modlflow

Privacy Policy

Version 2026-08-05.1. Effective August 5, 2026.

1. Introduction

This Privacy Policy explains what information ModlFlow collects, why it is collected, how it is used, where it is stored, and what choices you have. It applies to the ModlFlow web application and any related services.

In this policy, "ModlFlow", "we", "us", and "our" mean the operator of the ModlFlow service. ModlFlow is operated by one person, as a sole proprietorship doing business under the name ModlFlow, from San Diego County, California, in the United States. ModlFlow is not a corporation, a limited liability company, or a partnership, and nothing in this policy should be read as saying that it is. The operator is the party responsible for the personal information described here. If the service is ever reorganized into a company or transferred to a different operator, we will update this section and tell you before the change takes effect, as described in Section 11.

ModlFlow is an SFW (safe for work) AI-powered marketing-content platform. You create a persistent Model (a consistent AI person) once, generate on-model images, short videos, and voice in Studio, build product photo sets in Products, assemble postable marketing content in Compose, and browse everything you have made in the Vault. There is also an Ideas assistant, a chat-style helper.

Questions about this policy can be sent to modlflow.ai@gmail.com.

By using ModlFlow you agree to the handling of information described here.

2. Information we collect

We collect only what is needed to run the service. Specifically:

Account information. Your email address and the authentication identifiers associated with your account (for example, a user ID and session tokens). If you sign in with Google, we receive the basic profile fields Google returns to us: your name, your email address, and your profile picture.

Profile information you provide. A display name and a profile picture, if you choose to set them.

Content you create and upload. This includes prompts you write, reference images you supply, media you upload, images, video, and voice generated on your behalf, Model definitions, project and product data (including product photo sets, variants, and real world scale information), workspace names, and any titles, notes, or captions you add.

Usage and technical data. Server and application log data, IP address, browser and device information, timestamps, records of which features were used, and error reports and diagnostic traces produced when something fails.

Cookies and similar storage. ModlFlow uses cookies and browser storage strictly for authentication and session management, meaning keeping you signed in and keeping your session secure. ModlFlow does not run third party advertising trackers, advertising pixels, or cross-site behavioral profiling of any kind.

A word about what you put in prompts and uploads. Prompts, images, video, and audio you submit are stored so we can generate output and so you can find your work later. We do not inspect that content for any category of sensitive information, and we ask you not to include Social Security numbers, government identification numbers, financial account or card numbers, health information, or login credentials in prompts or uploads. If you do include something like that, it is stored the same way as the rest of your content, and it is sent to the AI provider that produces your output.

3. How we use information

We use the information described above for the following purposes, and not for others:

  1. To provide and operate the service, including saving your Models, projects, products, and generated media so you can return to them.
  2. To generate the content you request, which requires sending your prompts and input media to AI model providers so output can be produced and returned to you.
  3. To authenticate you, maintain your session, and protect accounts against unauthorized access and abuse.
  4. To enforce the Acceptable Use Policy and the Terms of Service, including investigating reports of prohibited use.
  5. To debug problems, monitor reliability and performance, and improve the product.
  6. To communicate with you about your account. This means transactional email such as email verification, password reset, security notices, and important service changes.

We do not use your content to build advertising profiles, and we do not perform automated decision-making that produces legal or similarly significant effects about you.

4. Where information is stored and who processes it

ModlFlow relies on a small number of infrastructure and model providers. Each of them acts as a service provider on ModlFlow's behalf, under contract, and handles your information only to deliver the service to you and only on our instructions:

Supabase. Provides authentication and the Postgres database that stores account records, profile fields, Models, projects, products, and metadata about your generated media.

Cloudflare R2. Provides object storage for generated and uploaded media. Media objects are stored in private buckets, are not publicly listed or linkable, and are served only through an authenticated media proxy that verifies your session before returning a file.

Vercel. Provides application hosting, request routing, and server logs.

AI model providers. Receive the prompts, reference images, and other input media required to produce a requested generation, and return the resulting output. They receive this input for the sole purpose of producing your output. The providers we use currently include, but are not limited to, OpenAI, ElevenLabs, Kling, and AtlasCloud. We use provider offerings under which submitted content is not used to train their models, and we do not authorize any of them to use your content for their own purposes.

Email delivery. Account and security email (verification, password reset, service notices) is sent through an email delivery provider, which receives your email address and the contents of that message.

We may add, replace, or remove providers as the service changes. When we do, we will update this section, and a change that meaningfully affects how your information is handled will be notified to you as a material change under Section 11.

