Privacy Policy

1. Personal data we collect

We collect the following categories of personal data depending on how you use modula:

Account data: name, email address, password (stored in hashed form), optional sign-in passcode (stored in hashed form), profile photo, phone number if you provide one, preferred timezone, and email verification status.
Workspace data: company or workspace name, membership role, permissions, invitations, and settings you configure.
CRM data you submit: lead names, contact details, notes, custom field values, file attachments, pipeline activity, and assignee information.
modula Kiosk and POS data you submit: outlet and cashier configuration, sales, refunds, voids, line items and notes, payments and cash reconciliation, inventory catalog and stock records, receipt and product images, and optional customer/member records (such as name and phone number) that your staff enter at the register.
modula Kiosk Android^™ and modula Printer Agent device data: device display name, device model, pairing or bind and device authentication tokens (stored hashed on our servers), connection and last-seen timestamps, print-job status metadata, push-notification delivery tokens where used, and diagnostic device logs you or the app send to us for support.
Authentication and security data: session identifiers, password reset tokens, email verification tokens, and OAuth authorization records for MCP access.
Usage and technical data: browser type, device information, IP address, pages visited, feature interactions, and error logs collected through our application and analytics tools.
Communications: messages you send to us by email, WhatsApp, or support channels.

2. How we collect personal data

We collect personal data when you:

Create an account, sign in (including with a passcode on modula Kiosk), or update your profile.
Create or join a workspace and use modula CRM, modula Ledger, or other workspace features.
Use modula Kiosk (including modula Kiosk Web, modula Kiosk Progressive Web App, or modula Kiosk Android^™) to run a register, manage sales or inventory, configure outlets, or upload images.
Install, bind, operate, or unbind modula Kiosk Android^™ for an outlet’s automatic printing.
Pair, operate, or unpair modula Printer Agent for an outlet.
Upload files, assign leads, or change workspace settings.
Authorize an MCP client or other integration to access workspace data.
Contact us for sales, support, or demo requests.
Browse our marketing site or product apps, where cookies and similar technologies may be used as described below.

3. How we use personal data

We use personal data to:

Provide, operate, maintain, and secure the modula service, including modula Kiosk and modula Printer Agent.
Authenticate users and devices, manage sessions, and enforce workspace and outlet permissions.
Process point-of-sale transactions, receipts, inventory, and related business records for your organization.
Deliver print jobs to bound modula Kiosk Android^™ devices or paired modula Printer Agent devices and help diagnose printing or connectivity issues.
Send transactional emails such as verification, password reset, and workspace invitations.
Process subscription-related requests and communicate about plans or billing inquiries.
Monitor usage, diagnose technical issues, improve product performance, and prevent abuse.
Comply with legal obligations and respond to lawful requests.
Communicate with you about product updates or support, where permitted.

4. modula Kiosk

modula Kiosk is our tablet-oriented point-of-sale product. It is available on three platforms: modula Kiosk Web and modula Kiosk Progressive Web App at https://kiosk.modula.works, and modula Kiosk Android^™. Staff sign in with a modula account (password or passcode). Session cookies may be shared with the main modula app domain so you stay signed in across modula Kiosk hosts.

modula Kiosk processes business and customer data that your organization enters to operate the register, sales history, inventory, and related settings. Optional member records (for example name and phone) are stored for your workspace so staff can look up returning customers. Images you upload (such as avatars, item photos, or receipt assets) may be stored with our cloud storage providers.

modula Kiosk Web and modula Kiosk Progressive Web App may store local preferences on the device (such as UI zoom). Camera or photo-library access, if offered by your browser or operating system when you choose an image file, is used only for that upload.

modula Kiosk Android^™ loads modula Kiosk Web in a WebView and may open modula Workspace links in your device’s system browser (for example Chrome). You can optionally bind the device to one outlet for automatic printing. When you bind a device, we collect a device name and model you or the device provide, and we issue a device authentication token. The token is stored securely on the device and only as a hash on our servers. Unbinding revokes the token.

When printing features are used in modula Kiosk Android^™ (manual print or automatic printing after bind), the app may receive print jobs, keep a foreground notification and network connection so jobs can be delivered when the screen is locked or the app is in the background, and may use push notifications to wake the app for printing. Print jobs may include receipt or session-report content generated from your outlet’s sales data. Diagnostic logs may be sent to our servers to troubleshoot printing failures; we design logging to avoid unnecessary customer personal data where practical.

