Privacy and cookie policy of www.mody.ai

Last updated: 23 October 2026
Courtesy translation. Only the Italian version is legally binding.

This page explains what personal data the www.mody.ai website processes, why, for how long and what rights you have. It applies only to this website. It does not cover the Mody services (size advice, virtual try-on, body scan) installed on our clients' online stores: for those services the privacy notice is given by each store, and Mody processes the data on their behalf.

Part 1 – Privacy notice (Articles 13 and 14 of EU Regulation 2016/679, "GDPR")

1. Data controller

MODY S.r.l.
Viale Giuseppe Giusti 133, 55100 Lucca (LU), Italy
VAT and tax code 02627920461
Email: info@mody.ai
Certified email (PEC): mody@pecmail.net
Phone: +39 0583 177 1648

2. What data we process, why, and on what legal basis

Situation	Data	Purpose	Legal basis	Retention
Visiting the site	IP address, date and time, requested page, browser and operating system, technical network data (logs)	Showing the site, keeping it secure, preventing abuse and attacks	Mody's legitimate interest in running the site securely (Art. 6(1)(f) GDPR)	For the technical period set by the provider (Cloudflare)
Opening and using the brand pages (addresses /per/..., also reached via the QR code printed in parcels)	For each page, day and country: number of visits, split by source (QR or link), and number of clicks on the buttons "Find your size", "Try it on" and "Book a discovery call"; plus the date and time (to the minute) of the last activity on the page. Cloudflare derives the country from the IP address at the time of the request. We do not store the IP address or the browser (which we read only to exclude bots and link previews), we do not use cookies and we store nothing in your browser. These counts do not tell us who you are and we do not link them to other data	To know whether and when the pages sent to individual brands are opened and used, to measure the result of the mailing and decide whether and when to contact the company again	Mody's legitimate interest in measuring and following up its business initiatives towards companies (Art. 6(1)(f) GDPR). Each page is dedicated to a single brand, so the counts may relate to the people who received the parcel: for this reason we treat them as personal data. You can object at any time (Art. 21) by writing to the contacts in section 1	The counters delete themselves about 6 months after the last update
Booking a demo (buttons "Book a demo" and "Pick a date and time")	First name, last name, email, phone (optional), company, date and time. The form uses Google reCAPTCHA to prevent abuse; Google processes this data under its own privacy policy (policies.google.com/privacy)	Arranging and holding the demo, contacting you about the business proposal you asked for	Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR)	For as long as needed to handle the request and in any case no longer than 12 months
Free trial request ("Start free trial" buttons)	Name, work email, store name, phone (optional), the page you write from, date and time, the country derived from the IP address	Answering your trial request	Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR)	12 months, then deleted automatically
Emails to info@mody.ai	Email address, name and what you write	Answering your request	Pre-contractual steps at your request (Art. 6(1)(b)) or legitimate interest in replying to people who write to us (Art. 6(1)(f))	For as long as needed to handle the request and in any case no longer than 12 months
Reviews published on the site	Reviewer's first name, the company they work for, text, date and rating of the review	Showing clients' opinions about Mody	Consent of the data subject (Art. 6(1)(a) GDPR)	As long as the review stays published on Trustpilot

Site statistics without cookies. We count some actions on the site in aggregate form: home page visits, opening the form and completing each step, sending the request, clicks on «Book a call», «Try it now», «Try it on virtually» and on the body scan sticker, opening the chat and number of messages, visits to the /per/ pages. We store only one number per day and per action: no cookies, no identifiers, no IP address, no device data. We cannot trace it back to you. We also use Cloudflare Web Analytics by Cloudflare, Inc. (USA), which does not use cookies or store data in the browser and shows us only aggregate statistics (page views, country, browser type, site speed). Legal basis: Mody's legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f)). You can object by writing to pelosi@mody.ai or to the certified email (PEC) mody@pecmail.net.

Internal weekly summary. Every Monday the Mody team receives an internal summary email with the site's aggregate numbers, the topics most asked about in the chat and the list of the week's new contacts (name, email, company, date). It is for internal use only.

