Last updated: 30 September 2026

Introduction

This Privacy Policy describes how Modeeri collects, uses, processes, stores and protects personal data when clients and their Authorised Users access or use the Modeeri platform, mobile applications, website and related services (the “Platform”). It forms part of, and should be read together with, the Modeeri Terms & Conditions. By using the Platform or providing personal data, you acknowledge the practices described in this Policy.

Who We Are

“Modeeri”, “Provider”, “we” or “us” means the Modeeri entity that provides the Platform to the client under the Terms & Conditions:

• Modeeri LLC, an Egyptian limited liability company (Commercial Register No. 279742), 9 El Aslaki Division, Ahmed Abdel Azim Street, El Maadi, Cairo, Egypt, for clients with a billing address in Egypt; or
• CookDocs LLC d/b/a Modeeri, a Delaware limited liability company, United States of America, for all other clients and for visitors to our website.

Definitions

• Personal Data: any information relating to an identified or identifiable natural person, including information that alone or combined with other information can identify or contact a specific individual (for example, name, phone number, email, IP address, location data or online identifiers).
• Data Controller & Data Processor: a data controller decides why and how personal data is processed; a data processor processes personal data on behalf of a controller. An organisation may act as controller, processor or both, depending on the activity.
• Subprocessor: a third party engaged by a data processor to process personal data on behalf of the controller.
• Data Protection Laws: all laws that apply to the processing of personal data, including Egypt’s Personal Data Protection Law No. 151 of 2020 and its executive regulations (the “PDPL”), the EU General Data Protection Regulation (“GDPR”) where it applies, and other applicable privacy and data breach laws.

Our Role

• Client Data — client as controller, Modeeri as processor. For personal data that clients and their Authorised Users enter into or generate through the Platform (such as employee names, roles, checklist submissions, photos and audit records), the client is the data controller and Modeeri processes that data on the client’s behalf and according to its instructions, the Terms & Conditions and this Policy.
• Account, billing and website data — Modeeri as controller. For personal data we collect for our own purposes, such as sign-up and account owner details, billing records, support communications, product usage analytics, marketing communications and website visits, Modeeri is the data controller.

Data We Collect

• Account information: name, work email, phone number, company name, role and country provided at sign-up or by an account administrator.
• Billing information: billing contact, billing address, plan details and payment history. Card payments are processed by our payment processors (Paymob for payments in EGP and Stripe for payments in USD). We do not collect or store full card numbers; we receive only limited details such as card type, the last four digits and expiry date.
• Usage data: log data, device and connection information, and information about how Authorised Users interact with the Platform.
• Client Data: any personal data contained in content uploaded to or generated within the Platform.
• Support data: information provided to our support team to resolve requests.
• Website and marketing data: information submitted through our website forms, and cookies and similar technologies used on our website.

How We Use Personal Data

• To provide, operate, maintain and secure the Platform and Services;
• To create and manage accounts, free trials and subscriptions;
• To process payments, issue invoices and manage billing;
• To provide onboarding, support and training;
• To send service, account, trial and billing notices;
• To send product updates and marketing to business contacts, with an option to unsubscribe at any time;
• To monitor performance and improve the Platform, including through aggregated and anonymised statistics that do not identify any client or individual;
• To prevent fraud and misuse, and to comply with legal obligations and enforce our Terms & Conditions.

Legal Basis

• Performance of a contract: processing needed to provide the Platform and Services under the Terms & Conditions.
• Legitimate interests: improving our services, maintaining security, preventing fraud and communicating with business contacts, where these interests are not overridden by individuals’ rights.
• Legal obligations: processing needed to comply with applicable laws, including tax and accounting laws.
• Consent: where we rely on consent, we obtain it explicitly, and it may be withdrawn at any time.

For Client Data, the client as controller is responsible for having a valid legal basis and for giving any required notices to its employees and other individuals.

Data Subject Rights

Under the PDPL, the GDPR and other Data Protection Laws, individuals may have rights to access, correct, delete, restrict or object to the processing of their personal data, and to data portability. For Client Data, requests should be directed to the client as controller; we will assist clients in responding. For data we control, contact us at info@modeeri.com.

Subprocessors & Third Parties

We use qualified subprocessors to help us provide the Platform, including cloud hosting and infrastructure providers, email and notification services, customer support tools, and payment processors (Paymob and Stripe). Subprocessors are bound by data protection obligations no less protective than those in this Policy, and we remain responsible for their performance. Where required by law, we will notify clients before adding or replacing a subprocessor that processes Client Data, and clients may object on reasonable data protection grounds.

The Platform may link to or interoperate with third-party services. Their use is governed by their own terms and privacy policies, and we are not responsible for them.

We do not sell personal data, and we do not use Client Data for marketing.

Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss or destruction. These include encryption in transit and at rest, role-based access controls, logical separation of each client’s data, access restrictions for our staff, encrypted backups and documented disaster recovery procedures. More detail is available in our Service Level Agreement.

Data Retention & Deletion

• Active accounts: we keep personal data for as long as the account is active and as needed to provide the Platform.
• Expired free trials: if a client does not subscribe, trial account data is kept for ninety (90) days after the trial ends so the client can resume, and is then permanently deleted.
• Ended subscriptions: clients may export their data or request its return or deletion for thirty (30) days after a paid subscription ends. Client Data is permanently deleted or irreversibly anonymised within ninety (90) days after the subscription ends.
• Backups: copies in backups are overwritten in our routine backup cycles.
• Legal and billing records: we keep billing, tax and contract records, and data needed to resolve disputes or enforce our agreements, for as long as the law requires or that need lasts.
• Anonymised data: aggregated and anonymised data that does not identify any client or individual may be kept indefinitely.

International Transfers

Our team, hosting providers and other subprocessors may be located in countries other than the one where personal data is collected. We transfer personal data across borders only in compliance with applicable Data Protection Laws, including the PDPL, and subject to appropriate safeguards such as contractual protections.

Data Breach Notification

If we become aware of a personal data breach affecting Client Data, we will notify the affected client without undue delay. The notice will describe, to the extent known, the nature of the breach, the categories and approximate number of individuals and records affected, the likely consequences and the measures taken or proposed. We will also notify regulators where the law requires.

Data Ownership & Portability

Clients own their Client Data. Clients can export Client Data from the Platform in commonly used formats. Non-standard export or data handling requests may carry reasonable fees.

Changes to This Policy

We may update this Policy by posting a new version on our website with a new “Last updated” date. We will notify account owners of material changes by email or in the Platform.

Contact

For privacy questions or data subject requests, contact the Modeeri team at info@modeeri.com.