Privacy Policy

This Privacy Policy explains how Modyule ("Modyule", "we", "us" or "our") handles personal information when you visit our website, create an account, or use the Modyule application and related features (the "Service").

It should be read together with our Terms of Service. By using Modyule you acknowledge that we will handle your information as described in this Policy.

Modyule is an Australian car enthusiast platform. It provides a digital garage and build logbook where users can record vehicles, modifications, parts, costs, service history and reminders, upload photos and documents, publish public build pages, appear in Discover, compare builds using Build Battle, use AI-assisted features, and subscribe to paid plans.

Modyule is operated from Australia. Our contact details are in section 31.

We aim to handle personal information consistently with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and we apply the standards in this Policy regardless of whether every obligation in that Act technically applies to our business at a given time.

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not recorded in a material form.

The information we collect may include:

• Account information: email address, username or display name, authentication information used to access your account, profile details you choose to add, and account settings.
• Subscription information: plan type, subscription status, billing period, renewal or cancellation status, and identifiers provided by our payment processor.
• Garage and build information: vehicles, make, model, year, trim, specifications, power figures, weight and performance figures, modifications, parts, brands, costs, install dates, service history, service intervals and reminders, vehicle health information, wishlists and notes.
• Uploaded content: vehicle photos, cover images, receipts, invoices, documents and other files you choose to upload.
• Public and community content: public build pages, shared build links, Discover listings, Build Battle entries and results, and any other content you choose to publish or share.
• Technical information: IP address, device and browser information, operating system, log data, error and crash data, pages and features used, dates and times of access, and approximate location that may be derived from technical information such as an IP address.
• Communications: support emails, contact form messages, feedback, bug reports and related correspondence.

We do not collect precise GPS or device location data. Any location information we hold is approximate and derived from technical information, or supplied voluntarily by you (for example, a general location you add to a profile or build).

Information about a vehicle is not always personal information on its own. However, it can become personal information when it is linked to your account, your name, your contact details, a public profile, or other information that makes you reasonably identifiable.

Vehicle identifiers such as a VIN, registration number, chassis number or engine number can be sensitive in practice and may be used by others for fraud or impersonation. You are not required to record these details in Modyule, and you should think carefully before adding them or including them in images you upload or publish.

Files you upload — including receipts, invoices, registration documents, insurance documents, workshop paperwork and photographs — frequently contain personal information. This can include your name, address, contact details, payment details, policy or registration numbers, licence details, vehicle identifiers and the details of third parties such as workshops or previous owners.

Please only upload information that is necessary for your use of Modyule. Where possible, redact or crop information you do not need before uploading. You are responsible for reviewing files before you upload them and before you make anything public, and for ensuring you are entitled to upload information about other people.

Modyule lets you publish build pages, share links and have builds appear in Discover. Where you choose to make content public:

• It may be accessible to anyone, including people without a Modyule account.
• It may be visible to other users and to the public depending on your settings.
• It may be discovered, indexed, cached, copied, screenshotted, downloaded, shared or redistributed by search engines, other services or individuals outside our control.
• Removing content from Modyule does not guarantee that copies already made by third parties will disappear, and we cannot recall or delete copies held elsewhere.

You should not publish information you expect to remain private, including home addresses, number plates, documents, financial details or personal identifiers. You are responsible for checking what you make public and for changing your visibility settings if your preferences change.

When you use Modyule, certain information is collected automatically by our systems and infrastructure providers, including IP address, device and browser information, request and log data, error data, and information about how the Service is used. This information is used to operate, secure, debug and improve the Service.

Modyule uses cookies, local storage and similar technologies that are necessary for the Service to function — for example to keep you signed in, remember preferences and settings, and maintain security. We may also use technologies that help us understand how the Service is performing.

Most browsers allow you to block or delete cookies and clear local storage. If you do, parts of Modyule (including sign-in) may not work correctly.

We may use analytics and error-monitoring tools to understand usage patterns, measure performance, detect faults and improve the Service. These tools may collect technical and usage information such as pages viewed, features used, device and browser details, IP address and error reports. Where we use marketing or advertising measurement tools, information about your interaction with the Service may also be shared with the relevant provider for that purpose.

Paid plans are processed by a third-party payment processor. Payment card details are collected and handled by that processor under its own terms and privacy policy — Modyule does not store full card numbers.

