Legal
Privacy Policy.
What Mode collects about you, why, and your choices.
Last updated
1. What this policy covers
This policy covers the data Mode collects for itself. Data our customers collect with Mode is theirs to answer for.
Mode AI LLC, a Washington State limited liability company ("Mode", "we") runs gotmode.tech and app.gotmode.tech. This policy explains what personal data we collect about people who visit our site, join our waitlist or newsletter, contact us, or hold a Mode account, and what we do with it. For that data Mode decides how it is used.
Mode's customers also use Mode to handle data about their own visitors, contacts and email recipients. For that data the customer decides how it is used and Mode only processes it on the customer's instructions, under the Data Processing Addendum. If a business that uses Mode holds data about you, contact that business. If you write to us instead, we pass your request to them.
2. What we collect
Your email, how you signed in, your billing details and how you use the app. We never hold a full card number.
| What | Details | Where it comes from |
|---|---|---|
| Account | Email address, name, organization name and your role in it | You |
| Sign-in and security records | Each sign-in link request, sign-in and sign-out, with the time, IP address, browser user agent and the city, region and country worked out from the IP address on our own servers | Your browser |
| How you found us | Landing page, referring site, campaign tags and ad click identifiers in the link you followed, and a referral code if any | Your browser |
| Billing profile | Billing name and address, cardholder name, phone number, invoice email, the version of the Terms you accepted and when | You, through Stripe Checkout |
| Card details | Brand, last four digits, expiry, card type, issuing country, the results of the security code and address checks, a card fingerprint and a fraud risk level. Never the card number or security code | Stripe |
| Your content | Instructions you give agents, files and data you add, data from accounts you connect, and what agents produce for you | You and the accounts you connect |
| App activity | Pages and features you use, clicks, errors, and recordings of your sessions in the app with all text masked, linked to your user ID | Your browser |
| Site activity | Pages viewed on gotmode.tech, referrer, device and browser details and approximate location | Your browser |
| Waitlist | Email address, where you signed up, IP address and approximate location. Joining creates an account | You |
| Newsletter | Email address and whether you confirmed | You |
| Messages to us | Name, email address, subject and message from the contact form or email | You |
We do not ask for sensitive personal data such as health information or government ID numbers, and we ask you not to put it into the Service.
Account and billing details are required to provide the Service. Without them we cannot open an account or let agents run.
3. How we use it and why we are allowed to
To run your account, bill you, keep Mode secure and learn what to improve.
| Purpose | Data used | Legal basis under EU and UK law |
|---|---|---|
| Provide the Service, sign you in and run your agents | Account, your content | Performing our contract with you |
| Bill you, send invoices and keep tax records | Billing profile, card details | Contract and legal obligation |
| Keep proof of the Terms you accepted | Terms version and time | Legitimate interest in proving the agreement |
| Prevent abuse and fraud at sign-up and payment | Sign-in records, card fingerprint, check results and risk level | Legitimate interest in protecting Mode and its customers |
| Secure accounts and investigate incidents | Sign-in and security records | Legitimate interest in security |
| Understand how the site and app are used and fix problems | App activity, site activity | Legitimate interest in improving the Service, or consent where the law requires it |
| Learn which channels bring people to Mode | How you found us | Legitimate interest in measuring our marketing |
| Send service emails about your account, bills and limits | Account | Contract |
| Send the newsletter | Newsletter email | Your consent, which you can withdraw with the unsubscribe link in every issue |
| Answer your messages | Messages to us | Legitimate interest in responding |
Automated checks. When someone signs up or adds a card, automated checks look for signs of abuse, such as one card used across many accounts. A check can hold an account for review by a person at Mode or block a sign-up. If this happens to you and you think it is wrong, write to us and a person will look at it.
4. AI models
Agents run on AI models from outside providers, so your instructions and the content an agent works on are sent to them.
When an agent runs, the instructions and content it needs for the task are sent to the model provider that runs it. Web searches an agent makes are sent to a search provider. If you add your own model provider key or tool server, the content goes to the provider you chose under your agreement with them. The providers Mode uses are named on the Subprocessors page.
Mode does not train AI models on your content or on any customer data. The AI providers that run your agents handle the content sent to them under their own published terms, which are summarized and linked on the Subprocessors page. The search provider, Brave, keeps a record of search queries for up to 90 days for billing and troubleshooting, with no identifier that links a query to a person. Z.ai processes data mainly in Singapore. Typesafe and Brave are in the United States.
5. Who receives it
Service providers that help us run Mode, and the services you tell Mode to work with. We do not sell personal data.
