Privacy policy

Who we are

This website is operated by Modulus Labs AI LLC (“Modulus Labs”, “we”, “us”), a limited liability company formed in the State of Wyoming, United States. For any question about this policy or your data, contact [email protected], or write to us at 30 N Gould St Ste R, Sheridan, WY 82801, United States.

We are the data controller for the personal data described below. Our engineering team works from Pakistan, which matters for the transfers section further down.

What we collect

We collect two kinds of data, and no more than these.

Data you send us deliberately

When you submit the contact form, we receive the fields you fill in: your name, email address, company, the project type and budget range you select, and your message. We also record the time of submission. Two hidden fields exist purely to block automated spam and hold no information about you.

Data collected automatically

• Cookieless visitor analytics. We use Cloudflare Web Analytics to count page views and referrers. It sets no cookies, does not fingerprint your device, and does not track you across other websites.
• Optional analytics cookies. If you accept them, we load Google Analytics 4, which sets cookies to recognize returning visits and measure which pages lead to enquiries. This never runs unless you accept it.
• Server and network logs. Our hosting and CDN providers log request metadata such as IP address, user agent, and requested URL, for security and reliability. This is a normal part of serving a website.

Why we process it, and on what basis

• To answer your enquiry. If you contact us about work, we use your details to reply and to assess the project. Our legal basis is legitimate interest, or the steps preceding a contract where one follows.
• To understand what the site is doing. Cookieless analytics rests on legitimate interest, since it carries no identifiers. Cookie-based analytics rests on your consent, and only your consent.
• To keep the site secure and available. Legitimate interest.

We do not sell personal data, we do not share it with advertisers, and we do not use it to build profiles or serve targeted advertising.

Cookies and how to change your mind

Cookieless analytics runs for every visitor and requires no consent because it stores nothing on your device. Google Analytics is loaded only after you accept it — declining means the script is never requested, not merely restricted. You can change your choice at any time with the Cookie preferences link in the site footer, or by clearing this site’s data in your browser.

Who else handles your data

We keep the list of third parties short and use each for one clear purpose:

• Formspree — receives contact form submissions and forwards them to our inbox. Your submission is sent to Formspree directly from your browser.
• Zoho Mail — hosts the mailbox your enquiry lands in.
• Cloudflare — CDN, security, and cookieless analytics.
• Amazon Web Services — hosting and content delivery.
• Google — Analytics 4, only where you have accepted analytics cookies, and Search Console, which reports aggregate search statistics and receives no personal data from us.

We may also disclose data where the law requires it, or to protect our rights, safety, or the integrity of our systems.

International transfers

We are a United States entity, our team works from Pakistan, and our providers operate globally. Personal data you send us will therefore be processed outside your country, including in the United States. Where data originates in the UK or the European Economic Area, we rely on the transfer mechanisms our providers offer, such as Standard Contractual Clauses.

How long we keep it

We keep contact enquiries for as long as needed to deal with them and to maintain a record of our business correspondence, and no longer than three years after our last contact with you, unless you ask us to delete them sooner or we are required to keep them. Aggregate analytics data carries no identifiers and is retained as statistics.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, ask us to delete it, receive a copy in a portable form, object to processing based on legitimate interest, or withdraw consent you have given. We do not sell or share personal data for cross-context behavioural advertising, so there is nothing to opt out of on that front. Exercising any of these rights will never cost you anything and will not lead to worse service.

Write to [email protected] and we will respond within 30 days. If you are in the UK or the EEA and are unsatisfied with our response, you may complain to your national data protection authority.

Security

The site is served over HTTPS with a strict Content Security Policy and standard hardening headers. Contact submissions travel over encrypted connections. No system is perfectly secure, so we do not claim otherwise — but we treat the data you send us as something to protect, not something to accumulate.

Children

This site sells business services and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and the “last updated” date above. Material changes will be described here rather than made quietly.