Morphiq Privacy Policy

Morphiq is designed and developed by Alvaro Studio. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, with whom we share it, and the rights available to you when you use Morphiq.

Who is responsible for your data

The data controller for Morphiq is Alvaro Studio. If you have privacy questions or want to exercise your data protection rights, you can contact us at alvaro@alvarostudio.es.

Information we collect

We may collect the following information:

Your email address when you create an account or sign in.
Your name, email address, and profile image if you choose Sign in with Google.
Your marketing consent preference if you opt in to future product updates.
Basic profile, authentication, and account records required to operate the service.
Technical and usage information related to security, hosting, analytics, and performance, such as page views, referrers, browser and device information, country-level location, and web performance metrics.

How Morphiq handles your creative files

Morphiq processes uploaded images, videos, SVGs, and project files locally in your browser during normal use. We do not intentionally store your working media or project files on our servers as part of the current beta unless a future feature explicitly says otherwise.

Why we use your information

To authenticate users and provide access to Morphiq.
To operate, secure, monitor, and improve the product.
To contact you about account-related or service-related matters.
To measure traffic and performance using Vercel Analytics and Vercel Speed Insights.
To send launch news or product updates only if you have opted in.
To comply with applicable legal obligations and enforce our terms where needed.

Legal bases for processing

We process account, login, and service data because it is necessary to provide Morphiq to you and to take steps at your request before providing the service.
We process security, hosting, diagnostics, analytics, and product improvement data based on our legitimate interests in operating, protecting, and improving Morphiq.
We send marketing or product-update emails only where you have given consent, and you may withdraw that consent at any time.
We may also process personal data where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

Third-party services

Morphiq currently relies on third-party infrastructure providers, including:

Supabase for authentication and user profile storage.
Google, if you choose to sign in with Google.
Vercel for hosting, delivery, web analytics, and performance measurement.

These providers act as service providers or independent providers depending on the feature involved. We may share personal data with them only to the extent needed to operate Morphiq, authenticate you, or measure usage and performance.

Vercel Web Analytics and Speed Insights are designed to provide aggregated, privacy-focused traffic and performance information. They do not rely on traditional third-party tracking cookies for standard usage reporting.

International transfers

Some of our providers may process personal data outside your country, including outside the European Economic Area. Where applicable, we rely on the provider's approved transfer mechanisms, such as adequacy decisions or contractual safeguards, to protect your data.

Data retention

We retain account and profile information for as long as your account is active and for a limited period afterwards where reasonably necessary for security, legal, or operational reasons. If you opt in to marketing emails, we retain that preference until you unsubscribe, withdraw consent, or request deletion. Analytics and technical records may be retained for shorter periods according to our infrastructure providers' settings.

Your choices and rights

Depending on where you are located, you may have rights of access, rectification, erasure, objection, restriction of processing, portability, and the right not to be subject to solely automated decisions where applicable. You can also withdraw marketing consent at any time without affecting earlier lawful processing. To exercise your rights, contact alvaro@alvarostudio.es.

If you believe your data protection rights have been infringed, you may also lodge a complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

We aim to respond to valid data protection requests within one month, although applicable law may allow a longer response period in certain cases.

Automated decision-making

Morphiq does not use your personal data to make solely automated decisions that produce legal or similarly significant effects about you.

Changes to this policy

We may update this Privacy Policy from time to time as Morphiq evolves or as legal requirements change. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice.

Contact

For privacy questions, contact alvaro@alvarostudio.es or visit alvarostudio.es.