Modeleon Privacy Policy

Effective: September 26, 2026

The short version: We collect only what we need to run Modeleon. Your models and data are yours — we never sell personal data, we show no ads, and we don't use your content to train AI models. Your content goes to an AI provider only when you invoke an AI feature. Payments go through Paddle, so we never see your card number.

Who we are

Modeleon is operated by Modeleon LLP (ТОО «Modeleon»), a limited liability partnership registered in the Republic of Kazakhstan. We operate modeleon.ai and platform.modeleon.ai. Questions about this policy: support@modeleon.ai.

What we collect and why

Account information. Your name, email address, and password (stored hashed — we can't read it). If you sign in with Google, we instead receive your name, email address, and Google account identifier from Google. We need this to create your account, sign you in, and contact you about the service.

How you found us. When you create an account, we record how you arrived: the campaign parameters in the link you used (such as utm_source), the website that referred you, and the page you entered on. We use this to measure which channels bring people to Modeleon, and we keep it with your account until the account is deleted. We do not use cookies or local storage for this.

Your content. The models, code, data, notebooks, dashboards, and files you create or upload. We store and process this for one reason: to run the service for you. Your content belongs to you, and we don't use it to train AI models — ours or anyone else's.

Usage information. Technical logs and telemetry — things like requests, errors, timestamps, IP addresses, and browser type — that we need to operate, secure, and debug the service. We also keep aggregate website visit statistics for modeleon.ai (see Data retention). On our website, we use PostHog for product analytics (see Cookies below).

Payment information. Self-serve payments are handled by Paddle, our merchant of record. Paddle collects your payment details directly as an independent controller — we never see your card number. Paddle passes us what we need to run your subscription: who bought what plan and the billing status. Customers billed directly by invoice provide the details we need to issue invoices — company name, registration number, address, and contact details.

Correspondence. If you email us, we keep the correspondence so we can help you and keep track of the conversation.

Our guiding principle is to collect only what we need. We don't collect data to sell it — we never sell personal data, and we show no ads.

Legal bases for processing

Where the law (such as the GDPR) requires a legal basis for each use of personal data, ours are:

• Performance of a contract — account information, your content, payment status, and correspondence: we process these to provide the service you signed up for.
• Legitimate interests — technical logs and telemetry: we process these to keep the service secure and reliable, to diagnose faults, and to prevent abuse; and measuring which channels bring people to Modeleon (the how-you-found-us information above).
• Consent — analytics cookies (our own visit-counting cookie and PostHog, both on the website): only if you accept them in the cookie banner, and you can withdraw consent at any time.
• Legal obligation — billing and tax records we're required to keep.

Personal data inside your content

Your models may themselves contain personal data about other people — a payroll model contains employee data, for example. For that data, you are the controller (it's your data about your people) and we are a processor. This section and our Terms of Service are our data-processing commitments: we process that data only on your instructions to provide the service, don't use it for anything else, keep it confidential, use only the providers listed below (under Who processes your data), assist you with data-subject requests, and delete it as described under Data retention. If we add or replace a provider, we'll update that list and notify account holders before the change takes effect, and you may object on reasonable grounds. On request, we'll provide the information reasonably needed to demonstrate these commitments. A countersigned data processing agreement (DPA) formalizing these commitments is available to any customer at support@modeleon.ai. You're responsible for having the right to put that data into Modeleon in the first place.

Who processes your data

We use a small number of service providers, each for one job:

We share personal data with these providers only as needed for their role, and otherwise only: when you ask us to; to comply with a valid legal obligation; to protect the service, our users, or others from harm; or as part of a corporate transaction such as a merger or acquisition (in which case this policy continues to apply to your data, and we'd notify you).

AI features and your data

This deserves its own section because it's the question people care most about.

Content from your models is sent to an AI model provider only when you invoke an AI feature — when you send a message to the AI assistant, or when your own tools call AI-backed functionality through our API/MCP under your tokens. Nothing is sent to the AI in the background.

