PRIVACY POLICY

We’ve updated our Privacy Policy to better protect your data and comply with global standards. Here are the key changes:

Role Clarification. Clear distinction of when Modulate acts as a Data Controller vs. Data Processor.

Data Collection and Sources. Enhanced details on data we collect and sources, including third-party integrations and cookie usage.

Data Processing and Sharing. Defined purposes and legal bases for data processing and added information on data sharing practices.

User Rights and Controls. Expanded your rights and added controls to manage your privacy preferences.

Security and Retention. Updated data security measures and retention guidelines.

To learn more, please review the full Privacy Policy below, and always available at https://www.modulate.ai/privacy-policy. If you have any questions, contact us at privacy@modulate.ai.
This Privacy Policy (“Policy”) describes the personal data that Modulate collects, how we use it, and how we share it to interact with you, deliver our products and services, and conduct our business operations. This Notice applies to Modulate, Inc., its affiliates and subsidiaries worldwide (“Modulate,” “we,” or “us”), covering services under our control, including the website(s) we maintain (e.g., https://www.modulate.ai/), the social media pages and servers we operate, as well as any other services where you might interact with us (collectively "Services").

This Policy is made available prior to your use of the Services. By using the Services, you acknowledge that you have had an opportunity to read this Policy and understand that we will process your personal data in the manners provided in this Policy. This Policy is comprised of a series of documents that govern your use of our Services, including our Terms & Conditions (“Terms”) for Corporate Customers. If you do not agree with our Policies or Terms, you should not use and are not authorized to use our Services.

Your privacy is not a tradeable asset to us. We do not sell personal data, and we’re not in the business of data monetization or otherwise profiting off your data. However, certain modern operations, like troubleshooting, completing transactions, and improving our Services, do require certain personal data from you and the third parties involved. Our data collection practices adhere to global data protection regulations and are secured to the highest standards of protection. We ensure that any personal data collected is handled with the utmost care and used solely for the purposes necessary to provide and enhance our Services.
For any specific inquiries or concerns, please reach out to us at privacy@modulate.ai or via phone at 385-274-7474. For information specific to children's data, jump to here.

I. Our Roles

Modulate functions in both capacities of a Data Processor and a Data Controller, managing personal data, device data, and other data we may receive (collectively, your “personal data”) depending on the nature of interaction with our Services.

A. Data Processor

As a Data Processor, Modulate processes personal data on behalf of its Corporate Customers, such as game studios and other platforms, following their specified instructions to provide services through our proprietary software “ToxMod”. This role focuses on supporting our content moderation services through data processing activities determined by these customers. The personal data shared with Modulate through ToxMod is typically limited and includes:
Modulate processes this data without making decisions regarding the objectives or methods of data use, strictly adhering to the instructions provided by our Corporate Customers. For more information on how ToxMod handles data, see our Privacy and Data Management FAQs available at https://www.modulate.ai/privacy-and-data.

B. Data Controller

Modulate acts as a Data Controller when it determines the purposes and means of processing personal data. This role applies to interactions made directly to us, when we engage in marketing, or make service improvements, including decisions on data collection, use, security, and storage, in compliance with applicable privacy legislation. Because we provide our content moderation service, ToxMod exclusively to our Corporate Customers, we are never operating as a data controller when we process user data on their behalf.  Examples where we act as a Data Controller include:
Understanding our dual roles is important for you to know how and when you can exercise your privacy rights.

II. Personal Data We Collect

Modulate collects personal data when we deliver our products and Services, conduct marketing, and run our business operations.

A. Age Requirements

If a Modulate customer uses Modulate Software in a product or service that is likely to be accessed by children under 16, Modulate may receive audio or other personal data as part of the Software Usage Data we collect. This is a function of how Modulate’s Software operates, meaning that Modulate may indirectly receive children’s personal data if children use a third-party product with Modulate’s Software embedded. Modulate requires its customers to obtain all necessary consents to comply with relevant data protection laws, including the Children’s Online Privacy Protection Act, for the collection of such personal data.

