This Privacy Policy explains how we collect, use, process, retain, and protect your personal data when you access or use the Service. By using the Service, you acknowledge that your personal data will be processed as described in this Privacy Policy and subject to the Terms of Use.

Collection of Personal Data

Morphic may collect personal data including, without limitation:

account identifiers (e.g., name, email address);
billing and transaction information;
Inputs and Outputs associated with your account;
internet or device identifiers, logs, and analytics data.

Personal data is not knowingly collected from individuals under age thirteen (13).

Use of Personal Data

Personal data may be processed for the purposes of:

delivering, operating, and enhancing the Service;
maintaining security, compliance, and fraud prevention;
communicating with you regarding Service‑related matters, including support and product updates.

Morphic acts as a data controller for personal information associated with your account and use of the Service, and may act as a data processor with respect to Inputs and Outputs submitted under organization or enterprise agreements. We process personal data where necessary to perform our contract with you, to comply with legal obligations, and for our legitimate interests in providing, securing, and improving the Service.

Morphic does not sell personal data.

Where the Service relies on Third-Party Services to process or generate content, such third parties may process, store, or retain personal data in accordance with their independent terms and privacy policies, including potential use for model improvement or training. Morphic does not control and expressly disclaims responsibility or liability for any Third-Party Services, including their processing or use of personal data. This paragraph does not apply to Google user data, which is handled only as described under Google user data below.

Personal data may be shared with:

service providers performing business functions on Morphic's behalf;
competent authorities when legally required;
third parties in connection with corporate transactions such as mergers, acquisitions, or restructurings.

Please refer to the Terms of Use for additional details regarding how Inputs (content you provide) and Outputs (content generated for you by the Service) may be used to operate, maintain, and improve the Service.

Google user data

If you connect a Google account to Morphic, this section describes how Morphic accesses, uses, stores, and shares the data it receives from Google APIs ("Google user data"), including files in your Google Drive. Where this section differs from the rest of this Privacy Policy, this section applies to Google user data.

Access. Morphic accesses your Google Drive only when you explicitly ask it to in a chat, for example by sharing a link to a Drive folder or file and asking Morphic to use it. To carry out that request, Morphic lists the contents of the one folder you linked and downloads the files you ask for. Morphic does not scan, index, or monitor your Drive in the background, and it does not modify or delete files in your Drive. Morphic writes to your Drive only when you ask it to save Morphic files there, and then only to the files it creates.

Use. Morphic uses Google user data only to provide the feature you requested, such as bringing your files into a chat so you can work with them in the Service. Morphic does not use Google user data for advertising, including personalized, retargeted, or interest-based advertising.

Storage. Files you import from Google Drive are stored as files in your chat in Morphic's cloud storage until you delete them or delete your account, as described under Data Retention. The access and refresh tokens Google issues to Morphic are stored encrypted.

Sharing. Morphic shares Google user data only with the subprocessors listed on our Subprocessors page, including the AI model providers that process your request, and only to carry out the request you made. Morphic does not sell Google user data, does not transfer it to data brokers or information resellers, and does not use or transfer it to determine creditworthiness or for lending purposes. Morphic may also disclose Google user data where required by law, as described under Law Enforcement and Legal Compliance, or as part of a merger, acquisition, or sale of assets, as described under Business transactions.

AI and machine learning. Morphic does not use Google user data, or transfer it to others, for the purpose of developing, improving, or training generalized artificial intelligence or machine learning models.

Human access. No Morphic personnel read Google user data unless you ask us to for support, it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.

Disconnecting. You can disconnect your Google account at any time in Settings > Connectors, which removes the access Morphic was granted. You can also revoke Morphic's access from your Google Account at myaccount.google.com/permissions. Disconnecting stops any further access; to delete files you already imported, delete them from your chat or contact support@morphic.com.

Morphic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Safety and Content Moderation

The Service may process and analyze Inputs and Outputs to detect policy violations, prevent abuse, and comply with legal or regulatory requirements. Safety filtering may block, modify, or restrict certain generation requests or Outputs. Morphic does not monitor all content and does not guarantee that any harmful or unlawful content will be detected or prevented.