That content is processed on our behalf under commercial terms that do not permit the provider to use it to train its models. Providers may retain requests for a short period for abuse and misuse monitoring under their terms (typically up to 30 days) before deletion. We don't use your content to train AI models either.

Cookies

Our website uses cookies for signing you in, keeping your session, and remembering your cookie choice. With your consent via the cookie banner it also uses two analytics cookies. The first is ours (mo_vid, kept for one year): it holds a random identifier, created by our own server, that lets us count repeat visits from your browser as one person rather than several; it is not linked to your name or account, and declining or withdrawing consent deletes it. The second is PostHog's, which helps us understand how the site is used. We also keep website visit records without any cookie at all, as described under Data retention; those records never contain this identifier. You can decline analytics cookies in the banner, and PostHog runs only if you accept; you can change your choice at any time via Cookie settings in the site footer. Essential cookies (sign-in, security, and remembering your cookie choice) are required for the service to work.

How we secure your data

Data is encrypted in transit (TLS). Our managed databases — where your account data and model content live — are encrypted at rest by our hosting provider. Access to production systems is restricted to people who need it to operate the service. Passwords are stored hashed, never in plain text. We're honest about our stage: we do not currently hold compliance certifications, and we don't claim any. If we ever suffer a breach affecting your personal data, we'll notify you as required by applicable law.

Data retention

We keep your data for as long as your account is active. When you delete content or cancel your account, it immediately becomes inaccessible in the service; we keep it in a deactivated state for 30 days so that an accidental deletion can be reversed on request, and after that it is scheduled for permanent deletion. Automated purging is not yet in place: until it is, we permanently delete deactivated content from our live systems within 30 days of a written request to support@modeleon.ai, and otherwise on our next manual purge run. Database backup copies are retained by our hosting provider for 7 days after that and then expire; residual entries in operational logs are retained for up to 12 months. Separately, we keep website visit records for modeleon.ai — the page viewed, the referring site, browser type, whether the page was interacted with (only that it was — not how or where), and your cookie-banner choice — for up to 10 years for aggregate visitor statistics; these records are keyed only by a salted, truncated hash of your network address and browser type, never by the identifier described under Cookies, and are never linked to an account. Once content has been purged and its backup copies have expired, it cannot be recovered. We keep billing records as long as tax and accounting law requires.

Your rights

Wherever you live, you can:

• Access the personal data we hold about you;
• Correct it if it's wrong;
• Export your content — your model code and Excel workbooks — from the service;
• Port your personal data — receive the personal data you've provided to us in a machine-readable format;
• Delete your account and data;
• Object to or restrict processing, and withdraw consent where processing is based on consent (such as analytics cookies);
• Complain to your local data protection authority.

To exercise any of these, email support@modeleon.ai. We'll verify your identity (usually by confirming control of the account email) and respond within the time your local law requires — and within 30 days in any case. If your jurisdiction grants you rights beyond this list, those rights apply too.

International transfers

We operate from Kazakhstan and host data with a cloud hosting provider — currently DigitalOcean, in the United States (San Francisco, SFO2 region); if the provider or region changes, this policy will be updated. Using Modeleon means your data is processed in that region and by the providers listed above, which may be located outside your country. If we ever move primary hosting to a different region, we'll tell you in advance. Where the law of your jurisdiction requires safeguards for transfers, our agreements with these providers incorporate appropriate safeguards, including the European Commission's Standard Contractual Clauses where they apply.

Children

Modeleon is not directed at children and requires users to be at least 18. We don't knowingly collect personal data from children; if you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

When we make a material change, we'll refresh the effective date at the top and notify account holders by email before it takes effect. Previous versions are available on request.

Contact

Privacy questions, rights requests, anything else: support@modeleon.ai.

The data controller:

Modeleon LLP (ТОО «Modeleon»)
Business Identification Number (BIN): 260440036433
Registered address: 11 Qabanbay Batyr Ave., unit 161, Nura district, Astana 010000, Republic of Kazakhstan
Contact, including legal notices: support@modeleon.ai