Other disclosures. Apart from the providers above, we may disclose information: to law enforcement or others when we are required to by law, or when we believe in good faith that disclosure is necessary to protect the safety of a person or the security of the service; to advisors such as a lawyer or accountant when needed to establish, exercise, or defend legal claims; and to a successor operator if the ModlFlow business, or all or part of its assets, is reorganized, incorporated, sold, or transferred. In a business transfer, the recipient will continue to handle your personal information under this policy, and we will notify you before any materially different use takes effect.

Your content is not published to any of these providers for their own purposes, and it is not made available to other ModlFlow users through them.

ModlFlow's own account records, database, and media storage are held in the United States, and if you are located elsewhere that information is transferred to and stored in the United States. AI model providers are a separate case: some of them operate outside the United States, and Kling in particular is operated from outside the United States. When you request a generation that uses one of those providers, the prompt and any input media you supply for that generation are sent to that provider and may be processed outside the United States. See Section 8 for what that means for people outside the United States.

5. What we do not do

These commitments are as important as anything else in this policy:

We do not sell your personal data. Not to data brokers, not to advertisers, not to anyone, for money or for other valuable consideration.

We do not share your personal data with third parties for their own marketing. Your email address is not rented, traded, or handed to anyone building their own contact lists.

We do not use your content to train AI models. Your prompts, reference images, uploads, and generated output are not used to train, fine-tune, or otherwise improve ModlFlow's models or any third party's models, unless you separately and explicitly consent to that use. Consent of this kind will always be a distinct, clearly labeled opt-in, never a condition of using the service and never buried in a settings default. If we ever change this practice, we will tell you before the change takes effect and give you a way to decline.

We do not build a hidden profile from the Ideas assistant. Ideas chat sessions are not persisted beyond what the product visibly saves and shows you in the interface. Conversation content is not retained as a separate behavioral profile of you, and it is not mined for marketing or analytics purposes.

6. Security

ModlFlow is built so that your workspace is private by default:

  1. Media objects live in private storage. There are no public URLs, and every media request passes through an authenticated proxy that checks your session first.
  2. Database access is governed by row level security, which scopes records to the account and workspace that owns them, so one account cannot read another account's data.
  3. Data is encrypted in transit using TLS.
  4. Access to production systems is limited to what is required to operate the service.

We take security seriously, but no system is perfectly secure. We cannot guarantee absolute security, and you use the service with that understanding. If you believe your account has been compromised, contact modlflow.ai@gmail.com immediately.

If something does go wrong. If we discover a security incident that has compromised your personal information, we will investigate it, take steps to contain it, and notify you. We treat California Civil Code Section 1798.82 as the standard we hold ourselves to for everyone who uses ModlFlow, not only for California residents. In practice that means the following.

  • Timing. We will notify affected users as soon as we reasonably can, and in any event no later than 30 calendar days after we discover the breach or are notified of it. The only exception is a delay requested by a law enforcement agency because notification would impede a criminal investigation, in which case we will document the request and notify you without unreasonable delay once law enforcement clears it.
  • Form. The notice will be titled "Notice of Data Breach" and will be organized under the headings "What Happened", "What Information Was Involved", "What We Are Doing", "What You Can Do", and "For More Information".
  • Content. As far as we know it at the time, the notice will include our name and contact information, a list of the types of personal information that were or are reasonably believed to have been involved, the date or estimated date range of the breach and the date of the notice, a general description of the incident, and whether notification was delayed because of a law enforcement investigation.
  • Credential-only breaches. If the breach involves only a username or email address together with a password or security question and answer, we will notify you in a way that directs you to promptly change your password and security question, and we will not send that notice to the compromised email account itself.
  • Regulators. If we notify more than 500 California residents about a single breach, we will submit a sample copy of the notice, with personal information removed, to the California Attorney General within 15 calendar days of notifying those residents. We will notify other regulators and parties where the law requires it.

We will not stay quiet about an incident that affects you in order to avoid embarrassment.

7. Data retention

We retain your content and account records for as long as your account is active, so that your Models, projects, products, and Vault remain available to you. We do not keep personal information indefinitely, and the periods below are the ones we work to.

  • Account information (email address, display name, profile picture, account identifiers): kept while your account is open, and deleted within 30 days of a deletion request.
  • Content you create and upload (prompts, reference images, uploads, generated images, video and audio, Model definitions, project and product data): kept until you delete it, or deleted within 30 days of a request to delete your account and content.
  • Server and request logs, IP addresses: kept for 30 days, then deleted or aggregated into non-identifying counts.
  • Error reports and diagnostic traces: kept for up to 90 days so that intermittent failures can be diagnosed, then deleted.
  • Backups: our backups are purged on a rolling 90-day cycle, so material you have deleted can persist in a backup for up to 90 days after it is removed from the live service, and is not restored into the live service after deletion.

