Privacy Policy

Privacy Policy for Modeve

Your data is safe with Modeve. We handle personal information securely, only as needed to provide HR, CRM, project management, and collaboration tools — with full transparency and your rights protected.

Last updated: January 14, 2026

Modeve ("we", "us", "our") operates the website modeve.com.hk , modeve.app and the Modeve platform (collectively, the "Service" or "Platform"), an all-in-one business management SaaS solution that integrates HR, CRM, project management, invoicing, payroll, and team collaboration tools.

We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, register for or use the Service, or interact with us in any way.

Modeve is operated from Hong Kong and complies with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong. If you are located in the European Union/EEA, the United Kingdom, or other jurisdictions with applicable data protection laws (such as GDPR or UK GDPR), additional protections may apply as described below.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect several types of information to provide, improve, and secure the Service.

1.1 Personal Data You Provide Directly When you register, create an account, submit forms, contact support, or use certain features, we may collect:

• Contact and account information (name, email address, phone number, company name, job title)
• Billing and payment details (via secure third-party processors; we do not store full card numbers)
• Profile information (photo/avatar, preferences, language choice: English, Traditional Chinese, Simplified Chinese)
• Content you upload or input (project details, tasks, invoices, employee records, client data, contracts, messages in internal chat)
• Support communications and feedback

1.2 Automatically Collected Information When you visit our website or use the Platform, we automatically collect:

• Device and usage data (IP address, browser type, operating system, device identifiers, pages visited, time spent, referring URLs)
• Log data (access times, features used, error logs)
• Cookies and similar technologies (for analytics, session management, preferences; see our Cookie Policy below)

1.3 Data from Third Parties We may receive information about you from:

• Payment gateways (PayPal, Stripe) — limited transaction metadata
• Integrations you authorize (Zoom, ZKTeco biometric devices, etc.)
• Business partners or service providers (only as necessary and with appropriate safeguards)

1.4 Data Processed on Behalf of Customers (as Data Processor) When businesses use Modeve to manage their own employees, clients, or projects, we act as a data processor. The customer (data user/controller) determines what personal data is uploaded (e.g., employee attendance, client contact details). We process this data only to provide the Service and in accordance with our agreement with the customer.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve the Service (account creation, feature access, performance optimization)
• To process transactions and send invoices/receipts
• To communicate with you (service updates, support responses, security alerts)
• To authenticate users and prevent fraud/abuse
• To analyze usage trends and enhance user experience
• To comply with legal obligations (e.g., PDPO, tax laws)
• For internal business purposes (auditing, research, product development)
• With your consent, for marketing (you can opt out at any time)

We do not sell your personal data to third parties.

3. Legal Basis for Processing (Where Applicable)

• Performance of a contract — to deliver the Service you requested
• Legitimate interests — improving security, preventing fraud, analyzing usage (balanced against your rights)
• Legal obligations — compliance with PDPO or other laws
• Consent — for certain marketing or non-essential cookies (you can withdraw consent)

4. Sharing of Personal Data

We share personal data only in limited circumstances:

• With service providers (hosting, analytics, payment processors, email services) bound by confidentiality and data protection obligations
• With business customers (your employer/admin may access data you input in their workspace)
• For legal reasons (court orders, regulatory requests, to protect rights/safety)
• In connection with business transfers (merger, acquisition) with notice where required
• With your explicit consent or direction

International transfers (e.g., to cloud providers outside Hong Kong) use appropriate safeguards such as standard contractual clauses or adequacy decisions where applicable.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Policy, or as required by law. Account data is kept while your account is active; after closure, we retain limited data for legal/compliance reasons (typically up to 7 years for financial records). Customer-uploaded data is retained per the customer's instructions and our agreement.

6. Your Rights Under PDPO and Other Laws

Under the PDPO (and GDPR/UK GDPR where applicable), you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request erasure (in certain cases)
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with the Privacy Commissioner for Personal Data (Hong Kong) or relevant supervisory authority

To exercise these rights, contact us at [email protected]. We respond within statutory timeframes (e.g., 40 days under PDPO).

7. Security of Your Data

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration, including encryption, access controls, regular security assessments, and role-based permissions. However, no system is completely secure — we cannot guarantee absolute security.

In case of a data breach, we will notify affected individuals and authorities as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functions, analytics, and preferences. You can manage preferences via our cookie banner or browser settings. For details, see our separate Cookie Policy [link to be added].

9. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware of such collection, we will delete the data.

10. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices or legal requirements. We will post the revised version on this page with an updated "Last updated" date. Significant changes will be notified via email or in-Service notice where appropriate.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Modeve Email: [email protected] 

For PDPO-related complaints, you may also contact the Office of the Privacy Commissioner for Personal Data (Hong Kong): https://www.pcpd.org.hk

Thank you for trusting Modeve with your data. We are committed to protecting your privacy while delivering powerful business tools.