Privacy Policy

Modessa Virtual Solutions ("Modessa", "we", "us") operates Modessa Workforce360 and its AI agents (Renee, Iris, Harris, Lena). This policy explains what we collect, why, and how we protect it. It also describes your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies.

Data controller

Modessa Virtual Solutions is the data controller for personal data processed through Modessa Workforce360. For EU data subjects, we have appointed a representative in the European Union to address GDPR-related inquiries.

Information we collect

• Account data — name, email, company, and authentication identifiers.
• Workforce data you upload — job descriptions, resumes, candidate records, interview transcripts and recordings, onboarding and L&D content.
• Usage data — application logs, device and browser metadata used to operate and secure the service.

Legal basis for processing (GDPR)

We process personal data on the following lawful bases: (a) Contractual necessity — to provide the services you signed up for; (b) Legitimate interests — to improve security, prevent fraud, and support our business operations, balanced against your privacy rights; (c) Legal obligation — where required by applicable law; and (d) Consent — for optional features like marketing communications, which you may withdraw at any time.

How we use it

• Provide and improve the AI hiring, interview, onboarding, and learning features you request.
• Secure the platform, prevent abuse, and meet legal obligations.
• Communicate with you about your account, service updates, and support.

Sharing

We do not sell personal data. We share data only with sub-processors needed to run the service (hosting, AI inference, email delivery) under contractual confidentiality, or when required by law. All sub-processors are bound by data processing agreements that include standard contractual clauses where cross-border transfers occur.

International transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. Where such transfers involve EU personal data, we rely on the European Commission's Standard Contractual Clauses (SCCs) and implement additional safeguards to ensure an essentially equivalent level of protection.

Data retention

Candidate records remain in your pipeline until you remove them. Rejected candidates are automatically archived 7 days after rejection and may be purged on request. You can request export or deletion of your account data at any time. We retain usage logs and account data only as long as necessary for the purposes described above or to comply with legal obligations.

Your rights

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your personal data where there is no overriding legal basis for continued processing.
• Restrict processing in certain circumstances.
• Data portability — receive your data in a structured, commonly used, machine-readable format, or have it transmitted directly to another controller where technically feasible.
• Object to processing based on legitimate interests, including profiling.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with a supervisory authority in your country of residence.

We will respond to verified requests within 30 days. To exercise any of these rights, contact us using the details below.

Contact

Modessa Virtual Solutions
Email: team@modessavirtualsolutions.com
Phone: 1-888-568-9144