If you deactivate your account, the account is disabled and can no longer be used to sign in, and your content is retained until you request its removal. You can request removal at any time by writing to modlflow.ai@gmail.com, and we will confirm when the removal is complete.

We may retain a minimal record of a deleted account, such as the fact of deletion and the date, where retention is required to comply with law, resolve disputes, prevent fraud or abuse, or enforce our agreements.

8. Your rights and choices

You may:

  1. Access the personal information we hold about you, including what we hold, where we got it, why we have it, and who we have disclosed it to.
  2. Correct inaccurate or incomplete information, either in the app or by asking us.
  3. Export your content and account information on request.
  4. Delete your account and request removal of your content.
  5. Withdraw consent you previously gave, including any consent to model training, at any time and without penalty.

How to make a request. Email modlflow.ai@gmail.com from the address associated with your account, with "Privacy Request" in the subject line. We will confirm that we received your request within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and take no more than an additional 45 days. We verify a request by confirming that you control the email address on the account, and for a deletion request we will ask you to confirm twice before we act, so that nobody loses work by accident. There is no self-service export button today, so if you ask for a copy of your content we will assemble it and send it to you.

No retaliation. ModlFlow honors access, correction, export, and deletion requests regardless of where you live, and we do not discriminate against anyone for exercising these rights: no denial of service, no different pricing, no reduced quality, no delay.

### 8.1 California: how the California Consumer Privacy Act applies to ModlFlow

ModlFlow is a very small operation. It does not meet the size thresholds in California Civil Code Section 1798.140(d) that make a business subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act: it is far below the annual revenue threshold, it does not buy, sell, or share the personal information of 100,000 or more consumers or households, and it derives no revenue at all from selling or sharing personal information. So the CCPA does not currently impose those obligations on us, and we do not claim that it does.

We have chosen to offer the rights below to everyone who uses ModlFlow anyway, as a matter of policy rather than legal obligation, and they are binding on us as a promise. If ModlFlow ever grows past those thresholds, the same rights will apply to California residents as a matter of law as well, and we will say so here.

  • Right to know. You can ask what personal information we hold about you, where we got it, why we have it, and who we have disclosed it to.
  • Right to delete. You can ask us to delete your account and the personal information associated with it. We will do it, except where we need to keep something to comply with a legal obligation, complete something you asked us for, or protect against fraud or security incidents.
  • Right to correct. You can correct your display name, email address, and profile picture yourself in Settings. For anything else, email us and we will fix it.
  • Right to a copy. You can ask for a machine-readable copy of the content you have created in ModlFlow, and we will assemble it for you.
  • No retaliation, as stated above.

### 8.2 Notice at collection: categories of information, why we collect it, and who receives it

This is our notice at collection. It uses the category names from California Civil Code Section 1798.140(v)(1) so that the list can be compared against the statute directly.

