1. Summary
ModuWell is a Windows desktop application with a local-first project database. Your wells, logs, surfaces, models, and volumetrics live on your computer. We do not receive that project data unless you opt in to collaboration and explicitly share a prospect.
2. Information we collect
- Account information. The email address and password you use to sign in. Passwords are stored only as a salted hash, never in plain text.
- License & device activations. Which machines have activated your license (a device identifier and label) so we can enforce single-seat use and let you manage your machines.
- Payments. Purchases are processed by Stripe. We receive a Stripe customer reference and payment status; we do not store your card number. See Stripe's privacy notice for how they handle card data.
- AI agent usage. When you run a built-in AI agent, the request is sent through our secure server-side proxy to the AI provider and metered against your prepaid wallet. We record usage and balance changes for billing.
- Collaboration data (opt-in only). If you choose to share a prospect, the compact change-blobs you push are stored on our server so collaborators can sync. You control which prospects are shared.
- Operational logs. Standard server logs (e.g. IP address, timestamps) used for security, abuse prevention, and reliability.
3. How we use information
- To create and secure your account and validate your license.
- To process payments and maintain your AI wallet balance.
- To route and meter AI agent runs.
- To enable opt-in collaboration between accounts you invite.
- To protect the service against fraud and abuse, and to provide support.
4. Third-party processors
- Stripe — payment processing.
- Anthropic, PBC — the large-language-model API behind the AI agents, accessed only through our server-side proxy.
- DigitalOcean, LLC — server hosting.
We do not sell your personal information.
5. Data retention
We keep account, license, and billing records for as long as your account is active and as required for tax and legal purposes. Shared collaboration blobs are retained while a share is active and removed per our retention process thereafter. 30 day retention.
6. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To make a request, contact us at andrew@subsurfacemodels.com.
7. Security
We use industry-standard measures including encrypted transport (HTTPS), hashed credentials, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information.
8. Changes
We may update this policy; material changes will be reflected by a new effective date above. Continued use after an update constitutes acceptance.
9. Contact
Questions about privacy: andrew@subsurfacemodels.com.