Modulate ("we", "us") is a browser-based image and video compositor. This policy explains what data we collect, why, and what you can do about it. Questions: hi@modulate.to.
What we collect
- Account, your email address. After onboarding, also your username, display name, and avatar if you upload one.
- Content, the projects, layers, images, videos, and fonts you upload. Private to your account unless you export them.
- Usage, analytics events and session replays so we can improve the editor and find bugs.
- Errors, crash reports including a request id and browser version.
- Technical, request logs and IP address used for rate limiting and abuse prevention.
Why we collect it
| Purpose | Legal basis (GDPR) |
|---|---|
| Operate your account and store your projects | Performance of a contract |
| Send authentication and account emails | Performance of a contract |
| Prevent abuse, fight fraud, enforce limits | Legitimate interest |
| Diagnose crashes | Legitimate interest |
| Editor session replay (closed beta) | Legitimate interest, opt-out in Settings |
| Marketing-site analytics and replay | Consent, withdrawable any time |
We use analytics and session replay to find bugs and improve Modulate. Sensitive inputs such as passwords are masked.
Who we share it with
- Supabase, account database and authentication.
- Cloudflare R2, stores your uploaded media and exports.
- Anthropic, when you use the AI Custom Module builder we send your prompts to Anthropic's Claude API. Anthropic does not train models on data sent through the API.
- PostHog, product analytics and session replay.
- Sentry, error monitoring.
- Resend, sends authentication emails.
We do not sell your data and do not share it with advertisers.
Where data is stored
Our providers are based primarily in the United States. Personal data of EEA and UK users may be transferred outside the EEA under standard contractual clauses.
How long we keep it
We keep personal data only as long as we need it for the purposes above. Account data is kept while your account exists; logs and telemetry are kept as long as our providers retain them. You can request earlier deletion at any time by emailing hi@modulate.to.
Your rights
You can access, correct, delete, export, or restrict processing of your data; object to processing based on legitimate interest (including editor session replay, opt out via Settings); withdraw consent for marketing-site analytics any time via "Manage cookies"; and lodge a complaint with your local data protection authority. Email hi@modulate.to to exercise any of these. We respond within 30 days.
Cookies
Authentication tokens, editor state, and your consent / preferences are strictly necessary and cannot be turned off. Analytics and session replay are gated as described above.
Changes
We post material changes here and bump the version date. If your rights are materially affected we will notify you before the change takes effect.
Contact
Modulate, hi@modulate.to.