| Category (statutory name) | What this is at ModlFlow | Why we collect it | Who it is disclosed to | How long we keep it | | --- | --- | --- | --- | --- | | (A) Identifiers | Email address, display name, account and user IDs, session tokens, IP address, and device and browser identifiers recorded in logs | Create and secure your account, sign you in, send account and security email, prevent and investigate abuse | Authentication and database provider, hosting provider, email delivery provider, and law enforcement or others where required by law | Account fields while your account is open, then deleted within 30 days of a deletion request; IP addresses and log identifiers, 30 days | | (B) Personal information listed in California Civil Code Section 1798.80(e) (customer records) | Your name and email address, if you give them to us or Google returns them at sign-in. We do not ask for postal addresses, telephone numbers, government identification numbers, financial account numbers, or medical or health insurance information, and no field in the product collects them. Anything of that kind that reaches us does so only because you typed it into a prompt or uploaded it yourself, which Section 2 asks you not to do. ModlFlow does not currently charge for the service; if we introduce paid plans, a payment processor will collect card details directly and we will not receive or store full card numbers | Same as identifiers | Same as identifiers | Same as identifiers | | (C) Characteristics of protected classifications | Not collected. We do not ask for or infer race, color, national origin, ancestry, religion, age, sex, gender identity, sexual orientation, disability, medical condition, marital or veteran status, or any similar characteristic, and we do not label profile pictures or uploaded media with them | Not applicable | Not applicable | Not applicable | | (D) Commercial information | Not collected today, because ModlFlow does not currently charge. If we introduce paid plans we will collect subscription tier and billing history, and we will update this notice before we start | Not applicable | Not applicable | Not applicable | | (E) Biometric information | Not collected. We do not run face recognition, face matching, or voice-print identification, and we do not use an uploaded face or voice to identify anyone. Voice features produce synthetic audio output; they are not identity checks | Not applicable | Not applicable | Not applicable | | (F) Internet or other electronic network activity information | Server and application logs, records of which features and screens you used, request timestamps, user agent, and error reports and diagnostic traces | Operate the service, keep it reliable, debug failures, investigate security incidents and abuse | Hosting provider and database provider | Logs and IP addresses, 30 days; error reports and diagnostic traces, up to 90 days | | (G) Geolocation data | Approximate location at the city or region level that can be inferred from your IP address. We do not collect precise geolocation, and the product has no location feature | Security and abuse prevention, and understanding where failures occur | Hosting provider | Same as logs, 30 days | | (H) Audio, electronic, visual, thermal, olfactory, or similar information | Your profile picture, reference images and other media you upload, and the images, video, and audio generated for you | Provide the service, generate the output you request, keep your work available in the Vault | Object storage provider, and the AI model provider that produces the generation you asked for | Until you delete it, or within 30 days of an account deletion request; backups purge on a rolling 90-day cycle | | (I) Professional or employment-related information | Not collected. There is no company or job title field | Not applicable | Not applicable | Not applicable | | (J) Education information | Not collected | Not applicable | Not applicable | Not applicable | | (K) Inferences | We do not draw inferences from your information to build a profile of your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, or abilities. Suggestions in the product come from the project you are working in at the time, not from a stored profile of you | Not applicable | Not applicable | Not applicable | | (L) Sensitive personal information | We do not ask for it, and we do not collect it by design. Prompts and uploads are free-form, so we cannot rule out that a user puts something sensitive into one. See the note in Section 2. If you do, it is stored and transmitted the same way as the rest of your content, and it is not used for any purpose other than producing and storing your output | Only to produce and store the output you asked for | The AI model provider that produces the generation, and the object storage provider | Same as your other content |

The categories of third parties that receive personal information are: cloud hosting and application platform providers; database and authentication providers; object storage providers; AI model providers that process your prompts and input media to generate output; email delivery providers; Google, if you choose to sign in with Google; a payment processor, if and when we begin charging; law enforcement or other parties where required by law or to protect the safety of a person or the security of the service; professional advisors in connection with legal claims; and a successor operator in a business transfer. Section 4 names the specific providers we use today.

### 8.3 We do not sell or share your personal information

ModlFlow has not sold personal information, and has not shared personal information for cross-context behavioral advertising, in the preceding 12 months, and we have no plans to. We do not run advertising trackers, advertising pixels, or third-party ad networks on ModlFlow. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link on this site, and there is nothing for such a link to switch off. If that ever changes, we will update this policy, notify you by email before the change takes effect, and add the required link and opt-out.

### 8.4 Do Not Track, Global Privacy Control, and tracking by others

Some browsers send a "Do Not Track" signal, and some send a Global Privacy Control signal. ModlFlow does not track you over time or across third-party websites, so there is nothing for these signals to turn off. We do not sell or share your information and we do not run advertising trackers, so we do not change our behavior in response to these signals, and we do not respond to them in any other way.

No other party collects personally identifiable information about your online activities over time and across different websites when you use ModlFlow. We do not embed advertising networks, advertising pixels, or third-party behavioral analytics in the service.

### 8.5 Reviewing and changing your information

You can review and change your email address, display name, and profile picture at any time in Settings, and you can delete individual pieces of content in the app. To review or change anything else we hold about you, email modlflow.ai@gmail.com and we will handle it on the timeline described at the top of this Section 8.

### 8.6 How we tell you about changes, and the effective date

Section 11 describes exactly how we notify you of material changes to this policy. The effective date of this policy is shown wherever the policy is posted, and it changes whenever the policy changes.

### 8.7 Shine the Light

California Civil Code Section 1798.83 lets California residents ask certain businesses for a list of the personal information those businesses disclosed to third parties for those third parties' own direct marketing purposes in the prior calendar year. ModlFlow does not disclose your personal information to third parties for their own direct marketing purposes, and never has. ModlFlow is also run by one person and has no employees, which is well under the 20-employee threshold that exempts a business from Section 1798.83 in any event. If you would like written confirmation of this, email modlflow.ai@gmail.com and we will send it.

