Privacy Notice

Effective date October 12, 2026

Overview

This Privacy Notice explains how Modulus AI, Inc. (“Modulus,” “we,” “us”) handles information collected through our website at modulus.ai (the “Site”). It also describes the cookies and similar technologies the Site uses and the choices available to you.

What we collect

Information you submit. When you submit our consultation request form, we collect the information you provide directly, such as your name, work email address, organization, website, phone number, a description of what you would like us to investigate, and any AI platform or example link you include. With each inquiry we also record your IP address, your browser user agent, and the date and time of submission. If you schedule a meeting through a third-party scheduling tool linked from the Site, currently Calendly, that provider collects the details you enter to book the meeting.

The consultation request form asks for a short description and public links only. Please do not include privileged material, personal records, or other sensitive documents in the form. We can arrange an appropriate exchange after the initial discussion.

Web meeting requests. We offer the Meet now option on our contact page and our free analysis page only when our team is available to take web meeting requests. It lets you ask to speak with a member of our team in a web meeting. When you use it, we collect your name and work email address, your organization if you give it, and what you would like to discuss if you tell us. With each request we also record your IP address, your browser user agent, a random identifier that your browser creates for the open page so that it does not send duplicate requests, and the times and status of the request, such as when you made it, whether a member of our team accepted it, when the meeting started and ended, and whether the request was cancelled or closed without a meeting. As with the consultation request form, please do not include privileged material, personal records, or other sensitive information in your request. If you join the web meeting, our video meeting provider also collects information, as described in How we share it.

Job applications. When you apply for a role through our careers page, we collect your name, work email, the role you choose, any LinkedIn or portfolio link and note you provide, and your IP address and browser details, and we use this information only to review your application, contact you about it, and protect the form from abuse.

Free analysis requests. When you request a free AI analysis through one of our analysis pages, we collect your name and email, and any company or organization, website, phone number, and primary concern you provide, together with the page you used, your IP address and your browser user agent, and we use this information to prepare the analysis, contact you about it, and protect the form from abuse. You then book the meeting itself through our scheduling provider, currently Calendly, which receives your name and work email from us to fill in its booking form and collects the details you enter there.

Case study requests. When you request case studies through our home page, we collect your work email address and the industry you choose, together with your IP address and your browser user agent, and we use this information to send you relevant case studies, to follow up with you about them, and to protect the form from abuse.

Research paper requests. When you request access to our research papers, we collect your work email address, your IP address, and your browser user agent, and we use this information to send you the papers, to follow up with you about our research, and to protect the form from abuse.

Newsletter. If you subscribe to the Modulus newsletter, we collect your work email address, your name if you provide it, your IP address, and your browser’s user agent, and we use this information to send you the newsletter, to protect the sign-up form from abuse, and to keep a record of your choice when you unsubscribe through the link in any issue so that we do not email you again.

Server logs. Our server records each page request, including your IP address, browser and device user agent, the pages requested, the referring site, the date and time, and similar technical information. On the home page, a script also reports to our server how far down the page you scroll, using a random identifier that lasts only for that page view. This happens on our server and does not use a cookie or store anything on your device.

Cookies and similar technologies. The Site uses strictly necessary cookies to remember your privacy choices, of which we keep a record, and to remember when you have asked for the version of the Site written for a particular audience. Depending on where you are and the choices you make, the Site also uses performance and targeting technologies. These are described in the Cookie Notice below.

How we use it

We use the information we collect for the purposes below. If you are in the European Union, the United Kingdom, or another jurisdiction that requires a legal basis for processing personal information, we rely on the legal basis given for each purpose.