- Service providers. Companies that host, send email, process payments, run AI models and report errors for us. Each one, and what it receives, is listed on the Subprocessors page.
- Services you connect. When you connect an account or tell an agent to act somewhere, data goes to that service as you direct.
- Your organization. Owners and admins of your Mode organization can see its members, activity and billing details.
- Legal reasons. We disclose data when the law requires it, or when needed to protect the rights, safety or property of Mode, our customers or others.
- Business transfers. If Mode is involved in a merger, acquisition or sale of assets, data may transfer as part of it. We will tell you before your data becomes subject to a different privacy policy.
We do not sell personal data. We do not share personal data about our visitors or account holders with advertising platforms, and we do not share it for cross-context behavioral advertising.
6. Cookies
A sign-in cookie, a theme cookie and our own analytics. No ad network cookies.
The cookies and similar storage we use, and how to turn off analytics, are listed in the Cookie Notice.
7. How long we keep it
As long as your account is open, then as long as the law makes us.
| Data | Kept for |
|---|---|
| Account and your content | While your account is open. Deleted on request as described below |
| Sign-in and security records | While your account is open, then deleted with it |
| Card details, phone number and invoice email | Until you remove the card, or your billing profile is erased |
| Billing name and address and the Terms you accepted | Up to 10 years after your billing profile is erased, because tax and accounting laws require financial records to be kept |
| Agent run logs | 30 days |
| Newsletter email | Until you unsubscribe |
| Messages to us | As long as needed to answer you and keep a record of the conversation |
| Backups | Up to 14 days |
Stripe keeps its own payment records under its own policy.
8. Your choices and rights
Ask us for a copy, a correction or deletion. We answer anyone, wherever you live.
You can ask us to do any of the following, whatever country or state you live in.
- Tell you what personal data we hold about you and give you a copy.
- Correct data that is wrong.
- Delete your data. We delete account data within 30 days of a verified request, apart from the records the law requires us to keep.
- Stop or limit a use of your data that you object to, including analytics.
- Withdraw a consent you gave, such as the newsletter.
Send requests to [email protected] from the email address on your account, so we can verify it is you. An authorized agent can make a request for you with your written permission. We answer within 30 days. If we decline a request we tell you why, and you can reply to ask us to reconsider. We never treat you differently for using these rights.
If you live in the EU, EEA, UK or Switzerland
You also have the right to object to processing based on our legitimate interests, to data portability, and to complain to your local data protection authority. Mode is the controller of the data this policy covers. For any privacy question or request, write to [email protected].
If you live in California
In the last 12 months we collected the categories in the table above, which California law calls identifiers, commercial information, internet or network activity, approximate geolocation and customer records. We collected them from the sources and for the purposes shown above, and disclosed them only to the service providers on the Subprocessors page. We did not sell personal information. California residents have the rights to know, delete, correct and to not be discriminated against, and can use them as described above.
9. Where your data is processed
Mode is hosted in the United States.
Mode's servers are in the United States, in the Amazon Web Services Oregon region. Our service providers process data in the United States and in the other countries shown on the Subprocessors page. If you use Mode from another country, your data is transferred to and processed in those countries, whose laws may protect it differently from yours.
If you are in the EU, the EEA, the UK or Switzerland, your data is collected directly by Mode in the United States, a country that has not been found to give personal data the same general level of protection as yours. Mode is not certified under the EU-US Data Privacy Framework. Where Mode receives personal data from a customer as its processor, the standard contractual clauses in the Data Processing Addendum apply to that transfer. You can ask us for more detail about how your data is protected when it is passed on to a service provider.
10. How we protect it
Encrypted in transit, sealed secrets, and every account walled off from every other.
Connections to Mode are encrypted with TLS. Sign-in uses a link sent to your email, so there is no password to steal. Access tokens and secrets for the accounts you connect are sealed with AES-256 encryption and are never stored in readable form. Every organization's data is separated from every other, and that separation is tested. Access to a customer account by Mode staff is limited to Mode administrators and is recorded. More detail is on the Security page.
No system is perfectly secure. If we learn of a breach that affects your personal data, we will tell you as the law requires.
11. Children
Mode is for businesses and is not meant for children.
Mode is not directed to children, and you must be at least 18, or the age of majority where you live if that is higher, to use it. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, write to us and we will delete it.
12. Changes to this policy
The date at the top shows the current version.
We update this policy when what we do with data changes. The effective date is at the top. For a material change we email account holders before it takes effect.
13. Contact
Email or the contact form.
Privacy questions and requests go to [email protected] or the contact form.
Questions about this page go to [email protected] or the contact form. Every Mode policy is listed under Other Policies.