Privacy policy
This policy explains what data ModuloraAI (“the service”), operated by ModuloraAI (“we”), collects, how it is used, and how it is protected. In brief: your conversations, notes, attachments, and studio settings stay stored in your browser. All studio workspace access requires an authenticated account. Bring-Your-Own-Key (BYOK) connects directly to your chosen AI provider.
1. Data that stays in your browser
Conversations, message attachments, studio profiles, notes, settings, and any API keys you enter are stored locally in your browser's local storage and IndexedDB. We do not receive, collect, or store your chat histories or API keys on our servers.
Supported audio files are decoded and measured on your device for integrated loudness (LUFS), true peak (dBTP), and loudness range. The current AI clients send measurements as text context, not audio bytes. You can export or delete local workspace data in Settings > Data, or clear your browser's site data.
2. Account and authentication data
An authenticated user account is required to access the studio workspace:
- Email address: We use your email address for passwordless sign-in and to identify your account. Authentication is powered by Supabase.
- Session tokens: When you sign in, your browser stores authentication tokens to maintain your session.
- Future prepaid token credits: Hosted token access is planned and not currently operational. No credit purchases, payment details, or transaction histories are collected or stored today. If and when prepaid token credits are activated, purchasing terms and payment processing disclosures will be presented before any transaction.
3. Messages sent to AI providers
When you use Bring-Your-Own-Key (BYOK) with Anthropic or an OpenAI-compatible provider:
Your browser transmits conversation context, selected text and images, studio profile and reference context, and computed loudness measurements to your configured provider endpoint using your API key. BYOK requests are sent directly from your browser. Your provider's terms and privacy policy govern its handling of that data:
- Anthropic: anthropic.com/legal/privacy
- OpenAI: openai.com/privacy
- Other OpenAI-compatible providers: according to the terms of your configured endpoint.
Hosted Modulora Cloud prepaid token access is planned and unavailable. Its data handling and payment disclosures will be described before it is offered.
4. Hosting and logs
The static website and application are hosted on Cloudflare. Cloudflare processes technical connection data, including IP addresses and HTTP request headers, to serve and protect the site against abuse. We do not use third-party advertising cookies or cross-site tracking scripts.
5. How we use data
We use account data solely to authenticate your access to the studio workspace, keep the service secure, and meet legal obligations. We do not sell personal data, rent user lists, or use your private conversations to train AI models.
6. Retention and deletion
Account credentials and identifiers are retained while your account remains active. Because chat histories and API keys are stored in your browser, you control their deletion directly via Settings > Data > Clear data or browser storage settings. If you request account deletion, we delete your authentication records from our systems, except where retention is required by applicable law.
7. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, or to restrict its processing. You may also submit inquiries to your relevant data protection supervisory authority.
8. Service providers
- Cloudflare: website hosting, CDN delivery, and edge security.
- Supabase: user authentication and account credential management.
9. Children's privacy
ModuloraAI is intended for professional and creative audio producers aged 16 and older. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy. We will update the date above when it changes.