Privacy Policy

We use the information we collect for the following purposes:

• Service Delivery. To build your website, generate marketing content, manage your campaigns, and provide all platform features you have purchased.
• Account Management. To create and maintain your account, process token purchases, and manage billing.
• Communication. To send you service updates, project notifications, staging review alerts, and responses to your inquiries. We may also send marketing communications, which you can opt out of at any time.
• Platform Improvement. To analyze usage patterns, diagnose technical issues, and improve our AI systems, features, and user experience.
• Security. To detect and prevent fraud, abuse, and unauthorized access to the platform.
• Legal Compliance. To comply with applicable laws, regulations, and legal processes.

We use trusted third-party services to operate the platform. These providers have access to your information only to the extent necessary to perform their functions and are obligated to protect it. Our key service providers include:

We do not sell your personal information to third parties. We do not share your information with third parties for their own direct marketing purposes.

We use cookies and similar technologies to operate and improve the platform:

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the platform. We do not currently use advertising or retargeting cookies on the platform.

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account data is retained for the duration of your active account plus 90 days after termination to allow for data export.
• Website content and project files are retained while your account is active and for 90 days after termination.
• Billing and transaction records are retained for 7 years as required for tax and accounting purposes.
• Analytics and usage data is retained in aggregated, anonymized form and may be kept indefinitely for platform improvement.
• Communication records (support tickets, emails) are retained for 3 years after your last interaction.
• AI interaction logs are retained for 12 months for service improvement, then anonymized or deleted.

We implement reasonable administrative, technical, and physical security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication and access controls for platform accounts.
• Regular security audits and vulnerability assessments.
• Restricted access to personal data on a need-to-know basis among our team.
• Secure API key management and secrets handling via encrypted vault infrastructure.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.

You have the following rights regarding your personal information:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request that we correct any inaccurate or incomplete personal information.
• Deletion. Request that we delete your personal information, subject to legal retention requirements.
• Data Export. Request a machine-readable copy of your data (including website files and content).
• Opt-Out. Unsubscribe from marketing communications at any time using the link in our emails or by contacting us.
• Withdraw Consent. Where processing is based on consent, withdraw your consent at any time (this does not affect the lawfulness of prior processing).

To exercise any of these rights, contact us at privacy@morphora.ai. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete. You may request that we delete the personal information we have collected about you, with certain exceptions.
• Right to Opt-Out of Sale. We do not sell personal information. If this changes in the future, we will provide a "Do Not Sell My Personal Information" link and update this policy.
• Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email us at privacy@morphora.ai or contact us using the information at the bottom of this page. We will verify your identity before fulfilling your request and respond within 45 days.

Morphora is a business-to-business platform and is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@morphora.ai.

Morphora is based in the United States, and our servers are located in the United States (via DigitalOcean and Cloudflare). If you access the platform from outside the United States, your information will be transferred to and processed in the United States.

By using the platform, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence. We will take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify active account holders via email.
• Post a notice on the platform for significant changes.

We encourage you to review this Privacy Policy periodically. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For terms governing your use of the platform, please see our Terms of Service. For our refund and cancellation policy, see our Refund Policy.