Privacy Policy

1. Who we are

The controller of your personal data is Modevo AI Company (a limited liability company), Commercial Registration No. 7055105857, Registered address: Saud bin Abdulaziz bin Mohammed St, Al Maseef Dist, Riyadh 12465, email amro@modevo.studio.

Modevo markets and sells the service in Saudi Arabia and runs the Modevo platform at app.modevo.studio, where accounts are created and images are generated. Where we use service providers to host or operate parts of the platform, they process personal data only on our behalf, under our instructions and under written data processing agreements.

2. The personal data we collect

We collect only what we need for the purposes in section 3:

• Contact form data: your name, brand name, work email, phone number (optional), website (optional), monthly product count and your message.
• Account data: name, email address and, if you sign in with Google or another provider, the basic profile that provider shares with us.
• Billing data: your plan, credit balance and credit history, invoices, VAT number (for businesses) and the payment reference sent by our payment provider. We never see or store your full card number or security code; card data is handled by MyFatoorah.
• Your content: the garment and product images you upload, the instructions you give, and the images and videos the service generates for you.
• Technical data: IP address, device and browser type, language, pages visited, security and error logs.
• Cookie and advertising data: only if you accept, identifiers and events collected by the analytics and advertising tags described in section 5.
• Your choices: your marketing preferences and your cookie consent record.

We do not ask for sensitive data (such as health, religious belief, genetic or biometric data, or criminal records). Please do not upload images of real, identifiable people. The service does not perform face recognition and does not create biometric templates.

3. Why we use your data and on what legal basis

• To provide the service, create and run your account and process your generations: necessary to perform our contract with you.
• To reply to your enquiry or demo request: taken at your request, before a contract.
• To bill you, issue ZATCA compliant e-invoices and keep accounting records: to meet our legal obligations under Saudi tax and commercial laws.
• To keep the platform secure and prevent fraud, abuse and breaches of our Terms: our legitimate interest, which never overrides your rights and never applies to sensitive data.
• To improve the service using de-identified or aggregated data wherever possible: our legitimate interest.
• To measure visits, measure ad campaigns and show you Modevo ads on Google, Meta (Facebook and Instagram), Snapchat and TikTok: your consent, given through the cookie banner.
• To send you marketing by email, SMS or WhatsApp: your consent, which you can withdraw at any time.
• To comply with lawful requests from competent Saudi authorities and to establish or defend legal claims: legal obligation and legitimate interest.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it.

4. Cookies and similar technologies

Cookies are small files a website stores on your device. In this policy, "cookies" also covers pixels, tags, local storage and similar tools.

Strictly necessary (always on, no consent needed): a language cookie (NEXT_LOCALE) that remembers whether you chose Arabic or English, and a record of your cookie choice stored in your browser (modevo-consent-v1). We also use our hosting provider's cookieless, aggregated web analytics, which does not place cookies or identify you.

Analytics (off by default, only with your consent): Google Analytics 4. Marketing (off by default, only with your consent): Google Ads, Meta Pixel, Snap Pixel and TikTok Pixel. See section 5.

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop the language switch from remembering your choice.

5. Advertising tags and your consent

When you first visit modevo.sa, a banner offers equal choices: Accept all, Reject all, or Customize to switch the Analytics and Marketing categories on or off separately. Nothing is pre-selected. Until you choose, and for any category you reject, no tag in that category loads and nothing is sent to Google, Meta, Snap or TikTok.

Depending on what you accept, we load:

• Analytics: Google Analytics 4, through Google Consent Mode v2, to count visits and understand how the site is used.
• Marketing: Google Ads (through Google Consent Mode v2), Meta Pixel, Snap Pixel and TikTok Pixel, to measure conversions and our campaigns on Google, Facebook, Instagram, Snapchat and TikTok, and to show Modevo ads to people who visited our site.

These tags collect your IP address, device and browser details, pages viewed, actions such as clicking "Start free", and cookie identifiers. Google, Meta, Snap and TikTok also use this data for their own purposes as independent controllers, under their own privacy policies. Their servers are outside the Kingdom (see section 7).

Accounts are created on app.modevo.studio. That app may use the same tags to record a completed sign-up, and it asks for its own consent before doing so.

To change your choice at any time, use the "Cookie settings" link in the site footer, or the "Change cookie settings" button on this page, to reopen the banner and change your choices. Withdrawing consent stops the tags in that category from loading from then on.

