Privacy Policy
What the ModiDesk apps, the ModibusTech-operated service and this website collect, why, how it is protected, and the rights you have over it.
Who we are
ModiDesk is operated by ModibusTech OÜ, a private limited company registered in Estonia ("we", "us", "our"). We are the data controller for personal data processed through the ModiDesk apps, the service we operate and this website. Where an enterprise agreement provides for a private deployment, your organization is the controller for data processed by that instance.
Data we collect
Account data: if you create an account, a username, email address and a securely hashed password, used to authenticate you and provide the service.
Device and connection data: a device ID, IP address and technical connection metadata (timestamps, relay, connection quality) needed to establish, route and log a remote session.
Session content: the remote screen, keyboard and mouse input, transferred files and optional audio are end-to-end encrypted. Relay servers only forward encrypted bytes. We cannot read, record or store your session content.
Diagnostics: if you opt in, anonymous crash and diagnostic information.
Website data: basic analytics and cookies as described below. Messages sent through the contact form are stored so we can reply.
Data we do not collect
ModiDesk does not collect your precise location, contacts, photos, messages, browsing history, health data or advertising identifiers. We do not use your data for advertising and we do not sell or rent personal data.
App permissions
The desktop apps request only what remote access requires: screen capture and input injection for the device being controlled, network access to reach the ID and relay server, and file system access when you use file transfer. Mobile apps, when released, will follow the same principle and request each permission only when the related feature is used.
How your data is shared
We do not share personal data with third parties except infrastructure providers that host the service we operate (acting as our processors under contract) and where required by law. Encrypted session traffic is relayed but never decrypted by us or any provider.
Legal basis (GDPR)
We process data to perform our contract with you, for our legitimate interests in security and improving the product, to comply with legal obligations and, for optional cookies and diagnostics, with your consent.
Data location and transfers
The service we operate runs inside the European Union. Enterprise customers can request a dedicated instance pinned to a specific region, or a private deployment in their own jurisdiction. Any international transfers use appropriate safeguards such as EU Standard Contractual Clauses.
Data retention
We keep account data while your account is active and delete or anonymise it after closure, except where limited records must be retained by law. Connection metadata is kept as long as needed to operate, secure and audit the service. Session content is never stored.
Deleting your data
You can delete your account and associated personal data from the admin console, or request deletion through our contact form. Verified deletion requests are actioned without undue delay.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to certain processing or withdraw consent. Use our contact form. You may also lodge a complaint with your local data protection authority (in Estonia, the Andmekaitse Inspektsioon).
Security
Sessions are protected with end-to-end encryption, passwords are stored only as salted hashes, and access to our systems is restricted and monitored. No method of transmission or storage is completely secure, but we work to protect your data.
Children
ModiDesk is a business and utility product and is not directed to children under 16. We do not knowingly collect personal data from children.
Cookies (website)
Essential cookies keep the site working and are always on.
Optional cookies help us understand site usage. You can accept or decline them in the cookie banner and change your mind at any time by clearing browser storage.
Changes
We may update this policy; material changes are reflected by the "last updated" date below. Continued use of ModiDesk after an update means you accept the revised policy.
Contact
ModibusTech OÜ, Tallinn, Estonia. Questions about this policy or your data: use our contact form.