Privacy at ModletHub

1. Who we are

ModletHub is operated by ROMCO SOLUTIONS LTD, company number 16488162, registered at 20 Wenlock Road, London, England, N1 7GU. We are responsible for the personal information described here.

Contact privacy@modlethub.com about your information. We also handle privacy requests sent to support@modlethub.com. Accounts are for people aged 18 or over.

2. Accounts and private work

We use your account details, sign-in information, settings, drafts, files and revisions to provide your account and requested authoring services under our contract with you. Without the information needed for a particular service, we may be unable to provide it.

If you use Google sign-in, we receive your Google account identifier, email and any supplied name or profile picture through Supabase. This does not give us access to your Google password, Gmail, Drive, Calendar or contacts. Google operates its sign-in service under its Privacy Policy.

ModletHub’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Private drafts are not visible to other customers. Authorised staff and service providers may access them as needed for support, security or a publication review you request. Saving a draft does not authorise public display or general AI-model training.

3. Publication and connected assistants

We use submitted workflows and profile information to review and publish work under our contract with you and the Creator Terms, with your separate publication permission. Approved profiles and previews are public; protected content is available to people with the required access. Withdrawing a profile does not itself unpublish workflows or erase necessary internal records. Separate permission is required for optional external promotion.

Under our contract with you, we enable an assistant you connect to receive content and perform actions within the access you authorise. Its provider handles information under its own terms. Disconnecting stops future access through that connection but does not automatically delete copies already received. Publication remains your decision.

4. Using and improving the service

We use your searches, selected filters, recently viewed and saved workflows, Reveals, progress, reviews and downloads to provide requested features and access. Qualifying Reveals also support creator-earnings calculations. We rely on our contract for account features and earnings administration, and legitimate interests for responding to visitors’ searches.

We use summary statistics from requested searches and workflow actions to understand demand and improve ModletHub. These include selected public categories or tools, search-result and performance information, and workflow activity totals. We do not include search text or account, browser or session identifiers in these statistics. Creators receive limited aggregate information about their workflows, not visitors’ search text or identifiable activity. We rely on our legitimate interest in improving the service, subject to your rights.

Your activity is only included in these totals if you choose Allow in Privacy settings. You can change this at any time there, or contact privacy@modlethub.com. This does not affect your requested account features or necessary payment records.

5. Payments

Stripe processes membership payments and subscriptions. It collects the billing and payment details required by its payment service. We use payment references, subscription status and financial records to provide access, handle enquiries and reconcile accounts. See Stripe’s Privacy Policy.

Talentir processes creator payments and the identity, tax and receiving-method information required for the chosen payment route. We use creator references, eligibility and payment status to administer earnings. Talentir processes payout information on our instructions and is separately responsible for its own identity, anti-money-laundering and other legal checks. Its payment process provides the relevant privacy information.

We rely on our contract to administer membership and creator payments, legal obligations for required accounting and tax records, and legitimate interests for fraud prevention and payment disputes. Required verification information may be needed to receive a payment; this does not by itself cancel confirmed earnings. Use the provider’s secure process for payment details and identity documents, not ordinary support email.

6. Enquiries and workflow requests

We use contact details and information you provide to answer enquiries, assess proposed creator contributions and understand requests for workflows. This may include your role, tools, desired outcome and relevant search context. Our legitimate interests are responding to enquiries and improving the service. Proposals and requests are not made public.

For workflow requests, we retain your email and contact you about the request only if you choose that option. An enquiry does not subscribe you to a newsletter. If you join the launch list, we email you when ModletHub opens and may invite you to try it early; we don’t add you to ongoing marketing. Information supplied through an earlier interest form remains limited to its original purpose; a request for a one-off notification is not permission for ongoing marketing. Where we rely on consent, you can withdraw it at privacy@modlethub.com or hello@modlethub.com without affecting earlier lawful use.

Please do not include credentials, unnecessary personal information or confidential client material.

7. Support, security and providers

We use correspondence and technical records to provide support, protect accounts, prevent abuse and investigate problems. We rely on our contract for requested support, legitimate interests for proportionate security and administration, and legal obligations where applicable.

Our providers include Vercel for hosting, Supabase for authentication and data/file storage, Typesense for catalogue search, and Google Workspace for correspondence. Typesense processes search text and filters against an index of public workflow information. Email-delivery providers process the addresses, messages and delivery records needed to send authorised messages. Payment providers and connected assistants are described above.

Access is limited to people and providers who need information for these purposes. We may also disclose necessary information where required by law or to address fraud, security, rights or legal claims.

8. International processing

Our providers may process information outside the UK, including in the United States and Singapore. For transfers requiring contractual safeguards, we use applicable standard contractual clauses with the UK Addendum. These include transfers of interest-form and workflow-request information to Supabase Pte. Ltd in Singapore.

Contact privacy@modlethub.com for information about the destinations and safeguards relevant to your information, or a copy of applicable contractual safeguards.

9. Cookies and device storage

We use cookies and similar storage to keep you signed in, protect account actions, remember preferences and recover unsaved work. We store your privacy choice in your browser and, when you are signed in, in your account. This preference is not a visitor-tracking identifier.

Some workflows include YouTube or Vimeo videos. A video loads from YouTube or Vimeo only when you press play, using their privacy-enhanced settings. The provider then receives your IP address and device information and may use cookies or similar storage under its own privacy policy.

You can manage storage in your browser. Clearing it may sign you out or remove unsaved work, and does not erase records already held by us. Browser settings are not a substitute for exercising your right to object to measurement.

10. Retention

• Accounts and work: while needed to provide your account and requested services. On deletion or closure, we remove information no longer needed, subject to necessary records for continuing rights, outstanding payments, security or legal claims.
• Creator enquiries: up to 12 months after your last submission or contact if you do not take up access, or within 90 days after the enquiry is closed or access withdrawn. Records from earlier access programmes retain their original, purpose-specific deletion deadlines.
• One-off notification requests: email addresses are erased within 90 days after the requested message is submitted to the delivery provider, or sooner following an accepted withdrawal or erasure request. We review delayed notification lists at least monthly.
• Workflow requests: we review open requests after 12 months. Redaction or deletion clears submitted details from the request queue.
• Routine support: 12 months after the case closes. Necessary evidence for a particular legal, payment or security matter may be retained separately.
• Financial records: six years from the end of the relevant company financial year, or longer where legally required. Contract and licence records are retained as needed to honour continuing rights or resolve claims.
• Service-improvement records: these are summary totals with no search text or identifiers. We keep these weekly totals for up to 24 months. Totals too small to report are deleted after their week ends. Necessary account, payment and security records have separate purposes and retention rules.
• Technical and recovery records: periods depend on their security, troubleshooting and recovery purpose and the provider’s arrangements. Deletion from the live service does not immediately erase every backup or a record the provider must retain by law.

Any limited record retained to honour a withdrawal or resolve a specific dispute is restricted to that purpose, not reused for unrelated contact.

11. Your rights

You can request access, correction, deletion, restriction or a portable copy of your information. You can object where we rely on legitimate interests and withdraw consent at any time. Rights depend on the applicable law and processing; we explain any relevant limits.

Email privacy@modlethub.com or support@modlethub.com. We may need to confirm your identity. We normally answer UK and EU data-rights requests without undue delay and within one calendar month. If a lawful extension is needed, we explain it within that period.

For privacy complaints, we acknowledge receipt within 30 days, investigate and explain the outcome without undue delay. You can also complain to the UK Information Commissioner’s Office or the relevant authority where you live.

12. Changes

We update this notice when our processing changes and give appropriate notice of material changes.