Privacy Policy

1. Who we are

Morphixlab (the "Service") is an AI character and video studio available at morphixlab.com. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to the website and every feature of the Service.

Questions or privacy requests: support@morphixlab.com.

2. Information you give us

• Account details — your email address and, if you sign up with a password, a one-way hash of that password. We never store your password in readable form.
• Content you create — characters, prompts, scripts, reference images you upload, and the images, voiceovers and videos generated from them, along with project names and settings.
• Messages you send us — anything you submit through the in-app support assistant or by email.

3. Information from Google sign-in

If you choose "Continue with Google", Google authenticates you and shares the details covered by the permissions you approve — typically your name, email address and profile picture URL. We use these to create and display your account. We do not receive your Google password, and we do not access your Gmail, Drive, Calendar or contacts. You can revoke our access at any time from your Google Account permissions page.

4. Payment information

Paid plans and credit packs are processed by Stripe. Your card number never reaches our servers. Stripe shares back only what we need to run your plan: a customer identifier, your subscription and invoice status, and the email address associated with the purchase.

5. Information collected automatically

We and our hosting provider automatically log standard technical data — IP address, browser and device type, referring page, and error and performance events — to keep the Service secure and working. We store your authentication session in your browser's local storage so you stay signed in between visits. We do not use advertising or cross-site tracking cookies.

6. How we use your information

• To create your account, authenticate you and keep you signed in.
• To generate the images, voiceovers and videos you ask for.
• To track and spend credits, and to bill subscriptions and credit packs.
• To send transactional email (sign-in confirmations, receipts, credit and project notices).
• To operate the support assistant and respond to you.
• To detect abuse, enforce our Terms, and debug and improve the Service.

We do not sell your personal information, and we do not use your content to train our own models.

7. Sharing with service providers

We share personal information only with the processors that make the Service work, and only as needed:

• Supabase — authentication, database, file storage and server-side functions. Our project is hosted in the European Union (Frankfurt).
• Google — optional sign-in, and public video metadata when you paste a YouTube link into the importer.
• Stripe — payments, subscriptions and the customer billing portal.
• Resend — delivery of transactional email.
• OpenRouter — AI image, video and speech generation. Your prompts and any reference image or audio you supply for a generation are transmitted so the model can produce the output.
• Shotstack — cloud video rendering, which receives the assets of the project you ask us to render.
• Cloudflare — website hosting, CDN and security.

We may also disclose information where the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or acquisition of the Service.

8. Legal bases and international transfers

Where the GDPR applies, we process your information to perform our contract with you (running your account and generations), to comply with legal obligations (tax and accounting records), and for our legitimate interests in securing and improving the Service. Some processors above are based outside the European Economic Area; where that is the case we rely on their standard contractual clauses and equivalent safeguards.

9. How long we keep it

We keep your account for as long as it exists. Files you create are deleted automatically after a set time that depends on your plan: files in Assets and video projects are kept for 7 days on the Free and Starter plans, 30 days on Essential and 90 days on Advanced, and image history and animation history are kept for 7 days. You can delete any of them sooner, or delete your account. Payment and invoice records are kept as long as tax and accounting law requires. Security and error logs are kept for a short period and then discarded.

10. Your rights

You can access and update your profile in the app, and you can delete your account yourself. You may also ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or send it to another service. Email support@morphixlab.com and we will respond within the timeframe the law allows. If you are in the EEA or the UK you also have the right to complain to your national data-protection authority.

11. Children

The Service is not directed at children. You must be at least 13 years old to use it, and at least 16 where your country sets that age for consenting to online services. We do not knowingly collect information from children below those ages; if we learn we have, we will delete it.

12. Security

Data is encrypted in transit, access to production data is restricted, and our database enforces per-user row-level rules so one account cannot read another's content. No online service can promise perfect security; if we ever suffer a breach affecting your rights, we will notify you and the relevant authority as the law requires.

13. Changes to this policy

We may update this policy as the Service changes. We will post the new version here and change the "last updated" date above. Material changes will also be announced in the app or by email.

14. Contact

Morphixlab — support@morphixlab.com. See also our Terms of Service.