Trust center

Security & compliance

We built Modudraft with a privacy-first stance from day one. Here's exactly what we collect, where it lives, and who can see it.

What we store

Visitors without an account
  • Try every feature in the demo, no account needed.
  • Nothing you change in the demo is saved. AI questions you type there are sent to the demo server, which answers with prepared replies and stores nothing
  • Anonymous analytics events on this site (page views, feature usage) - no PII, GDPR-compliant; the demo has none
Registered users (Free / Pro / Team / Enterprise)
  • Email address (for auth + billing)
  • Diagram data (JSON) stored in encrypted database
  • OAuth tokens for social login (Google, GitHub, Microsoft) - never your password
  • No payment data stored by us - Stripe handles billing

Your data rights

⬇
Export

Download all your diagrams at any time from Account → Export data.

✕
Delete account

Permanently delete your account and all associated data from Account → Delete account.

✉
Access request

Email [email protected] for a full data export or GDPR subject access request.

Compliance

  • GDPR - we process minimal data, honor erasure requests, and our analytics are cookieless and GDPR-compliant.
  • CCPA - we do not sell personal data to third parties.
  • SOC 2 - not yet certified. In progress for Team plan.

Questions about security or a vulnerability to report?

[email protected]