The policy states that unspecified third-party companies and individuals engaged by Modal Labs for service facilitation, delivery, and analytics are granted access to users' personal information, subject to an obligation not to use or disclose it beyond their assigned tasks.
This analysis describes what Modal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision does not identify the third parties receiving personal data, does not describe the contractual mechanism through which the stated obligation is enforced, and does not specify which categories of personal data are shared with which categories of third parties. This structure may be insufficient to satisfy GDPR processor agreement requirements or CCPA disclosure obligations for categories of third parties to whom personal information is disclosed.
Interpretive note: The contractual mechanism enforcing the stated third-party obligation is not described, and the identity and number of third parties receiving personal data are not disclosed.
Under this clause, personal information collected by Modal Labs is accessible to unidentified third-party companies and individuals engaged for service-related purposes, with no enumeration of those third parties or the specific data categories shared with each.
Cross-platform context
See how other platforms handle Third-Party Service Provider Data Access and similar clauses.
Compare across platforms →"We may employ third-party companies and individuals due to the following reasons: To facilitate our Service; To provide the Service on our behalf; To perform Service-related services; or To assist us in analyzing how our Service is used. We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.Excerpt from Modal's Privacy Policy
(1) REGULATORY LANDSCAPE: GDPR requires that data controllers enter into written data processing agreements with processors, specifying processing purposes and obligations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The provision does not identify the third parties receiving personal data, does not describe the contractual mechanism through which the stated obligation is enforced, and does not specify which categories of personal data are shared with which categories of third parties. This structure may be insufficient to satisfy GDPR processor agreement requirements or CCPA disclosure obligations for categories of third …
Under this clause, personal information collected by Modal Labs is accessible to unidentified third-party companies and individuals engaged for service-related purposes, with no enumeration of those third parties or the specific data categories shared with each.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Modal.