Privacy notice

Evidence is derived inside your account’s boundary. When an AI model helps classify it, that call runs for your account under our commercial agreements with US-hosted AI providers. It isn’t public learning.

Only de-identified, minimized evidence: outcomes, error and failure types, timings, resource use, which checks passed, which fix worked, and general patterns. Never your files, inputs or results, data from your connected accounts, credentials, raw logs, or anything that identifies you or another person.

Fixed fields instead of free text, rounded values, synthetic test cases instead of your inputs, checks that no text from your inputs slips through, and a minimum of 5 accounts behind any metric. Dates in metrics are rounded to the week and never come with file names or which runs a fix came from. Anything unclear is held back and deleted after 7 days.

The learning audience: the pack’s creator, who sees totals across 5 or more people (below that, “not enough data yet”), and the Modpack network, as improved pack versions everyone can use.

We keep de-identified information in de-identified form and don’t attempt to re-identify it. Everyone who receives it, including creators and other users, is bound by contract not to re-identify it either.

Stop anytime in Settings. New evidence stops being eligible at once, and your packs pause, because learning is part of how managed packs work. Export, files, receipts and every right in section 09 keep working. What was already built into released versions stays there; it was never linked to you.

We ask for your fresh agreement before using your runs for learning in a materially different way. A change never applies to runs from before you agreed.

We don’t sell your personal data, and we don’t “share” it for cross-context behavioral advertising, in the sense California law uses.

There are no advertising or social media trackers on Modpack.

We don’t train foundation models or any other AI models on your data, and our AI providers’ commercial terms don’t let them train on it. Learning improves packs, meaning their code, instructions and checks, not AI models.

Because we don’t sell or share, there’s nothing to opt out of. We still honor Global Privacy Control signals as an opt-out request.

Companies that host, run and support Modpack for us, under contracts that limit their use of your data to that work. They’re listed below, and we add a provider here before we use it.

Never your personal data, inputs, results or files. Creators see totals across 5 or more people (runs, how often runs worked, failure types) and the text of questions asked on their pack page, without names. When you report a pack, the creator never learns who reported it.

Results go to the agent you connected, because you asked for them.

When the law requires it, such as a valid subpoena or court order. We tell you first unless the law or an emergency prevents it. We report child sexual abuse material to NCMEC as the law requires.

If Modpack is merged or sold, your data goes to the new owner, bound by this notice. We tell you first.

“What we hold” in Settings lists the data in your account, your consent records and where each is kept.

Download everything as one signed bundle from Export. It’s free and works with a $0 balance, with paused packs and with no agent connected. We email you when it’s ready.

Delete your account from Settings, confirmed with a passkey or by signing in again. You can cancel for 24 hours. Your data is deleted within 7 days and backups expire within 30 days. Receipts stay as the law requires.

From Settings. Your packs pause; export and your other rights keep working.

Change your name and email in Settings, or ask us to fix anything else.

Revoke an agent or a connected account anytime in Connections.

Turn off optional email in Settings. Email about your runs, money and security stays on while your account is open.

Email privacy@modpack.md. We confirm it’s you by asking you to sign in, and answer within 30 days, or 45 at most if we tell you why we need longer.

An authorized agent can ask for you with your signed permission. We still confirm your identity with you.

Reply to our answer to appeal. A different person reviews it and answers within 45 days. If you’re still unhappy, you can contact your state attorney general.

We don’t charge you more or treat you worse for using these rights. Stopping learning pauses managed runs because learning is part of how they work; everything else, including export, keeps working.

Your handle, profile, packs, prices, versions and pack evidence are public.

Stripe collects your legal name, address, date of birth, bank details and tax ID through Stripe Connect Express. We receive whether its checks passed, your payout status and what we need to file your 1099-MISC, and keep tax records as the law requires.

Totals across 5 or more people, and question text without names. Never their identity, inputs, results or files.

If you send a copyright counter-notice, we forward your name, address, phone number and statement to the person who sent the notice, as the law requires.

privacy@modpack.md

security@modpack.md

legal@modpack.md

Modpack, Inc., [postal address to be added]