To discover and connect to Bluetooth printers, modula Kiosk Android^™ may request Bluetooth permissions and, on some Android versions, approximate or precise location permission. We use location permission only as required by the operating system for nearby Bluetooth device discovery—not to track your location for advertising or analytics, and not to build a movement history. Network (LAN/USB) printer connections do not require location access.

Local printer labels, addresses, and lane bindings may be stored on the device. Lane definitions for the outlet sync to modula so other bound or paired agents and modula Kiosk can show shared printing setup. modula Kiosk Web and modula Kiosk Progressive Web App do not require Bluetooth or continuous background location access.

5. modula Printer Agent

modula Printer Agent is an Android companion app to modula Kiosk. It pairs to one modula Kiosk outlet, receives print jobs, and sends them to local thermal printers (for example over the network or Bluetooth). The same printing capability may also run inside modula Kiosk Android^™ when that device is bound to an outlet.

When you pair a device, we collect a device name and model you or the device provide, and we issue a device authentication token. The token is stored securely on the device and only as a hash on our servers. Unpairing revokes the token. While the app is running, it may keep a foreground notification and network connection so print jobs can be delivered when the screen is locked or the app is in the background.

Print jobs may include receipt or session-report content generated from your outlet’s sales data so modula Printer Agent can print that content. Diagnostic logs from the agent may be sent to our servers to troubleshoot printing failures; we design logging to avoid unnecessary customer personal data where practical.

To discover and connect to Bluetooth printers, modula Printer Agent may request Bluetooth permissions and, on some Android versions, approximate or precise location permission. We use location permission only as required by the operating system for nearby Bluetooth device discovery—not to track your location for advertising or analytics, and not to build a movement history.

Local printer labels, addresses, and lane bindings may be stored on the device. Lane definitions for the outlet sync to modula so other paired agents and modula Kiosk can show shared printing setup.

6. Legal bases for processing

Where applicable, we rely on one or more of the following legal bases: performance of a contract with you or your organization; your consent; our legitimate interests in operating and improving a secure SaaS product; and compliance with legal obligations.

We do not sell your personal data. We share personal data only as needed to run modula, including with the service providers and parties listed below.

When you connect ChatGPT, Claude, Codex, or another MCP-compatible client, that third party may process CRM data according to its own terms and privacy policy. You control whether and when that connection is made.

Infrastructure providers that host our application, database, object storage, backups, and operational logs.
Email delivery providers used to send transactional messages from addresses such as [email protected].
Analytics providers that help us understand website and product usage.
Workspace members and authorized users within your organization according to the permissions you or your workspace owner configure.
AI tools or MCP clients that you explicitly authorize to access CRM data in your workspace.
Professional advisers, auditors, or authorities when required by law or to protect rights, safety, and security.

8. International data transfers

modula is operated from Indonesia, but some service providers may process data in other countries. Where personal data is transferred across borders, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law.

9. Data retention

We retain personal data for as long as your account or workspace is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations. When data is no longer required, we delete or anonymize it within a reasonable period, subject to backup and archival cycles.

You may delete certain CRM records within the product. Soft-deleted leads may remain recoverable for a period before permanent removal, as described in the product. POS and inventory records remain available to authorized workspace users according to product features until you delete them or close the workspace. Revoked modula Kiosk Android^™ or modula Printer Agent device tokens stop authenticating immediately; related device metadata and operational logs may be retained for a limited period for security and support.

10. Security

We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encrypted transport (HTTPS), hashed passwords and passcodes, hashed modula Kiosk Android^™ and modula Printer Agent device tokens, secure on-device token storage in modula Kiosk Android^™ and modula Printer Agent, and permission-scoped workspace access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on applicable law, you may have the right to request access, correction, deletion, restriction, or portability of your personal data, and to withdraw consent where processing is consent-based. You may also object to certain processing or lodge a complaint with a supervisory authority.

To request deletion of your modula account and associated personal data (including accounts used with modula Kiosk), follow the steps on https://modula.works/account-deletion.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding.

12. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, protect sessions, and understand how our websites and product are used.

You can control cookies through your browser settings. Disabling essential cookies may affect sign-in and core functionality. modula Kiosk may also store non-essential UI preferences in local storage on the device (including inside modula Kiosk Android^™).

Essential cookies: required for authentication, security, and core site functionality across the modula app and modula Kiosk hosts.
Analytics cookies: used to measure traffic and usage patterns. Our marketing site and product apps may use Google Analytics.

13. Children’s privacy

modula is a business service not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of modula after changes become effective means you accept the updated policy.

15. Contact us

If you have questions about this Privacy Policy or our data practices, contact:

PT Meja Bersama Modula

Email: [email protected]

General inquiries: [email protected]

Country: Indonesia