to equivalent protection of your data.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with our legal and regulatory obligations, resolve disputes, and enforce agreements. Careers data is retained for a reasonable period to consider you for future roles unless you ask us to delete it sooner.

We implement reasonable technical and organisational measures, including access controls, encryption in transit, and least-privilege practices, designed to protect personal data against unauthorised access, loss or misuse. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

We primarily store and process data in India. Where personal data is transferred to service providers or infrastructure located outside India, we take steps to ensure the recipient provides an appropriate level of protection, consistent with applicable law.

Subject to applicable law, you may have the right to access, correct, update, or request erasure of your personal data, withdraw consent where processing is based on consent, and lodge a complaint with the relevant data protection authority. To exercise these rights, contact us at privacy@modussecure.com. We will respond within a reasonable timeframe and in accordance with applicable law.

Our website and Services are directed at businesses and professionals, not children. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates the most recent revision. We encourage you to review this page periodically.

For questions, requests, or grievances relating to this Privacy Policy or our handling of personal data, contact our Grievance Officer at privacy@modussecure.com or write to Modus AI Private Limited, HSR Layout, Bengaluru, India.