6. Who we share data with

We do not sell or rent personal data. We share it only as needed for the purposes above, with:

• Our processors, bound by contract to act on our instructions and protect your data: our cloud and AI infrastructure providers, our website host (Vercel), our email provider (Resend) and our payment provider (MyFatoorah).
• Advertising and analytics platforms (Google, Meta, Snap, TikTok), only if you accept cookies.
• Professional advisers such as lawyers, auditors and tax advisers, under confidentiality duties.
• Competent Saudi authorities, courts and regulators, when the law requires it.
• A buyer or successor, if Modevo is merged, acquired or restructured, under equivalent protections and with notice to you.

7. Transfers outside Saudi Arabia

Because our providers operate internationally, your data may be transferred to or accessed from outside the Kingdom, including the United States, the European Union and other countries where our hosting, email, AI infrastructure and advertising providers operate.

We make these transfers only as allowed by Article 29 of the PDPL and the Regulation on Personal Data Transfer outside the Kingdom: to countries with an adequate level of protection, or with appropriate safeguards such as standard contractual clauses, after assessing the risks and limiting the data to what is needed. You can ask us for information on the safeguards used at amro@modevo.studio.

8. How long we keep data

• Contact enquiries: up to 24 months after our last exchange, unless you become a customer.
• Account data and your content: while your account is open. After you delete your account, we delete or irreversibly anonymise it within 90 days, except where the law requires us to keep it.
• Invoices, payment and accounting records: for the periods required by Saudi tax and commercial record keeping laws (currently up to 10 years).
• Cookie consent records: for as long as we need to prove your choice.
• Advertising cookies: for the lifetimes set by each provider, shown in your browser.

When a retention period ends, we destroy the data or anonymise it so it can no longer identify you. Anonymised data is not personal data.

9. Security

We use technical and organisational measures suited to the risk, including encryption in transit, access controls, logging and confidentiality commitments from staff and providers.

If a personal data breach occurs, we will notify the Saudi Data and Artificial Intelligence Authority (SDAIA) within 72 hours of becoming aware of it, as the Implementing Regulation requires, and we will inform you without undue delay where the breach may cause you harm. Keeping your password confidential is your responsibility.

10. Your rights

Under the PDPL you have the right to:

• Be informed about how and why your data is processed (this policy).
• Access your personal data and get a copy in a clear, readable format.
• Ask us to correct, complete or update your data.
• Ask us to destroy your data when we no longer need it, subject to legal retention duties.
• Withdraw your consent at any time, including for cookies and marketing.
• Object to receiving direct marketing.

To use any of these rights, email amro@modevo.studio from the address linked to your account, or write to us at our registered address. We may ask you to verify your identity. We will reply within 30 days and will tell you if we need to extend this period as the Implementing Regulation allows. Requests are free of charge.

If you are not satisfied with our answer, you may file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority under the PDPL.

11. Marketing messages

We send marketing messages only if you opted in through an unticked box or a clear request. Giving this consent is never a condition for using Modevo. Every marketing email has an unsubscribe link, and you can also opt out by writing to amro@modevo.studio.

Service messages such as account verification, security alerts, generation updates, invoices, renewal reminders and credit expiry reminders are part of the service and are sent regardless of marketing consent. They contain no promotion.

12. AI generated models and your images

The virtual models and faces in Modevo are fully generated by AI. They do not depict, and are not derived from, any real person, so they are not personal data of any individual.

Uploading images of real, identifiable people is not supported. If you include personal data in content you upload, you are responsible for having a lawful basis to do so.

Automated safety filters may reject generation requests that break the law or our Acceptable Use rules. To ask about or contest a rejection, contact amro@modevo.studio.

13. Age limit

Modevo is a business service for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to a minor, we close it and delete the related data.

14. Changes to this policy

We may update this policy when the law or our service changes. We will announce material changes on modevo.sa and, where appropriate, by email before they take effect. The date at the top shows the current version.

15. Contact

Modevo AI Company (a limited liability company) · Commercial Registration No. 7055105857 · Registered address: Saud bin Abdulaziz bin Mohammed St, Al Maseef Dist, Riyadh 12465 · Privacy requests: amro@modevo.studio · Phone: ⁦+966 50 465 8131⁩.

This policy is published in Arabic and English. If the two versions differ, the Arabic version prevails.