• Responding to your inquiry. We use the details you submit to respond to you, evaluate and discuss a potential professional engagement, and schedule and prepare for meetings. We email you a confirmation and notify our team so that we can respond. We rely on the steps you ask us to take before entering into an engagement and, where you contact us on behalf of an organization, on our legitimate interest in responding to business inquiries.
• Connecting you with our team in a web meeting. When you ask to meet now, we use your details to alert our team, to let a member of our team accept your request and start a web meeting, to show you the link to join it, and to respond to you about your request and any potential professional engagement. We rely on taking steps at your request before entering into an engagement and, where you contact us on behalf of an organization, on our legitimate interest in responding to business inquiries.
• Reviewing your job application. We use the details you submit through our careers page to review your application and contact you about it. We rely on taking steps at your request before entering into an employment relationship and on our legitimate interest in recruiting.
• Preparing your free analysis. We use the details you submit through our analysis page to prepare the analysis, to hold the web meeting you book, and to follow up with you about it, including about a potential professional engagement. We rely on taking steps at your request before entering into an engagement and, where you contact us on behalf of an organization, on our legitimate interest in responding to business inquiries.
• Sending case studies and research papers. We use the details you submit when you request case studies or access to our research papers to send you the material you asked for and to follow up with you about it, including about a potential professional engagement. We rely on taking steps at your request and, where you contact us on behalf of an organization, on our legitimate interest in responding to business inquiries.
• Sending the newsletter. We use your email address and name to send you the Modulus newsletter until you unsubscribe. We rely on your consent, which you can withdraw at any time through the unsubscribe link in any issue.
• Operating and securing the Site. We use server logs, inquiry records, web meeting request records, job application records, free analysis request records, case study and research paper request records, and newsletter sign-up records to operate the Site, keep it secure, and detect and prevent spam, fraud, and abuse, including by blocking IP addresses and email addresses associated with abuse. We rely on our legitimate interests in keeping the Site secure and available.
• Understanding how the Site is used. We use server logs and scroll-depth measurements to produce aggregated first-party statistics, such as the number of visits, the pages viewed, how far visitors read the home page, and the referring sites, which help us improve the Site. We rely on our legitimate interests in operating and improving the Site.
• Analytics and marketing. When performance or targeting cookies are on, we use the technologies described in the Cookie Notice to measure how the Site is used and how our advertising performs. Outside the United States, they are on only if you allow them, and we rely on your consent, which you can withdraw at any time.
• Remembering and recording your choices. We use a strictly necessary cookie to remember your privacy choices, and we keep a record of them so that we can demonstrate consent. We rely on our legal obligations and on our legitimate interest in respecting and evidencing your choices.
• Legal compliance. We use information as needed to comply with legal obligations, enforce our Terms of Service, and protect our rights, users, and systems. We rely on our legal obligations and our legitimate interests.

Where we rely on legitimate interests, you may object to that use as described in Your choices and rights.

Cookie Notice

Cookies are small text files that a website stores in your browser. Similar technologies include your browser’s local storage and scripts that send information about your visit to a server. The Site groups these technologies into the four categories below, which are the same categories shown in our cookie banner and in Your Privacy Choices. In the United States, performance and targeting cookies are on by default, and you can turn them off at any time through our cookie banner or Your Privacy Choices. Everywhere else, performance and targeting cookies are off until you allow them. Functional cookies are off until you allow them, wherever you are. We use your device’s time zone setting to tell whether you are in the United States, and if it does not clearly place you there, we treat you as being elsewhere.

Strictly Necessary Cookies. These are always active, because the Site needs them to respect your choices.

• mai_consent, a first-party cookie set by Modulus. It remembers your privacy choices, when you made them, whether you have responded to our cookie banner, the version of our cookie settings they apply to, and a random consent ID, and it lasts 12 months. When you make or change a choice, or when the default choices are applied in the United States, we also record it in our database together with the consent ID, whether your browser sent a Global Privacy Control signal, how the choice was made, a hashed version of your IP address, your browser user agent, and the time.
• mai_mode, a first-party cookie set by Modulus only when you open a page written for a particular audience, such as our page for political campaigns, or add that audience to a page address. It holds the name of that audience so the rest of the Site is worded for it, and it lasts 30 days. Reset Preferences in our cookie settings removes it.

Performance Cookies. These are used only while performance cookies are on.

• Campaign attribution by Modulus. When you arrive through a link tagged with campaign parameters, such as a link in one of our advertisements, we store a random identifier in your browser’s local storage under the key mai_campaign and record the campaign details, the landing page, and the referring site. If you later submit an inquiry, we record that the visit led to an inquiry. The identifier stays in your browser until you turn off performance cookies or clear your site data.
• Third-party analytics by our analytics provider, currently Google (Google Analytics). It measures how visitors use the Site, including whether an inquiry was submitted, and may set its own cookies.

Our campaign measurements are sent to our own server, which also receives the technical details described under server logs above, such as your IP address and browser user agent.

Functional Cookies. We do not currently use functional cookies. If we add services that need them, they will run only if you allow functional cookies.

Targeting Cookies. These are used only while targeting cookies are on. Depending on the advertising we run, the Site may load the following tags.