Except as described above, Modulate does not offer products or services targeting children and does not knowingly collect personal data directly from children under the age of 16.  If we become aware that a child under the age of 16 has submitted personal data directly to Modulate except as described in the preceding paragraph, we will promptly delete the data.

B. Data Categories

Collected personal data varies based upon how you use our Services. Generally, we have collected the following data over the prior 12 months:

III. Data Sources

The way we obtain personal data depends on how you use the Services. For example, we collect personal data:

A. Directly From You

You provide us with personal data when you use the Services, such as when you:
We may also collect personal data in the following situations:
Corporate Customers. When you purchase, register, or use Modulate Software, or use our Software support services, we may collect contact information such as your name, email address, physical address, telephone number, and financial and payment details, together with information on the Modulate Software you buy, register, or use. We collect this information to fulfill our contracts with our customers. 

We may also collect other electronic data from our corporate customers derived from your use of our Software. This data may include usage data, and data showing your registration, installation and use of Modulate Software which will be used for the purpose of fulfilling your contract and our legitimate interest in managing licenses and billing.

Customers, Prospective Customers, or Website Visitors. When you engage with Modulate for marketing or service purposes, such as by expressing interest in Modulate Software through a web form, participating in a promotion, attending a Modulate or other marketing event, or requesting service, we will collect the information you submit to us, such as your contact details (including name, email address, phone number, organization and job title) and the Modulate Software that interests you. We collect this information based on your consent and our legitimate interest in responding to your requests and marketing our products.

Job Applicants. When you submit an employment application, we collect the personal data disclosed by your application, such as your name, email address, phone number, and employment and education history. If you become employed at Modulate, we may collect additional information about you and your dependents and beneficiaries to enable payment of wages and administration of benefits.

B. From Third Parties

We collect data when you access our Services using third-party platform accounts, such as interacting with us through your social networking accounts or playing games maintained by our Corporate Customers that utilize ToxMod. When you access our Services in this way, the associated third-parties provide us with data about you. For example, depending on your use of, or activity on, the third-party platform, we may receive your voice data, in-game behavior data, account information, and any other data necessary to provide our Services. The third-party platform may allow you to control what data is provided to us. We are not responsible for the terms, policies, disclosures, or actions of any third-party platforms.

We may collect publicly available data, including from social media, to protect our users, employees, facilities, and services, and to aid investigations. We also receive data from other individuals who use our Services. This may include data about you if you are mentioned in comments on the Services or if an individual sends us a direct message.

C. Automatically

1. From Your Device
When you use the Services, we automatically receive data about your experience. This includes device and usage data, gameplay data, log data, and location data.
2. From Cookies and Similar Technologies
We may use cookies, web beacons, pixel tags, Flash cookies, Internet log files, software development kits, and similar tracking technologies to improve and maintain the functionality of our Services, enhance security and fraud prevention, and provide you with targeted advertising. Our system may not respond to Do Not Track (“DNT”) requests or headers from some or all browsers.

When you first visit our website, you will see a cookie banner that allows you to provide consent for the use of cookies. Your consent preferences are captured and stored, ensuring compliance with applicable data protection regulations.

There are several types of cookies that may be used on our website:
We use cookies on our website to improve your browsing experience and to personalize the content and ads that are displayed to you, to analyze how you use our website, and to track your browsing behavior. We use cookies primarily when you visit our website(s) or interact with our online content. We do not use cookies while providing our Services to Corporate Customers.

Our third-party partners may also collect this data when you use other websites or applications that integrate with our Services. We may collect this data in accordance with applicable laws and regulations, and it is used solely for the purposes described in this Privacy Policy.

