Modeloptic LLC, a Delaware limited liability company (“Modeloptic”, “we”, “us”), operates the modeloptic.com website (the “Site”) and the Modeloptic financial modeling platform (the “Service”). This Privacy Policy explains what information we collect when you visit the Site or use the Service, how we use and share it, and the choices you have. It applies to Site visitors, people who sign up for the Service, and users of the Service.

Business customers and the data they submit. Financial statements, documents, models, prompts, and other content that a customer submits to the Service (“Customer Content”) are processed on that customer's behalf under our Services Agreement. The customer controls that content. If your personal information appears in a customer's Customer Content, contact that customer to exercise your rights; we will assist them as their service provider.

• Account information. Name, email address, and password (stored only as a hash) when you create an account, and any company, role, or other details you provide at signup or in your account settings.
• Customer Content. The files, financial data, documents, and instructions you submit to the Service, and the models, projections, and exports the Service generates for you.
• Billing information. Payments are handled by a third-party payment processor. We do not receive or store full payment card numbers. We keep billing records such as your plan, subscription status, invoice references, and billing contact details.
• Usage and device information. Log data such as IP address, browser type, pages viewed, actions taken in the Service (including logins and changes to your models), timestamps, and error reports.
• Connected app information. If you connect a third-party AI application to your account, records of that connection and of the requests it makes on your behalf. See “Connected AI Applications” below.
• Communications. Messages you send us, including support requests, survey responses, and feedback.
• Cookies and similar technologies. We use cookies to keep you signed in, to protect against request forgery, and to understand how the Site and Service are used. See “Cookies and Analytics” below.

• To provide, operate, secure, and support the Service, including processing Customer Content to build and analyze financial models at your direction.
• To operate the Service's AI features. See “AI Features” below.
• To manage accounts, subscriptions, and billing, and to send transactional messages such as receipts, renewal and payment notices, security alerts, and changes to our terms. You cannot opt out of these while you have an account.
• To respond to your requests and provide customer support.
• To improve the Service, including analyzing usage, diagnosing errors, and evaluating and improving product features.
• To send product updates and marketing communications, from which you can opt out at any time using the link in the message or by contacting us.
• To detect, prevent, and investigate fraud, abuse, and security incidents, and to enforce our agreements.
• To comply with legal obligations and protect our rights.

The Service uses artificial intelligence models to build, edit, and explain financial models. You should expect that AI features may use models from third-party commercial AI providers, models operated by us, or a combination of them. We select and may change models and providers without identifying individual providers or obtaining separate approval for each selection or change. When you use AI features, the relevant Customer Content and your instructions are processed by those models, which may include transmitting them to third-party providers, solely to provide the Service to you and subject to the confidentiality and data-use restrictions in your applicable agreement with us.

We do not use Customer Content to train AI models, and we engage third-party AI providers only under terms that prohibit them from using Customer Content to train their models.

We also use only third-party AI providers whose data-retention policies provide for deleting the prompts and responses they process for us within 30 days, except where a provider retains data longer to investigate abuse, prevent harm, or comply with law. We delete files we send to these providers from their storage within 30 days of upload.

You can connect a third-party AI application that supports the Model Context Protocol (a “Connected App”) to your account through the Modeloptic connector. A Connected App receives access only after you sign in to Modeloptic and approve it. It then acts on your behalf within your existing permissions: it can read your account details and the Customer Content you can access, send instructions to the Service's AI features, and apply changes to models you can edit.

• Information a Connected App receives. When a Connected App makes a request, we send it the information needed to answer that request. This can include your name, email address, firm, plan, and usage, and Customer Content such as model names, financial statement values, transaction and valuation results, proposed changes, and the replies of the Service's AI features. The provider of the Connected App then holds and processes that information under your agreement with that provider, not under this Privacy Policy or our agreements with our own AI providers. The commitments under “AI Features” about model training and provider retention do not apply to a Connected App's handling of it. Review the Connected App's privacy and data-use settings before you connect it.
• Information we keep about connections. For each connection we record the app's name and registration details, including the IP address that registered it, the account it is connected to, the address it returns to after sign-in, and when it was connected, last used, and disconnected. We store sign-in codes and tokens only as hashes. We log each action a Connected App requests on your behalf, with the action, the app's name, the outcome, and its duration, and we log when you connect an app and when you disconnect one. Instructions a Connected App sends to the Service's AI features, and files you add through an upload link the connector provides, are Customer Content and are handled like instructions and files you submit in the Service.
• Retention. We keep connection records and completed app registrations for as long as needed for security, troubleshooting, and legal purposes; connection records are deleted when your account is deleted. Expired and revoked tokens, unused sign-in codes, and app registrations that never complete a sign-in are deleted in routine daily cleanup, as are files added through an upload link that were never attached to a request, after the link expires. Logs are retained as described under “Data Retention.”
• Your controls. You can see each Connected App and when it was last used under User Account, Connected Apps, and disconnect it at any time; disconnecting ends its access immediately. A connection stays active until you disconnect it, change or reset your password, or your account is closed.

We do not sell personal information. We share information only as follows:

• Service providers. Companies that provide services on our behalf, in these categories: cloud hosting, storage, and database infrastructure; AI model providers; payment processing; email delivery; analytics; and customer support tools. Each receives only the information needed for its function and is bound by confidentiality and data-protection obligations.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, information may be transferred as part of the transaction, subject to this Privacy Policy.
• Legal requirements. When we believe disclosure is required by law, subpoena, or legal process, or is necessary to protect the rights, property, or safety of Modeloptic, our customers, or others.
• With your direction or consent. For example, when you share a model or export with someone, connect a third-party AI application to your account (see “Connected AI Applications”), or ask us to share information with a third party.
• Aggregated or de-identified data. We may share statistics that do not identify you or any customer.

We use a session cookie to keep you signed in and a security token to protect forms. On the Site we use analytics and advertising measurement tools that set cookies to understand how visitors find and use the Site and to measure the effectiveness of our marketing. Some of those tools are operated by third parties and may be considered “sharing” for advertising purposes under certain state laws. You can limit or block cookies through your browser settings. Blocking the session cookie will prevent you from staying signed in to the Service.

We keep account information for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce our agreements, and meet legal and accounting obligations. Customer Content is retained while your account is active and, after termination, for the export period described in the Services Agreement, after which it may be deleted. Usage logs and security records are retained for as long as needed for security, troubleshooting, and legal purposes. Copies in routine backups are removed in the ordinary backup cycle. Retention by third-party AI providers is described under AI Features, and retention of connection records under Connected AI Applications.

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and loss, including encryption of data in transit, server-side access controls for every workspace, hashed password storage, and logging of authentication events and key actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your credentials confidential and tell us promptly if you suspect unauthorized access to your account.

• Access, correction, and deletion. You can update your name and password in your account settings. To access, correct, or delete other personal information, or to close your account, contact us at the address below. We will respond within the time required by applicable law and may need to verify your identity first.
• Marketing opt-out. Use the unsubscribe link in any marketing email or contact us. Transactional messages about your account continue while you have an account.
• Connected apps. Disconnect a Connected App at any time under User Account, Connected Apps, as described under “Connected AI Applications.”
• Cookies. Control cookies through your browser settings, as described above.
• State privacy rights. Depending on where you live, you may have rights to know what personal information we hold, to request its deletion or correction, to receive a copy, and to opt out of certain sharing. We do not discriminate against you for exercising these rights. To exercise them, contact us at the address below; an authorized agent may submit a request on your behalf with proof of authorization.

Modeloptic is based in the United States and processes information there and in other countries where our service providers operate. If you use the Site or Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

The Site and Service are intended for business use by adults. We do not knowingly collect personal information from anyone under eighteen (18). If you believe a minor has provided us personal information, contact us and we will delete it.

The Site and Service may link to websites and services we do not operate. This Privacy Policy does not apply to them, and a link does not mean we endorse or have reviewed them. Review their privacy policies directly.

We may update this Privacy Policy from time to time. The date at the top shows when it was last revised. If we make material changes, we will notify account holders by email or in the Service before the changes take effect. Your continued use of the Site or Service after the effective date is acceptance of the revised policy.

Questions, requests, and complaints about this Privacy Policy or our handling of your information: contact@modeloptic.com.