We receive and store information needed to manage your plan, such as your plan type, subscription and payment status, billing period, renewal or cancellation status, currency and amount, and customer or subscription identifiers issued by the processor.

When you contact us, we collect the content of your message and any information you include, along with your contact details, so we can respond, investigate issues and keep a record of the interaction. Support correspondence may contain personal information about you or others, so please only include what is necessary.

We collect information:

• Directly from you when you create an account and use the Service;
• Automatically through your use of the Service and our infrastructure;
• From third-party providers who support the Service, such as authentication and payment providers;
• From publicly available or user-submitted content where relevant to a report, complaint, moderation or security matter.

Where it is reasonable and practicable, we collect personal information directly from you.

We collect, hold, use and disclose information for purposes including:

• Creating, authenticating, securing and managing accounts;
• Providing core features — garages, vehicles, modifications, parts, costs, service history, reminders, wishlists, notes, uploads and galleries;
• Providing public build pages, sharing, Discover, Build Battle and AI-assisted features;
• Providing paid plans, processing payments and managing subscriptions;
• Sending service reminders, account notices, subscription notices, security notices and support replies;
• Responding to enquiries, support requests, complaints and reports;
• Maintaining, debugging, securing and improving the Service, including analytics and error monitoring;
• Detecting, preventing and responding to fraud, abuse, misuse, security incidents and breaches of our Terms;
• Complying with our legal obligations and exercising or defending legal rights.

We only use information for a purpose set out above, a purpose you would reasonably expect that is related to those purposes, a purpose you have consented to, or a purpose required or authorised by law.

Modyule includes AI-assisted features, including Build Battle comparisons, build commentary and other automated analysis. To provide these features, information you have entered — such as vehicle specifications, modifications, parts, power figures, weight, service and vehicle health information, and in some cases images — may be processed automatically.

Where a feature relies on an external AI provider, the information necessary for that feature is transmitted to that provider for processing so the output can be returned to you. That provider handles the information under its own terms and privacy policy. We only send the information needed for the requested feature.

AI outputs are estimates generated algorithmically. They may be inaccurate, incomplete or based on information you or another user entered incorrectly. AI outputs are provided for informational and entertainment purposes and must not be treated as professional mechanical, engineering, safety, legal, insurance, financial, roadworthiness or compliance advice. Modyule does not certify vehicle modifications and does not guarantee vehicle performance.

Modyule does not make decisions that produce legal effects for you, or otherwise significantly affect you, based solely on automated processing. AI features such as Build Battle produce informational and entertainment outputs only. Automated systems may assist with routine operational matters such as spam, abuse and content moderation signals, plan limits and security controls, but decisions that materially affect your account — such as suspension or termination — involve human review where reasonably practicable.

We may disclose personal information:

• To third-party service providers who help us operate the Service (section 18);
• Publicly, where you have chosen to publish content or make a build or profile public;
• To professional advisers such as lawyers and accountants, where reasonably necessary;
• To law enforcement, regulators, courts or other authorities where required or authorised by law, or where reasonably necessary to protect the safety, rights or property of users, Modyule or others;
• To a purchaser or successor in connection with a sale, merger or restructure of the business, subject to appropriate confidentiality arrangements;
• With your consent, or as otherwise permitted by law.

We do not sell your personal information.

We use third-party providers to deliver the Service. These providers process information on our behalf and only for the purposes of providing their services to us. Categories include:

• Hosting and application infrastructure
• Database and cloud file storage
• Authentication and identity services
• Payment processing and subscription billing
• Email delivery (account, service, reminder and support emails)
• Analytics and product measurement
• Error monitoring and logging
• AI and machine learning processing
• Customer support and communications tools

Each provider handles information under its own terms and privacy policy. We do not control the internal systems of these providers.

Modyule is operated from Australia, but the providers described in section 18 may store or process information on infrastructure located outside Australia, and the locations used by a provider may change over time as their infrastructure changes.

Where personal information is disclosed to an overseas recipient, we take steps that are reasonable in the circumstances to ensure it is handled consistently with this Policy and applicable Australian privacy law, including by selecting established providers and relying on their contractual terms. Because a provider may change the regions it uses, we do not list specific countries here. If you would like current information about where your information is processed, contact us at modyule.io@gmail.com.

