Privacy Policy
Last updated: 2026-05-05
Who we are
Modex ("we", "us") operates the marketplace at modex.place. For privacy questions, email hello@modex.place.
What we collect
- Waitlist signups: name, title, company, email address, role intent (bank / vendor / either), the page you signed up from, your IP address, and your user-agent string. Used to evaluate cohort fit and to contact you about access.
- Account data (post-invite): email address, organization name and type, role within that organization. Used to authenticate you and route you to the correct surfaces.
- Listings & inquiries: any model metadata, performance metrics, attached documents, and inquiry messages you submit are stored in our database to power the marketplace.
- Operational logs: request paths, status codes, and timestamps via Cloudflare Workers observability. Used to debug production issues. Retained for up to 30 days.
What we do not collect
- No advertising or third-party tracking cookies.
- No analytics that identify individual visitors.
- No payment data — Modex does not process payments at this stage.
How we use it
We use your information to operate the marketplace, communicate about access, send transactional emails (invite codes, magic links, inquiry notifications), and meet our legal obligations. We do not sell or rent personal information.
Sharing
We share data with the service providers we use to run the platform:
- Supabase (database & authentication, US)
- Cloudflare (hosting & CDN, US)
- Resend (transactional email, US)
Retention
Waitlist entries are retained until you ask us to delete them or until twelve months after the founding cohort closes, whichever is sooner. Account data is retained while your organization is active and for up to twelve months after deactivation for audit purposes.
Your rights
Depending on where you live (e.g., the EU/EEA, UK, California), you may have the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing. Email hello@modex.place and we will respond within 30 days.
Security
Data is encrypted in transit (TLS) and at rest. Database access is governed by row-level security policies. Service-role credentials are stored as Cloudflare Worker secrets and are never exposed to client code.
Changes
If we make material changes to this policy, we will notify you by email if we have your address, and we will update the "Last updated" date above.