Privacy Notice

Last updated 15 October 2026

This notice explains how Modalis Ltd ("Modalis", "we") handles personal data in the Modalis Platform and its services DailyMed Explorer, Label Monitor and Formulation Explorer (together the "Service"). Modalis Ltd is the data controller. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Croatian law.

1. What we collect

• Account data: your email address and, where provided, your name, your role, and when your account was created and last used. Your password is never stored in readable form.
• Search activity: the searches, filters and exports you run, with your account number and the time. We use it for security and to improve the Service.
• Watchlists: the applications you choose to watch in Label Monitor and when you last read your alerts, so the Service can show you what changed.
• Workbook versions: the workbooks you add to Formulation Explorer, each kept with your email address as the one who saved it. Other users of the same project see who saved each version.
• Security data: the technical information needed to keep the Service secure, such as sign-in events and the IP address of a request.
• Error data: technical information used to find and fix errors, kept in a form that does not identify you.

We do not use analytics or advertising, and we do not build profiles.

2. Why we use it

Only to give you access to the Service, to keep it secure and working, and to meet our legal obligations. The legal bases are the performance of a contract (GDPR Art. 6(1)(b)), our legitimate interest in a secure and reliable service (Art. 6(1)(f)) and compliance with the law (Art. 6(1)(c)). We never sell your data.

3. Cookies

The Service uses one cookie, which keeps you signed in. It is strictly necessary, so it does not require consent. There are no analytics, advertising or third-party cookies.

4. Who can see it

Your organisation's administrators can see your account data. Our hosting provider stores the data on our behalf, in the European Union, under a data processing agreement. We disclose personal data to public authorities only when EU or Croatian law requires us to.

5. How long we keep it

Account data is kept while your account exists and is deleted when the account is removed. Search activity is kept while your account exists; after the account is deleted, the records no longer identify you and are kept only in anonymous form. Security data is kept only as long as needed for security, unless the law requires us to keep it longer.

6. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, or to receive a copy of it. Write to info@modalis.ai; we reply within one month. You can also complain to the Croatian Personal Data Protection Agency (azop.hr) or to the authority in your EU country.

7. Changes and contact

We may update this notice; the date above shows the latest version. Questions: info@modalis.ai.