• Advertising tags by our advertising partners, currently Google (Google Ads). They measure whether our advertising leads to visits and inquiries and may set their own cookies. Our advertising partners may also use information about your visit to build a profile of your interests and show you relevant ads on other sites.

Under some U.S. state laws, these advertising tags may be considered selling or sharing personal information, as explained in How we share it.

Our third-party analytics providers and advertising partners decide which cookies their tags set and how long those cookies last, and they use the information they collect under their own policies.

Changing your choices. You can review or change your choices at any time through the Your Privacy Choices link at the foot of every page. In the United States, our cookie banner also lets you keep the default choices or turn performance and targeting cookies off, and it appears on each page until you respond to it. When you turn off a category of cookies or withdraw consent, we stop using the related technologies from that point on. Cookies that our third-party analytics providers or advertising partners have already set may remain in your browser until they expire or you delete them. You can also block or delete cookies and local storage through your browser settings. If you block the strictly necessary cookie, the Site cannot remember your choices and may ask for them again. If your browser blocks cookies for the Site, performance and targeting cookies stay off unless you allow them, wherever you are.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of targeting cookies and of the sale or sharing of your personal information, and targeting cookies stay off in that browser while the signal is on.

How we share it

We share information with service providers who help us operate the Site and our business, including the following.

• Our cloud hosting and database provider, which hosts the Site and the database that stores inquiries, web meeting requests, job applications, free analysis requests, case study and research paper requests, newsletter subscriptions, server logs, and consent records, in the United States.
• Our email delivery provider, which delivers the confirmation we email to you and the notification we email to our team about your inquiry, job application, free analysis request, case study or research paper request, or newsletter sign-up, and the newsletter itself. When you ask to meet now, it also delivers an alert to our team that contains your name, email address, and organization and what you would like to discuss, if you told us.
• Our push notification provider, which delivers a push notification to our team when an inquiry, job application, free analysis request, case study or research paper request, or newsletter sign-up arrives. For an inquiry, the notification contains your name, email address, and the start of your description; for a job application, your name and the role you applied for; for a free analysis request, your name, your company, and your primary concern, if you chose one; for a case study request, your email address and industry; for a research paper request, your email address; and for a newsletter sign-up, your name and email address. When you ask to meet now, it delivers push notifications to our team that contain your name, email address, organization if you gave one, and the start of what you would like to discuss, if you told us.
• Our video meeting provider, which creates the web meeting when a member of our team accepts your request to meet now. If you join, the provider processes meeting data, such as the name you display, your device and connection details, and the audio, video, and chat you share, under its own terms and privacy policy.
• The provider of our business email, where our team receives and answers inquiries, and the provider of any third-party scheduling tool you use to book a meeting with us, currently Calendly, whose calendar appears on our analysis page after you request a free analysis, with your name and work email already filled in.

These providers process information on our behalf or under their own terms, subject to appropriate confidentiality and data-processing commitments where we engage them directly.

Analytics and advertising partners. When performance cookies are on and we use third-party analytics, our third-party analytics provider receives information about your visit. When targeting cookies are on, our advertising partners receive information about your visit through their tags, such as your IP address, browser details, the pages you view, and their cookie identifiers, and they may use it for their own purposes, including ad targeting, under their own privacy policies. We do not send them the contents of your inquiry.

Legal and safety disclosures. We may also disclose information if required by law or to protect our rights, users, or systems.

Sale and sharing. We do not sell your personal information for money, and we do not provide it to data brokers. Some U.S. state privacy laws define selling and sharing broadly. Under those laws, allowing our advertising partners to collect information through their advertising tags may be considered selling personal information or sharing it for cross-context behavioral advertising, also called targeted advertising. These tags load only while targeting cookies are on, which is the default in the United States, and you can opt out at any time as described in Your choices and rights.

Your choices and rights

Privacy choices. You can allow or refuse performance, functional, and targeting cookies, and change your choices at any time, through the Your Privacy Choices link at the foot of every page. In the United States, performance and targeting cookies are on by default, and you can turn them off at any time through our cookie banner or Your Privacy Choices. Everywhere else, they are off until you allow them. Refusing or turning off these cookies does not affect your ability to use the Site or to submit an inquiry.

Newsletter. You can stop the newsletter at any time through the unsubscribe link in any issue. We keep a record of your choice so that we do not email you again.