You can control your cookie settings through your web browser. Most web browsers allow you to control the types of cookies that are set on your device, and to delete cookies that have already been set. However, disabling certain types of cookies may affect your browsing experience on our website, potentially limiting the functionality and personalization available to you. Refer to Section IX. YOUR CONTROLS, for additional data about our use of cookies and similar technologies and your ability to manage cookies.

IV. Data Processing

We use personal data collected from our Services to provide, maintain, and improve our Services, to develop new Services and offerings, and to protect us and our users.

A. Purposes

1. Business Purposes
Modulate uses your personal data to support and enhance the delivery of our Services. This includes:
2. Commercial Purposes
For commercial purposes, we use personal data to:

B. Specific Use Cases

1. General Business Operations
2. Indirect Data Collection
3. Personal Data Processed Within Our Software (“Software Usage Data”)

C. Legal Basis

For users in jurisdictions requiring a clear legal basis for data processing:

V. Data Sharing

We do not sell your personal information.

Modulate does not sell your personal information. However, we may share certain personal information for our own business purposes as detailed further in the section below. If we share your personal data (including Software Usage Data) with our affiliated companies or with vendors acting on our behalf, we do so under binding agreements that require the other party to use and protect the personal data in accordance with the principles described in this Privacy Policy. These third parties are authorized to use your personal data only as necessary to provide services to us.

A. Categories of Third-Parties

We disclose your personal data for business and commercial purposes to the following categories of third parties: 
We may also share personal data in the following situations:

With our affiliates and subsidiaries and with vendors acting on our behalf to perform services for a specific business purpose, support the delivery of Software, our website, or business operations; with the customer on whose behalf and at whose direction we are processing the personal data; and when we have your consent to use your personal data for a specific purpose. We may share personal data with our affiliates, subsidiaries, vendors acting on our behalf to provide services our customers.

We may also share personal data (including Software Usage Data) to comply with law and legal process, to respond to governmental inquiries and lawful requests from by public authorities (including to meet national security or law enforcement requirements), and to protect the vital interests of Modulate or its customers. If Modulate enters any merger, acquisition, or asset sale of all or any part of its business, personal data held by Modulate may be transferred to a buyer or successor entity. In addition, in the event Modulate becomes the subject of an insolvency proceeding, such personal data will be transferred in a transaction approved by the court.

B. Data Transfers

We store and process your personal data in the United States. We'll keep your personal data for as long as necessary to provide you with the Services, fulfill our legal obligations, and/or exercise, defend or establish our rights.

When you access our Services, including when available on third-party platforms, your personal data is generally collected by us directly and processed in the United States. Personal data we may collect may be subsequently stored and processed for the purposes set out in this Privacy Policy in the United States or any other country in which we, our subsidiaries, or third-party agents operate. 

We transfer personal data that we collect to other Modulate affiliates or other companies performing support functions on our behalf (each as described above) based in countries outside the country where you reside, including the United States. Personal data that is transferred outside your country of residence may be subject to lawful access by courts, law enforcement and other governmental authorities in accordance with the laws of that foreign jurisdiction.

Whenever Modulate transfers personal information beyond the country of origin, we will do so in accordance with applicable laws. In the context of European, Swiss, or UK personal data, Modulate may transfer personal data to third countries such as to the United States. Modulate will ensure that importers of any personal data offer an adequate level of protection, whether through an adequacy decision or other appropriate safeguard. Where personal data is transferred to third parties, Modulate uses standard contractual clauses designed to ensure those third parties respect the confidentiality of personal data and use it only in connection with provision of specific services and in compliance with applicable data privacy laws. With respect to personal data received or transferred, Modulate is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.

We are committed to partnering with entities that uphold robust privacy practices. However, our Privacy Policy does not cover third-party services or products linked from our Services. We do not oversee the privacy policies or settings of third-party sites, including Community Platforms or Service Providers. For further information, please see Section IX. YOUR CONTROLS for the relevant privacy policies for each third-party we work with.