We do not collect this data directly from you (Art. 14 GDPR): review data comes from Mody's public page on Trustpilot (it.trustpilot.com/review/mody.ai).

"Find your size" demo. The gender, height, weight, age and fit you enter in the demo are processed only in your browser. They are not sent to Mody and stay in your browser only until you close the tab (see Part 2). The demo uses sample size charts.

2-ter. AI assistant in the chat

On the site you can ask an AI assistant questions about Mody (the "Ask Mody" button). You are talking to an AI assistant, not a person. Answers are generated automatically from the information on the Mody site and may contain errors: for confirmation, write to info@mody.ai or book a call.

Situation	What data	Why	Legal basis	How long
Questions to the assistant	The text of your messages (up to 500 characters), the latest messages of the conversation, the page you write from and a random conversation identifier	Answering your questions about Mody	Pre-contractual steps at your request (Art. 6(1)(b) GDPR)	The conversation stays only in your browser and is deleted when you close the tab. Mody does not store the text of the messages: it keeps only a summary without identifying data (see the row «Summary of the conversation without identifying data»). The provider processes them only for the time needed to generate the answer and does not keep them
Abuse protection	A code derived from the IP address with a one-way function (hash), which changes every day, and the number of messages sent	Limiting excessive or automated use of the chat and its costs	Mody's legitimate interest in the security and proper working of the site (Art. 6(1)(f))	From 1 to 6 hours, then deleted automatically
Summary of the conversation without identifying data	A summary created automatically by the AI assistant: the topics covered (for example "Installation and platforms", "Privacy and data"), an interest level (low, medium, high), the questions the assistant could not answer rewritten in general form, the number of messages, date and time. Before and after the summary we remove emails, phone numbers and links; the summary does not contain your name, IP address or the text of the messages. Please do not write personal data about yourself or others in the chat: we filter it, but in rare cases a name could remain in the summary.	Understanding what visitors ask and what is missing on the site, to improve the pages and the answers	Mody's legitimate interest (Art. 6(1)(f)). You can object at any time by writing to pelosi@mody.ai or to the certified email (PEC) mody@pecmail.net (Art. 21)	6 months, then deleted automatically
Request to be contacted (only if you leave your email in the chat)	Email, store name, an excerpt of your latest questions (up to 400 characters), language, page, country derived from the IP address, date and time. If you leave your contact by pressing «Send contact», the summary of the conversation without identifying data is linked to your request (so for us it is no longer without identifying data) and marked as «can be contacted». The linked summary is deleted after 6 months in any case.	Contacting you about the request you made in the chat	Pre-contractual steps at your request (Art. 6(1)(b)). We write to you about other business offers only if you ask us to	Email and store name: 12 months from when the request is saved, if you do not become a client. Excerpt of the questions: 6 months.
Improving the service	The excerpts of questions saved with contact requests and the summaries of conversations without identifying data, with no other data	Understanding which questions come up most often and improving the answers and the information on the site	Mody's legitimate interest (Art. 6(1)(f)). You can object at any time by writing to pelosi@mody.ai or to the certified email (PEC) mody@pecmail.net (Art. 21)	As above: 6 months

Who processes the messages. Messages are processed by Cloudflare, Inc. (USA), with the Workers AI service and the open-source model gpt-oss-120b, on behalf of Mody (processor, Art. 28 GDPR). The model runs on Cloudflare's servers: messages do not go to OpenAI. Cloudflare states that it does not keep messages after the answer and does not use them to train models. The summaries are also created by Cloudflare Workers AI (same model, same servers). Contact requests are also stored on Cloudflare. The transfer to the USA is based on the Data Privacy Framework and the standard contractual clauses (section 5).
Who reads the data. Contact requests are read only by authorised Mody staff, in the site archive. Mody does not see the text of chat messages without a contact request: it only sees the summaries without identifying data described above.
No sensitive data. Do not write in the chat data about health, ethnic origin, political or religious views, payment data, passwords, or other people's data. The assistant does not need it to answer you.
No training. Mody does not use chat messages to train artificial intelligence models.
It is optional. You can use the site without the chat and write to us at info@mody.ai.
In the browser. The chat uses two technical tools in sessionStorage (mody_chat_sid and mody_chat), which are deleted when you close the tab (see Part 2).

