Get Moder Privacy Notice
Last updated: March 5, 2026
Introduction and Scope
This Privacy Notice explains how Get Moder AB (“Get Moder”, “we”, “our”, “us”) collects, uses and protects personal data when you visit our website, use our products or otherwise interact with us. We respect your privacy and are committed to handling personal data in a transparent and responsible way. This notice applies exclusively to personal data that Get Moder processes for its own purposes and in its capacity as a data controller. If you subscribe to our services, you (or the organization you represent) are the data controller for personal data that you process for your own purposes — for example, data about your customers. In such cases, Get Moder processes such personal data on your behalf and in the capacity of a data processor, and such processing is not covered by this Privacy Notice.
Data Controller and Contact
Get Moder AB Årevägen 75, 837 52 Åre, Sweden Email: privacy@getmoder.com If you have any questions about how we process personal data, please contact us at the address above.
When and How We Collect Personal Data
We mainly collect personal data directly from you — for example when you register for an account, sign up for a newsletter or waitlist, interact with our service (including voice or text interactions with our AI agents), or contact our support team. We may also collect information automatically through your use of our website or services — for example via cookies, usage logs or similar technologies. In some cases, we may receive limited information from third-party partners — such as payment service providers — to enable functionality, verify transactions or service reliability. For details about how cookies are used, please see our separate Cookie Notice.
Purposes, Legal Bases and Retention Periods
We only process personal data that is necessary for clearly defined purposes. The table below summarizes the main processing activities, the data involved, the applicable legal bases under the GDPR, and typical retention periods.
| Purpose/activity | Example of data processed | Legal basis (Art. 6 GDPR) | Typical retention period |
|---|---|---|---|
| Website visits and cookies – to operate the website, ensure functionality and analyze usage patterns. | IP address, device data, cookie IDs. | Legitimate interest (Art. 6(1)(f)) – to ensure a secure and user-friendly website; consent for non-essential cookies (Art. 6(1)(a)). | Please refer to our Cookie Notice. |
| Waitlists and newsletters – to manage sign-ups and deliver content requested by business users. | Name, email, company, message. | Contract performance (Art. 6(1)(b)). | Until the subscription is cancelled or program ends. |
| Marketing and outreach – to communicate with prospective or existing customers about our services. | Business contact details, company name, communication history. | Legitimate interest (Art. 6(1)(f)) – to promote our services and manage customer relationships. | Prospective customers: up to 12 months. Customers: for the duration of the customer relationship and up to 1 year after termination, unless the customer objects to further marketing communication. |
| Account and contract management – to register and maintain user accounts, set up customer environments and manage agreements. | Account credentials, profile details, contact and company information, contract documents. | Contract performance (Art. 6(1)(b)). | For the duration of the customer relationship and up to 3 years after termination. |
| Service delivery and operation – to provide, operate and maintain the Moder platform, including AI-based voice and text functionality, and to ensure proper service performance. | Voice inputs, transcripts, usage metadata, session identifiers, device data (e.g. IP, browser type, operating system). | Contract performance (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) – to ensure reliable and efficient operation. | Voice and session data retained only as necessary for service delivery and deleted or anonymized thereafter; aggregated analytics retained up to 90 days. |
| Customer communication and support – to respond to requests and provide technical assistance. | Contact details, support messages, chat logs. | Contract performance (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) – to maintain and improve customer relationships. | Up to 12 months after resolution. |
| Billing and accounting – to issue invoices, process payments and comply with accounting and tax obligations. | Billing records, payment details, transaction data. | Contract performance (Art. 6(1)(b)); Legal obligation (Art. 6(1)(c)). | 7 years (in accordance with accounting laws). |
| Service analytics, improvement and governance – to analyze usage data, monitor system performance, improve features and AI functionality, and evaluate service quality and operational effectiveness (using aggregated or anonymized data wherever possible; personal data only where necessary). | Aggregated usage statistics, service performance metrics; usage logs and session/device identifiers. | Legitimate interest (Art. 6(1)(f)) – to improve service quality and product performance. | Aggregated and anonymized within 90 days. |
| Platform maintenance, security and compliance monitoring – to ensure stability, prevent fraud, protect accounts, and support internal audits or supplier management related to service reliability and information security. | Device identifiers, log files, IP addresses, incident reports, supplier and audit records. | Legitimate interest (Art. 6(1)(f)) – to protect data, prevent fraud and maintain network security. | Logs retained for 90 days; other operational or audit records up to 3 years. |
| Legal claims and compliance – to handle potential or actual legal disputes, enforce our rights, respond to lawful requests from authorities, and comply with other legal obligations applicable to our business. | Contract and communication records, account data, transaction history, correspondence. | Legitimate interest (Art. 6(1)(f)) – to defend and protect legal rights and interests; Legal obligation (Art. 6(1)(c)). | For the duration of the claim or proceeding, and as required by applicable law. |
Data Sharing
We treat your personal data as confidential and do not disclose it to others except where necessary to provide our services or when legally required to do so. For example, we may disclose personal data to our payment service providers when you make payments for our services, or to public authorities where required by law or necessary to establish, exercise or defend legal rights. We also use trusted hosting and service providers to operate our platform. These providers act on our behalf and only process personal data as instructed by us, under appropriate contractual safeguards.
International Data Transfers
We primarily process personal data within the EU/EEA. If the operation of our platform or related services involves the transfer of data to service providers outside the EU/EEA, we ensure an adequate level of protection through appropriate safeguards and compliant transfer mechanisms, such as the European Commission’s Standard Contractual Clauses (SCCs).
Your Rights as a Data Subject
As a data subject, you have certain rights in relation to the processing of your personal data. If you wish to exercise any of them, please contact us at privacy@getmoder.com.
- Right of access: You have the right to obtain information about the personal data we process about you, including the purposes of the processing and the legal basis for it.
- Right to rectification (correction): If you believe that any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected or completed.
- Right to restriction of processing: You can request that we restrict the processing of your personal data — for example, if you believe that the data is inaccurate and you do not want us to process it until it has been corrected.
- Right to erasure (“right to be forgotten”): You can request that we delete your personal data. We will comply with such a request to the extent required by applicable law; however, we may continue to process certain data if we have a legal obligation to retain it or if it is necessary to protect our legitimate rights.
- Right to object: When we process personal data based on legitimate interests, you have the right to object. If your privacy interests outweigh our interests, we will stop processing your data for that purpose.
- Right to data portability: You may have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Cookies and Analytics
We use cookies and similar technologies to operate and improve our website and app. For detailed information about the types of cookies we use and how to manage your preferences, please see our separate Cookie Notice.
Complaints
If you are not satisfied with how we process your personal data, please contact us first at privacy@getmoder.com. You also have the right to lodge a complaint with your local data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY), www.imy.se.
Changes to This Notice
We may update this notice from time to time to reflect changes in our processing activities or applicable law. Significant changes will be communicated on our website before they take effect.
Effective Date
This notice is effective from 2025-11-04.