VI. DATA Retention

We retain personal data to the extent necessary to provide Software to our customers. Generally, we retain Software Usage Data for 35 days, unless otherwise required by applicable laws. Different retention of personal data may be necessary under contractual terms with the data controller for whom we provide services, for fraud prevention, to identify technical problems, or to resolve legal proceedings.
1. Retention Periods
2. Destruction Guidlelines

VII. Data Security

We use a number of safeguards to protect the personal information submitted to us, both during transmission and once it is received. Modulate takes appropriate measures to secure your personal information from accidental loss and from unauthorized access, use, alteration or disclosure. Modulate restricts access to the personal information it collects to those who have a valid business need to know that information. Access to personal information is granted based on the minimum access required to fulfill the business need and purpose for which it is collected, used and shared.

Despite our best efforts, no security measure is entirely foolproof. We cannot guarantee the security of your personal data, and we cannot be responsible for unauthorized access to or theft, alteration, or destruction of your personal data. 

If we become aware of a data breach that affects your personal data, we will notify you as required by applicable law. We will also take appropriate measures to mitigate the impact of the breach and prevent future occurrences.

VIII. Your Rights

We believe that respecting your privacy and providing you with control over your personal data is fundamental to our relationship with you. We understand that you have a right to make choices about how your information is used and shared. 

You may have the right under applicable laws to:

A. Exercising Your Rights

At Modulate, we prioritize your privacy and provide you with the means to exercise your rights regarding your personal data. Below is a detailed guide on how you can exercise these rights:

IX. Your Controls

A. Third-Party Controls

Our Services integrate with various third-party accounts and platforms, primarily Community Platforms and Service Providers. You can customize your privacy settings within your account settings on these platforms to control the personal data that is shared with us. We encourage you to review the privacy policies and settings of these third-party accounts and platforms.

You can review their policies at the links below:
Community Platforms
Service Providers

B. Opt-Outs

1. Email Communications
You can change your preferences to opt out of marketing communications at any time by clicking the unsubscribe link in any email communication from us. You may also do so by contacting us directly at privacy@modulate.ai. We retain your email address to confirm that we do not send you further marketing communications and to keep you updated on any critical policy or service changes. Please note that you will continue to receive transaction-related emails regarding products or Services you have requested. 

We may also send you non-promotional communications regarding us and our Services regarding our Services or updates to our Terms or this Privacy Policy.
2. Advertising
If you prefer not to receive marketing messages or sponsored content, please contact us at privacy@modulate.ai and we will ensure your preferences are updated accordingly.

Some third-party Services we use may offer opt-out options to their data collection practices. You can find more information about how to opt-out of these Services by visiting the following links:
3. Sale or Sharing of Personal Data
To opt out of the sale or sharing of your personal data, please contact us at privacy@modulate.ai, and include “Do Not Sell or Share My Personal Data” in the subject line. Upon receiving your request, we will process it promptly and ensure that your personal data is not sold or shared with third parties for any purpose. You will receive a confirmation email once your opt-out request has been processed.

X. GENERAL PROVISIONS

A. Changes To This Privacy Notice

We may update this Policy from time to time by publishing an updated version on Modulate's website. Each updated version will include the date the Notice was last updated. Please review the latest version of this Policy periodically to understand with Modulate’s use of personal data. Any material changes to the way Modulate collects, uses, or stores personal data will only apply to personal data collected after the revised Policy takes effect.

B. Contact Us

If you have questions about this Policy or our privacy practices, please contact our Information Protection Team at privacy@modulate.ai.

B. Contact A Data Protection Authority (DPA)

If you have a concern about how we may collect and use personal data, please contact us. You also have the right to contact your local Data Protection Authority (“DPA”) if you prefer. 

To contact your local DPA, refer to the links below: 
Where appropriate, your local DPA may also forward the matter to the Department of Commerce or FTC for consideration.
This Privacy Notice was last updated: July 19, 2024