1. Scope
This Policy explains how personal information may be handled when people visit Moduck websites, create accounts, use APIs, submit model requests, pay for services, or contact support.
Some API requests may be forwarded to independent model or infrastructure providers.
2. Responsible Organization and Data Protection Roles
The organization responsible for the processing described here is Sea AI Lab. Its office address and contact email are listed under “Contact”.
Our role may differ by activity. We may determine purposes for account management, billing, security, and customer communications. Our role regarding personal data embedded in enterprise API requests depends on customer instructions, contracts, and actual technical arrangements. Applicable arrangements are set out in the contract and any data processing agreement.
3. Categories of Information
| Category | Examples | Typical purpose |
|---|---|---|
| Account data | Email, account identifier, verification details | Registration and access |
| Billing data | Orders, transaction history, invoices, tax records | Payments and support |
| API metadata | Timestamp, model, status, request ID, token usage, costs, IP | Metering and security |
| API content | Prompts, files, images, audio, video, generated outputs | Model execution |
| Website/device data | Browser details, IP, cookies and other identifiers | Security and site operation |
| Communications | Support tickets, sales enquiries and emails | Support and account management |
Not every category is collected in every interaction. Whether information is required or optional depends on the feature and applicable law.
4. Purposes and Legal Bases
Depending on the circumstances, information may be needed to provide contracted services, authenticate users, process charges, prevent abuse, troubleshoot incidents, respond to requests, and meet legal obligations. Optional analytics, marketing, or uses beyond what is necessary to provide a service require a separately assessed legal basis and choice mechanism.
5. Model Requests, Upstream Providers, and Training
To fulfil a selected model request, Moduck may transmit inputs, attachments, and necessary metadata to an upstream provider, which may use its own or third-party infrastructure.
6. Recipients and Subprocessors
Vendors may provide hosting, authentication, billing, customer support, messaging, monitoring, and AI inference. Their role as independent controller, joint controller, or processor depends on the specific service and arrangement.
7. Retention and Deletion
Different categories of information may have different retention periods. Account deletion and privacy requests will be handled under applicable law and policy. Certain financial, security, and dispute records may be retained where required or permitted by law.
8. Security
We will protect information using technical and organizational measures, such as confirmed transmission encryption, access controls, logging, credential protection, and incident response procedures.
9. International Transfers
Information may be processed in countries other than the user's country, according to the processing locations of Moduck and its partners.
10. Cookies and Marketing
The website may require certain session, preference, and security technologies.
Analytics is enabled by default without requiring you to click “Allow analytics”. We use Google Analytics to measure public page visits, visits to login and registration entry pages, button clicks, completed account registrations, and campaign sources across moduck.ai and docs.moduck.ai. We retain only standard UTM campaign fields, remove other query parameters and URL fragments, and do not send account details, form contents, API keys, or model requests to Analytics. Private console pages are excluded from page-view tracking; a registration event records only the registration method after an account is successfully created. Advertising features and enhanced measurement are disabled. We also separately measure the two Overview top-up entries, preset amount choices, order creation, top-up confirmation and paid-statement submission, including clicks, necessary arrivals or first-recorded results and failure categories. These events include the entry, preset amount tier, selected network, language and campaign source. Private Billing pages do not generate ordinary page-view events. We do not send order numbers, wallet addresses, QR contents or arbitrary entered amounts. A paid statement does not establish actual payment, verified receipt of funds or revenue.
You can turn analytics off or back on using “Analytics preferences” on this Privacy Policy page without affecting website access. Previously saved rejection choices remain in effect. Turning analytics off stops further measurement and removes the Analytics cookies set by this integration. Your choice is shared between the main site and documentation using a preference cookie. While analytics is enabled, standard campaign fields and the referring site’s origin (without its path or query) are stored in cookies for 30 minutes to preserve attribution between pages, subdomains and sign-in returns. Google processes analytics information as described in How Google uses information from sites or apps that use its services.
11. Privacy Rights
Depending on applicable law, individuals may have rights to access, rectify, erase, restrict or object to processing, request portability, withdraw consent, and complain to a supervisory authority. Email contact@moduck.ai to make a request. Reasonable identity verification may apply. Response deadlines and exceptions are governed by applicable law.
12. Changes
Material changes will be communicated as required by applicable law and the published notice process.
13. Contact
Operator: Sea AI Lab
Office address: 1 Fusionopolis Place, #17-10, Galaxis, Singapore 138522
Privacy requests: contact@moduck.ai