Privacy Policy

Effective 3 July 2026 · Last updated 3 July 2026

modus|converge (ABN 94 532 404 337) ("we", "us") is an Australian-operated platform that helps managed service providers (MSPs) and IT teams document, monitor and secure their clients' IT environments. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy covers the modus|converge application (app.modusconverge.com), our website (modusconverge.com), and personal information we handle when providing support.

1. The kinds of personal information we collect and hold

Account information. When you or your organisation creates a modus|converge account: name, email address, authentication credentials (managed by our identity provider — we never see your password), role and organisation membership.

Information synced from your organisation's IT systems. modus|converge connects to systems that your organisation (or its MSP) chooses to integrate — such as Microsoft 365, Intune, device-management, network and helpdesk platforms. Depending on the integrations enabled, this can include:

• directory and licence records: name, email address, job title, department, assigned software licences;
• security posture signals: whether multi-factor authentication is registered, whether an account holds administrative privileges, and last sign-in time;
• device records: device names, serial numbers, assigned user, installed software and compliance state;
• helpdesk tickets: requester name, contact details and ticket content;
• software usage discovered by an optional browser extension deployed by your organisation: which web applications a signed-in user accesses (application name and the user's work email), used to identify unsanctioned "shadow IT".

Support and correspondence. Information you provide when you contact us.

Website. Our marketing website does not require an account and collects only standard technical logs via our hosting provider.

We do not collect sensitive information (such as health, biometric or political information) and ask that you do not submit it to the platform.

2. How we collect and hold personal information

We collect personal information: (a) directly from you when you create an account or contact us; (b) from your organisation or its MSP when they configure the platform; and (c) automatically from the third-party systems your organisation connects, via those systems' APIs, and from the optional browser extension your organisation deploys.

Information is held in cloud infrastructure with encryption in transit and at rest, strict tenant isolation enforced at the database layer (each organisation's data is segregated by row-level security), encrypted storage of integration credentials, role-based access controls, and audit logging of sensitive changes. We take the reasonable steps required by APP 11 to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, and we retain it only while your organisation maintains its account (or as required by law). On verified request following account closure, we delete the organisation's data.

3. Why we collect, hold, use and disclose it

We use personal information to: provide the platform (asset and configuration management, licence tracking, security-posture and compliance reporting, uptime monitoring, service documentation); secure the platform and investigate incidents; provide support; improve the service; and meet our legal obligations. We do not sell personal information or use it for advertising.

4. Automated processing and AI features

modus|converge includes AI-assisted features (an in-app assistant, diagram generation and automated compliance assessment) and rule-based security posture checks.

Kinds of personal information used by these computer programs: the directory, licence, security-posture, device and ticket records described in section 1 for your organisation's environment.

Kinds of decisions these programs make or substantially assist: the platform automatically evaluates security and compliance signals — for example, flagging user accounts without multi-factor authentication registered, accounts that appear inactive, or accounts holding administrative privileges — and produces reports that may substantially assist your organisation's administrators in decisions about those accounts (such as reviewing access or requiring MFA). modus|converge itself does not make fully automated decisions that significantly affect an individual's rights or interests; any action on a flagged account is taken by your organisation's administrators. AI-generated content is produced using a third-party AI provider (see section 5) and is presented for human review, not executed automatically.

5. Disclosure, including overseas disclosure

We disclose personal information only to the service providers we use to run the platform, under contracts that restrict their use of it to providing services to us:

We may also disclose personal information where required by law. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, and we remain accountable for their handling of it.

6. Access and correction

You may request access to, or correction of, the personal information we hold about you by contacting us at privacy@modusconverge.com. We will respond within a reasonable period (normally 30 days). If we refuse access or correction, we will give you written reasons and how to complain. Where your personal information was synced from your organisation's systems, correcting it at the source (e.g. your organisation's Microsoft 365 directory) is usually the effective path, and we can direct your request to your organisation's administrator.

7. Data breaches

We comply with the Notifiable Data Breaches scheme. If a data breach involving personal information is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by Part IIIC of the Privacy Act.

8. Complaints

If you believe we have breached the APPs, contact us at privacy@modusconverge.com with the details. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the OAIC at www.oaic.gov.au or 1300 363 992.

9. Contact

modus|converge (ABN 94 532 404 337)
Email: privacy@modusconverge.com

We may update this policy from time to time; the current version will always be available on this page.