Your rights. Subject to applicable law and our legal obligations, you may request access to, correction of, or deletion of your personal information. If you are in the European Union, the United Kingdom, or a jurisdiction with similar laws, you may also object to processing based on our legitimate interests, ask us to restrict processing, receive the information you provided to us in a portable format, and withdraw your consent at any time without affecting processing that took place before you withdrew it. You also have the right to lodge a complaint with the data protection supervisory authority where you live or work.

U.S. state privacy rights. Depending on where you live in the United States, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct, or delete it, to receive a copy of it, and to opt out of the sale or sharing of your personal information and of targeted advertising. The personal information described in this Notice includes identifiers and contact details, such as your name, email address, IP address, and cookie identifiers; professional information, such as your organization; and internet activity information, such as the pages you view and the sites that referred you. To opt out of sale, sharing, and targeted advertising, turn off targeting cookies through Your Privacy Choices or enable Global Privacy Control in your browser. Because these choices are stored in your browser, you need to make them on each browser and device you use.

Making a request. Email legal@modulus.ai to make a request. We may need to verify your identity before we act on it, and you may use an authorized agent where the law allows. We will respond within a reasonable time and within any period required by law. If we decline a request, we will explain why, and where the law provides a right to appeal, you may appeal by replying to our response. We will not discriminate against you for exercising any of these rights.

International transfers

Modulus is based in the United States, and the Site and its database are hosted in the United States. If you visit the Site or contact us from outside the United States, including from the European Union or the United Kingdom, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you live. Our service providers, third-party analytics providers, and advertising partners may also process information in other countries under their own terms. Where the law requires it, we take steps designed to ensure that transfers of your personal information are appropriately protected.

Data retention

• Inquiries. We keep the information you submit as long as needed to respond to you and to manage any resulting engagement, and then delete it, unless we must keep it longer to meet legal, accounting, or reporting requirements.
• Web meeting requests. We keep the information from a request to meet now as long as needed to manage the request and any resulting engagement, and then delete it, unless we must keep it longer to meet legal, accounting, or reporting requirements. Meeting data that our video meeting provider collects is kept under its own retention policies.
• Job applications. We keep your application as long as needed to consider you for the role you chose and for other roles that may suit you, and then delete it, unless we must keep it longer to meet legal requirements.
• Free analysis requests. We keep the information from a request as long as needed to prepare and hold your analysis, to follow up with you about it, and to manage any resulting engagement, and then delete it, unless we must keep it longer to meet legal, accounting, or reporting requirements. The details you enter in our scheduling provider are kept under its own retention policies.
• Case study and research paper requests. We keep the information from a request as long as needed to send you the material and to follow up with you about it, and then delete it, unless we must keep it longer to meet legal, accounting, or reporting requirements.
• Newsletter. We keep your email address and name for as long as you are subscribed. When you unsubscribe, we keep a record of your address and of your choice so that we do not email you again.
• Server logs and first-party analytics. We keep page request logs, scroll-depth measurements, and campaign attribution records for about 13 months, and then delete them.
• Consent records. We keep the record of your privacy choices, with its random consent ID and hashed IP address, for up to 24 months to evidence consent, and then delete it. The mai_consent cookie in your browser expires after 12 months.
• Blocked addresses. We keep IP addresses and email addresses on our blocklist for as long as needed to prevent abuse.

Information collected by our third-party analytics providers and advertising partners through their tags is kept under their own retention policies. Otherwise, we retain personal information only as long as needed for the purposes described in this Notice, to respond to your inquiries, and to meet our legal, accounting, or reporting requirements, after which we delete or de-identify it.

Security

We use reasonable administrative, technical, and organizational measures designed to protect the information we hold. The Site is served over encrypted connections, and access to stored inquiries and web meeting requests is limited to authorized personnel. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Children

The Site is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal information from children.

Changes

We may update this Privacy Notice from time to time. Changes are effective when posted to the Site, and the effective date above will be updated accordingly. If we change the categories of cookies or the partners described in this Notice, we will ask for your privacy choices again.

Governing law

This Privacy Notice is governed by the laws of the State of Arizona. Any dispute relating to this Notice is subject to the arbitration provision and the governing law and venue provisions of our Terms of Service.

Contact

For privacy questions, access requests, deletion requests, opt-out requests, and security reports, email legal@modulus.ai.

For general questions, email hello@modulus.ai or use our contact page.