3. Do you have to give us your data?

To book a demo or request a trial we need at least your name, email and company. Without this data we cannot answer you. The phone number is optional. The chat with the AI assistant is optional too: to contact you we only need your email and the name of your store (section 2-ter).

4. Who processes data on our behalf and who we share it with

Data is processed by authorised staff of MODY S.r.l. and by these providers, appointed as processors (Art. 28 GDPR). Transfers outside the EU are based on Standard Contractual Clauses or the Data Privacy Framework (section 5).

Cloudflare, Inc. (USA): site hosting and server functions, content delivery network and security; processing of chat messages and conversation summaries (Workers AI), archive of contact requests, statistics without cookies (Web Analytics). Under a data processing agreement signed with the provider.
Google: business email (Google Workspace) for emails to info@mody.ai and request notifications; processing is governed by Google's contractual data protection terms.
Google Calendar (Google Workspace, appointment booking): calendar for booking demos. The calendar opens on a page of the provider (calendar.google.com); processing is governed by Google's contractual data protection terms.

Data may also be shared with advisers (for example an accountant or lawyer) and with authorities, when the law requires it. We do not sell or publish your data.

5. Transfers outside the European Union

Some providers are based in the United States or process data there. The transfer takes place:

to companies certified under the EU-U.S. Data Privacy Framework, based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).
or, failing that, based on the standard contractual clauses approved by the European Commission (Art. 46 GDPR), included in the contracts with the providers.

You can ask for a copy of the safeguards used by writing to the contacts in section 1.

6. Your rights

At any time you can ask Mody to:

access your data and get a copy of it (Art. 15);
correct it (Art. 16) or delete it (Art. 17);
restrict its processing (Art. 18);
receive it in a structured format or have it sent to another controller (Art. 20), when processing is based on consent or a contract;
object to processing based on legitimate interest (Art. 21);
withdraw your consent, without affecting what was done before the withdrawal (Art. 7(3)).

To exercise your rights write to pelosi@mody.ai or to the certified email (PEC) mody@pecmail.net. We answer within one month, which can be extended to three in complex cases (Art. 12(3)).

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

7. Automated decisions

The site does not make automated decisions that have legal effects on you, and does not profile you under Art. 22 GDPR. The AI assistant's answers in the chat (section 2-ter) are generated automatically, but they only give you information about Mody: they are not decisions about you.

8. Changes

If we change this notice we update the date at the top. If the cookies or the analytics providers change, we will ask for your consent again.

1. What cookies and similar tools are

Cookies are small files that the site saves in your browser. Similar tools are "localStorage" and "sessionStorage", which save information on your device. By law (Art. 122 of the Italian Privacy Code and the Garante's Guidelines of 10 June 2021) we may use only technical ones without consent. For the others we need your consent.

2. Technical tools (no consent needed)

Name	Where	What it is for	Duration
mody_demo	sessionStorage, mody.ai site	Remembers the data you entered in the "Find your size" demo to show your size on all the demo products. The data stays in your browser and is not sent to Mody	Until you close the tab (technical, session duration)
mody_chat_sid	sessionStorage, mody.ai site	Random identifier of the conversation with the AI assistant, used to apply the message limit	Until you close the tab
mody_chat	sessionStorage, mody.ai site	Keeps the latest chat messages, so the conversation stays if you change page	Until you close the tab
mody_lang, mody_lang_bar	localStorage, mody.ai site	They remember the language you chose and whether you closed the notice suggesting another language	Until you clear the site data from your browser

Cloudflare Web Analytics and our aggregate counters do not use cookies, localStorage or sessionStorage and do not need consent.

3. Third-party content

Demo calendar (Google Calendar). It is not embedded in the site: it opens in a new tab on the provider's site, which may use its own cookies under its own policy.

For everything else (controller, rights, complaints) Part 1 applies.