Security Safeguards

Morphic implements administrative, technical, and physical measures designed to safeguard personal data. However, Morphic does not warrant that unauthorized access or compromise will never occur.

Business transactions

If Morphic is involved in a merger, acquisition, divestiture, reorganization, or sale of assets, personal data may be transferred to the acquiring or successor entity. Following such a transfer, personal data may be processed in accordance with the receiving entity's privacy policies and practices, which may differ from those of Morphic. In such cases, Morphic will take reasonable steps to ensure that users are notified of any material changes affecting their data rights.

Law Enforcement and Legal Compliance

Morphic may disclose personal data where required by law or in response to lawful requests by public authorities, including courts, regulatory agencies, or government bodies.

Morphic may also disclose personal data in good‑faith circumstances where such action is reasonably necessary to:

comply with legal obligations;
protect and defend Morphic's rights or property;
investigate or prevent potential wrongdoing related to the Service;
protect the safety of users or the public;
protect against legal liability.

International Data Transfers

Personal data may be transferred to and stored or processed in jurisdictions outside of your own, including the United States and other countries that may not provide the same level of data protection as the laws in your jurisdiction. Morphic does not commit to storing or processing data in any specific geographic region or under any specific regional data residency framework (including GDPR-specific localization), unless expressly agreed to in writing.

Personal data may be transferred to jurisdictions where data protection laws differ from those of your location. Morphic shall implement safeguards as required by applicable law when transferring personal data across borders.

Children's Privacy

Our Service is not directed to anyone under the age of thirteen (13), and we do not knowingly collect personal data from children under 13. If you are a parent or legal guardian and believe your child has provided personal data to us without your consent, please contact support@morphic.com. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will take steps to delete such information promptly.

Data Retention

Personal data will be retained only as long as necessary for the purposes outlined in this Policy or as required by law. If you choose to delete your account, your personal data will be scheduled for deletion within ninety (90) days, except to the extent retention is required by applicable law or necessary for legitimate business interests such as fraud prevention, legal compliance, or dispute resolution.

Individual Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data. To submit a request, contact legal@morphic.com or support@morphic.com.

Cookies and Tracking Technologies

The Service uses cookies and similar technologies for authentication, functionality, analytics, performance monitoring, crash diagnostics, and usage trend analysis. We may collect data such as page views, click events, navigation flows, referring URLs, advertising attribution, feature engagement, and conversion metrics.

We may use this information to:

understand how users interact with the Service;
measure the effectiveness of marketing campaigns;
personalize content, onboarding, and recommendations;
optimize user experience and product performance.

Cookies and tracking technologies may be provided by third‑party partners (e.g., analytics, marketing, and attribution vendors). Their use of data is governed by their own privacy policies.

Certain tracking technologies are essential to the operation and functionality of the Service and cannot be disabled. By using the Service, you consent to the use of these essential authentication, analytics, and performance tracking technologies.

Where required by law, we will provide options to manage non-essential cookies.

Delete Your Personal Data

You may request deletion of personal data that Morphic has collected about you by contacting support@morphic.com. The Service may also provide functionality that allows you to delete certain information directly from within your account settings.

You may update or modify personal data at any time by signing into your account and adjusting your settings. You may also contact us to request access to, update, or delete any personal information you have provided to us.

Please note that Morphic may retain certain information where legally required or where a lawful basis for retention exists, including for compliance, dispute resolution, fraud prevention, and security purposes. If you choose to delete your account, we will process your deletion request and schedule your personal data for deletion within ninety (90) days, except to the extent retention is required by applicable law or necessary for legitimate business purposes.

Contact Us

If you have any questions about this Privacy Policy, You can contact us by email: legal@morphic.com

Morphic, Inc.
2093 Philadelphia, Pike #2017,
Claymont, DE 19703

سياسة الخصوصية