You upload your specification, drawings and model so Modou can check them. They stay in your own account, where you and your team can open them and other customers never can. Traffic and stored data are encrypted, files open only through short-lived links, and we do not use your project documents, drawings, prices or calculations to train AI models, unless you give written permission.
Reviewed 3 October 2026
Your documents, quantities and decisions are stored in your own workspace. You and the colleagues in your team can open them. Other customers never can: row level security and a workspace check on every request keep one account from reading another account's data. The document check sends nothing outside your company, and your quantities leave Modou only as a file you export.
Traffic uses HTTPS. Everything Modou stores in Supabase, your files included, is encrypted at rest. Your files sit in private storage. A file opens only through a link that expires after five minutes, made after Modou has checked that you belong to the workspace.
Accounts use Supabase authentication, and passwords are stored only as a hash. A connection, such as your Gmail mailbox for incoming tender requests, uses OAuth. Modou receives only the permissions you accept while connecting, and a saved credential is never shown in the browser again. Picking up tender requests only reads the mailbox: it never sends mail from it and never changes it.
Modou uses Google Gemini through Vertex AI to read specifications and scanned pages, and to answer questions in the project chat. The relevant text and pages are sent to the model for that step. Quantities from the IFC model are measured by Modou's own code, without an AI model. We do not use your project documents, drawings, prices or calculations to train AI models. The only exception is a project you have given written permission for, and even then the prices you enter are never used.
The production database and your files are hosted by Supabase in the European Union. AI processing may use Google's global infrastructure, so Modou does not claim that every AI operation stays inside the European Union.
Your projects and files are kept for as long as your account exists. You can delete your account at any time from your dashboard settings. Your login and your profile are then removed straight away, together with files that belong to no project (for example files attached in chat). Your project documents (drawings, specifications, models, price files, calculations and exports) are kept for up to 24 months after that and are then deleted, files included. Email hi@modou.io to have them removed sooner. If you are in a team, the team keeps the projects you created: they pass to the team owner. If you own a team that still has other members, you cannot delete your account until those members have been removed from the team. Remove them from the team first, or email hi@modou.io. No online service can promise zero risk. If a file cannot be read or a connection expires, Modou says so instead of carrying on as if it worked.
Send security questions or responsible disclosure reports to hi@modou.io. Include the affected page or feature and enough detail for us to reproduce the issue.
Upload the specification, schedules and model you have been given. See the conflicts, missing items and quantities to review before they end up in your price.
Check one project free. No card needed.