We take steps that are reasonable in the circumstances to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Depending on the system involved, these steps may include:

• Account authentication and session controls;
• Row-level database access rules that restrict data to the owning account;
• Access controls and least-privilege principles for administrative access;
• Encryption in transit using HTTPS, and encryption at rest where provided by our infrastructure providers;
• Restricted storage permissions for uploaded files;
• Logging, monitoring and error reporting;
• Backups maintained by our infrastructure providers;
• Security reviews of the application where implemented.

No website, application or method of transmission or storage can be guaranteed to be completely secure. You are responsible for keeping your login details confidential and for the security of the devices you use to access Modyule.

We have processes to respond to suspected security incidents, including assessing the incident, taking reasonable steps to contain and remediate it, and considering whether notification is required.

Where the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth) applies to an eligible data breach involving your personal information, we will comply with our notification obligations to affected individuals and the Office of the Australian Information Commissioner. Not every security event is a notifiable data breach, and we do not undertake to notify users of minor or non-eligible events.

We retain personal information for as long as it is needed for the purposes described in this Policy, including:

• While your account is active;
• For as long as necessary to provide the Service and requested features;
• For legitimate business purposes, including support and service improvement;
• To comply with legal, accounting, tax and record-keeping obligations;
• To resolve disputes and enforce our agreements;
• To detect and prevent fraud, abuse and security incidents;
• In backups and system logs, for limited periods.

Deleting content or an account removes it from the active Service, but information may persist for a limited period in backups, logs or provider systems until those are overwritten or expire in the ordinary course. Where personal information is no longer needed and we are not required to keep it, we take reasonable steps to delete it or de-identify it.

You can delete content from your garage at any time, and you can request deletion of your account by emailing modyule.io@gmail.com or by using any in-app account deletion option that is available to you.

Deleting your account removes your access and, subject to the retention matters above, removes your account data from the active Service. Deletion does not reverse completed payments, does not remove copies of public content that third parties have already made, and does not affect information we are required or permitted to retain.

You can access and correct much of your information directly in the app. You can also contact us at modyule.io@gmail.com to request access to, or correction of, the personal information we hold about you, or to request deletion.

• We may need to verify your identity before acting on a request.
• We aim to respond within a reasonable period, generally within 30 days.
• We may decline a request where an exception applies under applicable law, or where we are required to retain information — if we do, we will explain why where we are required to.
• Where content has already been made public, third parties may hold copies we cannot remove.
• We do not charge for making a request; some access requests may attract a reasonable cost-based fee where permitted by law.

If you believe we have mishandled your personal information:

• Step 1 — Contact us at modyule.io@gmail.com with the subject line "Privacy complaint". Please include your account email, what happened, when it happened, and the outcome you are seeking.
• Step 2 — We will acknowledge your complaint, investigate it, and respond within a reasonable period (generally within 30 days). We may contact you for more information.
• Step 3 — If you are not satisfied with our response and Australian privacy law applies to the matter, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. You may also have rights under privacy or data protection laws in your own location.

Service communications — such as account notices, security notices, subscription and billing notices, service reminders you have set up, and replies to your support requests — are part of the Service. You cannot opt out of these while you hold an account, although you can control certain in-app reminder settings.

Marketing communications — such as product news, feature announcements or offers — are only sent where permitted by law. You can opt out at any time using the unsubscribe link in the message or by contacting modyule.io@gmail.com. Opting out of marketing does not stop essential service communications.

We do not seek to collect sensitive information (such as health, biometric, racial or ethnic, political, religious or criminal record information). Please do not upload sensitive information to Modyule. If sensitive information is included in content or files you upload, you consent to us handling it as described in this Policy for the purpose of providing the Service, and you may delete it at any time.

Modyule is intended for users aged 16 and over. If you are under 18, you should only use Modyule with the involvement and permission of a parent or guardian, and you must not enter into a paid subscription without their consent.

We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, contact modyule.io@gmail.com and we will take reasonable steps to delete it.

Modyule may contain links to third-party websites, products, retailers, workshops or services, including links added by users. We do not control those sites and are not responsible for their content or privacy practices. Review their privacy policies before providing information to them.

We may update this Policy from time to time to reflect changes to the Service, our providers or the law. The "Last updated" date at the top shows when it was last revised. Where changes are material, we will take reasonable steps to notify you through the app, the website or by email. Continuing to use Modyule after the updated Policy takes effect means you accept the updated Policy, to the extent permitted by law.

For privacy questions, requests or complaints, contact modyule.io@gmail.com, or use our contact page. Modyule is operated from New South Wales, Australia.