### 8.8 Users outside the United States

ModlFlow is operated from San Diego County, California, in the United States. ModlFlow does not run its own servers: hosting, the database, and media storage are provided by the companies named in Section 4, and those hold your account records and your stored content in the United States.

If you use ModlFlow from outside the United States, that information will be transferred to and stored in the United States, which may not offer the same legal protections as your home country. Separately, as described in Section 4, some AI model providers operate outside the United States, so a generation request can send your prompt and input media outside the United States as well. By using ModlFlow you understand that these transfers take place.

A note for visitors from Europe and the United Kingdom. ModlFlow is not established in the European Union or the United Kingdom, is not directed at people in the EU or the UK, and is not marketed or advertised there. We offer the service in English, price it in US dollars, do not deliver to or contract in EU or UK markets, and do not track users across other websites or profile users to predict their behavior. For those reasons, we do not believe the EU General Data Protection Regulation or the UK GDPR applies to ModlFlow under Article 3, and we have not appointed a representative in the EU or the UK under Article 27 of either regulation. We have not appointed a data protection officer, and we do not claim to be certified or compliant under either regulation. We are telling you this so you know what protections you do and do not have here, rather than implying protections we cannot deliver.

If you are in the EU or the UK and you would like to see, correct, export, or delete the information we hold about you, email modlflow.ai@gmail.com and we will do it. We offer that to everyone who uses ModlFlow as a matter of policy. If ModlFlow ever begins offering the service to people in the EU or the UK, we will update this policy, appoint a representative if one is required, and say so here before we do it.

9. Children

ModlFlow is a general audience service intended solely for people aged 18 or older. It is not directed to children. You must be at least 18 to create an account and use the service. We do not use characters, activities, incentives, advertising, or subject matter designed to appeal to children.

We do not knowingly collect, use, or disclose personal information from children under 13. We do not ask visitors for their age, and we do not verify anyone's age, so this section describes what we do when we actually learn that a user is a child, not a promise to screen for it.

If we obtain actual knowledge that we have collected personal information from a child under 13, we will terminate the account and delete that information from our records promptly, taking reasonable measures to protect the information against unauthorized access or use in the course of deleting it. If we learn that an account belongs to someone between 13 and 18, we will disable the account, delete the associated personal information and content, and stop any further processing, because the service is 18 and over by its terms.

If you are a parent or guardian and you believe a child under 13 has provided personal information to ModlFlow, contact modlflow.ai@gmail.com with enough detail for us to locate the account, and we will delete it. This section reflects the Children's Online Privacy Protection Act, 15 U.S.C. Sections 6501 to 6506, and the Federal Trade Commission's Children's Online Privacy Protection Rule, 16 C.F.R. Part 312, as amended effective June 23, 2025.

10. Third party links and sign-in

The service may contain links to third party websites and services. We do not control those sites, and this policy does not apply to them. Review their privacy policies before providing information.

If you sign in with Google, Google acts as your identity provider. Google receives the fact that you are authenticating to ModlFlow, along with the sign-in event details Google records for your account (such as time and device). ModlFlow receives from Google only the basic profile fields described in Section 2: your name, email address, and profile picture. ModlFlow does not receive your Google password, and does not gain access to your Gmail, Drive, contacts, or other Google data. Google's handling of your information is governed by Google's own privacy policy, and you can review or revoke ModlFlow's access from your Google account settings.

11. Changes to this policy

We may update this Privacy Policy as the service changes or as legal requirements evolve. The current version is always available in the app, with its effective date.

For minor updates (clarifications, wording, contact details), we will post the revised policy with a new effective date.

For material changes, meaning changes that meaningfully affect how your information is collected, used, shared, or retained, we will do all of the following: post the updated policy with a new effective date, show a notice on the ModlFlow home screen for at least 30 days, and email the address associated with your account at least 10 days before the change takes effect. Where appropriate we will ask you to review and accept the updated policy before continuing to use the service. If you do not accept a material change, you may stop using the service and request deletion of your account and content.

A change in the identity or legal form of the operator of ModlFlow, including incorporation as a company or a transfer of the service to a new operator, is a material change and will be notified the same way.

12. Contact

Questions, requests, and complaints about this policy or about your information can be sent to modlflow.ai@gmail.com. We read every message. We will confirm receipt of a privacy request within 10 business days and respond within 45 calendar days, as described in Section 8.

ModlFlow is run by one person from San Diego County, California, and does not have a public office, so we do not publish a street address here. If you need a postal address in order to send a formal legal notice, email modlflow.ai@gmail.com and we will give you an address that receives mail.