Modus Planning, Inc. (“ModusCPG,” “we,” “us,” or “our”) operates the ModusCPG web application at app.moduscpg.com, the ModusCPG mobile application for iOS and Android, and the marketing website at moduscpg.com (collectively, the “Services”).

This Privacy Policy describes what information we collect, how we use it, and your choices regarding your data. By using our Services, you agree to the collection and use of information as described in this policy.

Account Information

When you create an account, we collect your name, email address, and password. If your organization administrator provisions your account, we receive this information from them.

Usage Data

We collect data about how you interact with our Services, including actions you take within the platform (such as forecast decisions, trade approvals, and order management activities). This data is essential to providing the core functionality of the platform.

Device and Technical Data

When using our mobile application, we may collect device type, operating system version, and a push notification token to deliver notifications. We do not collect device advertising identifiers or precise geolocation data.

Voice and Audio Data

Our mobile application includes Mo-Pilot, an AI assistant that supports voice input. When you use voice commands, audio is recorded on your device and transmitted to our servers for transcription. Audio recordings are processed in real-time and are not stored after transcription is complete.

Camera and Photo Library

The mobile application may request access to your device camera and photo library for document scanning and store visit documentation. Photos and scanned documents are uploaded to our servers only when you explicitly initiate an upload. Camera and photo library access is optional and can be denied without affecting core application functionality.

Biometric Data

The mobile application supports biometric authentication (Face ID, Touch ID, fingerprint) for convenient sign-in. Biometric data is processed entirely on your device using the operating system's secure enclave. We never receive, transmit, or store your actual biometric data—only a confirmation of successful authentication.

AI Interactions

When you interact with Mo-Pilot (our AI assistant), we collect the text of your messages, the conversation context, and any feedback you provide on AI responses. This data is used to provide AI-powered features and improve response quality.

• To provide, maintain, and improve the ModusCPG platform and its features
• To process your demand forecasts, trade management, supply planning, and other business operations
• To deliver AI-powered assistance through Mo-Pilot
• To send push notifications about approvals, alerts, and important business events (with your permission)
• To authenticate your identity and secure your account
• To communicate with you about your account, updates, and support inquiries
• To comply with legal obligations

We do not use your data to serve advertisements, build advertising profiles, or sell your information to third parties.

We share your data only in the following limited circumstances:

AI Service Providers

Mo-Pilot uses third-party AI models (Anthropic Claude and OpenAI) to process your queries. When you interact with Mo-Pilot, your message content and relevant business context are sent to these providers for processing. These providers process data under their enterprise terms and do not use your data to train their models.

Push Notification Services

Mobile push notifications are delivered through Apple Push Notification Service (APNs) for iOS and Firebase Cloud Messaging (FCM) for Android, relayed through Expo's push notification service. Only your device push token and notification content are shared with these services.

Infrastructure Providers

Our Services are hosted on Vercel (web application) and Render (API backend and database). These providers process data on our behalf under data processing agreements.

We do not sell, rent, or trade your personal information. We do not share data with advertising networks, data brokers, or analytics companies.

All application data is stored on our first-party infrastructure. We use industry-standard security measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS) for all communications
• Encrypted database storage with PostgreSQL on Render
• JWT-based authentication with token expiration
• Multi-tenant data isolation—your organization's data is logically separated and inaccessible to other tenants
• On-device credential storage using hardware-backed encryption (iOS Keychain, Android Keystore)
• Role-based access controls within your organization

We retain your account data for as long as your account is active or as needed to provide the Services. Business data (forecasts, trade records, orders) is retained according to your organization's data retention requirements.

You may request deletion of your personal data by contacting us at privacy@moduscpg.com. Upon receiving a verified deletion request, we will delete your personal data within 30 days, except where retention is required by law or necessary to fulfill our contractual obligations to your organization.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Export your data in a portable format
• Withdraw consent for optional features (camera, microphone, notifications)

To exercise these rights, contact us at privacy@moduscpg.com.

The ModusCPG mobile application may request the following device permissions:

All permissions are optional. You can deny or revoke any permission through your device settings without affecting core application functionality.

The mobile application stores certain data locally on your device to enable offline functionality. This includes pending decisions and actions queued for synchronization. Authentication credentials are stored in your device's secure hardware-backed storage (iOS Keychain or Android Keystore) and are encrypted at rest.

Uninstalling the application removes all locally stored data.

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at privacy@moduscpg.com and we will promptly delete the information.

Our mobile application does not include third-party analytics SDKs, crash reporting services, advertising trackers, or social media SDKs. We do not track users across applications or websites. The web application uses basic server-side logging for operational purposes only.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. For significant changes, we may also notify you through the application or by email.

If you have questions about this Privacy Policy or our data practices, contact us at: