Privacy Policy

Modtly LLC ("Modtly," "we," "us"), located at 1032 E Brandon Blvd #7187, Brandon, FL 33511, United States, is the data controller for the personal data described in this Policy. Contact: info@modtly.com.

This Policy covers three distinct groups, because Modtly processes data in layers:

• Web Owners: merchants who subscribe to Bundly, Refilly, Traderly, or Modtly Studio and connect their Square account.
• End buyers: a Web Owner's own customers who purchase or subscribe through a Modtly module (for example, a Refilly subscriber or a buyer company in Traderly).
• Site visitors: anyone who visits modtly.com without necessarily registering.

• Web Owner account data: business name, billing email, and the data Square shares with us via OAuth (merchant identifier, product catalog, Square account information needed to operate the Services).
• Payment data: processed directly by Stripe; Modtly does not store full card numbers.
• End buyer data: name, email, shipping address, order history, and, depending on the module, subscription or trade-credit data (in Traderly).
• Usage and analytics data: Modtly uses its own Google Analytics to measure platform usage. In addition, each Web Owner may add their own Google Analytics and/or Meta Pixel to their storefront; that additional tracking is configured and controlled by the Web Owner, not Modtly, and is governed by that Web Owner's own privacy policy toward their visitors.
• Cookies: used to maintain the session, basic site preferences, and the analytics tools mentioned above.

• Provide and operate the contracted Services (sync catalog, process orders, manage subscriptions).
• Process payments and billing through Stripe.
• Communicate with Web Owners about their account (support, billing notices, service changes).
• Power each module's prediction and recommendation features (for example, the order predictor and credit recommendation in Traderly) using each account's own history.
• Improve the Services through aggregate usage analytics.
• Comply with legal obligations and respond to valid requests from authorities.

For users covered by the GDPR or UK GDPR, we process personal data under the following legal bases: performance of a contract (operating the account and contracted Services), legitimate interest (security, fraud prevention, product improvement), compliance with legal obligations, and consent where applicable (for example, certain non-essential cookies).

We share data with the providers strictly necessary to operate the Services, including: Square (catalog sync, payments, merchant account), Stripe (payment processing and billing for Web Owners), our hosting provider (DigitalOcean), and Google (Google Analytics). We do not sell personal data to third parties for advertising purposes.

Modtly LLC is incorporated in the United States and operates its Services from there. If you are located in the European Union or the United Kingdom, your personal data is transferred to the United States for processing; where required by the GDPR or UK GDPR, we implement appropriate safeguards (such as Standard Contractual Clauses) with our providers.

We retain account data for as long as the Web Owner keeps the Service active, plus any additional period needed to comply with legal, accounting, or tax obligations, or to resolve disputes. End buyer data is retained for as long as an active relationship exists with the corresponding Web Owner through the contracted module.

If you are located in the European Union or the United Kingdom (GDPR / UK GDPR): you have the right to access, rectify, erase, and restrict the processing of your data, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time where processing is based on it. You also have the right to lodge a complaint with your local data protection authority.

If you are located in California (CCPA/CPRA): you have the right to know what personal data we collect about you, to request its deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. Modtly does not sell or share personal data for advertising purposes as defined by the CCPA.

To exercise any of these rights, write to info@modtly.com.

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or alteration. No system is completely secure, so we cannot guarantee absolute security.

The Services are not directed at children and we do not knowingly collect personal data from children.

We may update this Policy from time to time. Material changes will be notified through the website or by email to Web Owners.

For privacy inquiries, write to info@modtly.com.