Morphica Privacy Policy

Our Commitment to Your Privacy

Your Privacy Matters

Morphica Studio helps businesses and agencies create on-brand social media posts and publish or schedule them to their Instagram accounts. To do that we need certain information from you and, with your permission, from Instagram. We collect only what the Service needs, we use it only to operate and improve the Service, and we never sell it.

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

Information We Collect

Information You Provide to Us

• Account Information: Name, email address, and profile picture when you sign in with Google or create an account.
• Brand Information: Brand names, logos, colour palettes, fonts, product images, and other assets you upload to build your brand profile.
• Content Information: Captions, prompts, templates, designs you create or generate, and the posts you publish or schedule through the Service.
• Payment Information: Billing details required to purchase credits, processed by our payment provider, Dodo Payments. We never receive or store your full card or bank details.
• Communication Data: Messages you send us through support channels, email, or contact forms.

Information We Receive From Instagram

When you choose to connect an Instagram professional account to Morphica Studio, you authorise Meta Platforms, Inc. ("Meta") to share the following with us through the Instagram API:

• Your Instagram username, account ID, and profile picture.
• An access token that allows Morphica Studio to publish content to that account on your behalf.
• Basic information about posts that Morphica Studio has published to that account, so we can show you their status.

We receive this information only after you complete Instagram's authorisation screen and accept the permissions it lists. We do not access your direct messages, followers, or any content you did not create in Morphica Studio.

Information We Collect Automatically

• Usage Data: Features used, pages visited, posts created, and scheduling activity.
• Technical Information: IP address, browser type, device information, and operating system.
• Cookies: Small files that remember your preferences and keep you signed in.

How We Use Your Information

• Service Delivery: To operate Morphica Studio, manage your account, generate designs, and publish or schedule posts to the social accounts you connect.
• Instagram Publishing: To identify which account you have connected, confirm you are publishing to the right account, create and publish the posts you approve, and show you the status of published posts.
• Credits and Billing: To allocate credits, record usage, and process purchases. Current plans and prices are listed on our Pricing page.
• Communication: To send account notices, respond to support requests, and tell you about changes to the Service.
• Platform Improvement: To understand how the Service is used and to improve its features.
• Security: To detect and prevent fraud, abuse, and unauthorised access.
• Legal Compliance: To meet our obligations under applicable law.

How We Use Instagram Data

Information we receive from Instagram ("Platform Data") is used solely to provide the publishing and scheduling features you have asked for. In particular:

• We use your access token only to publish content that you have created and explicitly approved, either immediately when you click Publish or at the time you selected when you click Schedule.
• We do not use Platform Data to train AI models, to build advertising profiles, or for any purpose unrelated to the Service.
• We do not sell, license, or transfer Platform Data to any third party, except to the service providers listed below that help us operate the Service under confidentiality obligations.
• We comply with the Meta Platform Terms and Developer Policies in our handling of Platform Data.

You can revoke our access at any time by disconnecting the account in Settings, or by removing Morphica Studio from your Instagram account's connected apps. When you disconnect, we delete the access token immediately.

Information Sharing

We Do Not Share Your Personal Data for Marketing

We do not sell your personal information, rent or lease it to marketers, share it with advertisers, or provide it to data brokers.

Limited Circumstances in Which We Share Information

• Meta Platforms, Inc.: When you publish or schedule a post, the content you created (images, captions, and related data) is transmitted to Instagram through Meta's API. Meta handles that content under its own terms and privacy policy.
• Service Providers: Trusted providers that help us operate the Service, including cloud hosting (currently Railway), payment processing (Dodo Payments), AI model providers that generate designs from your prompts and brand assets, email delivery, and analytics. They may access information only to perform services for us and are bound by confidentiality obligations.
• Legal Requirements: If required by law, court order, or a lawful request from a government authority.
• Safety and Security: To protect the rights, property, or safety of Morphica, our users, or the public.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the new entity, which will be bound by this Policy.
• Public Information: Content you choose to publish to your social accounts is public on those platforms by your own action.

Data Security and Protection

• Encryption: Data is encrypted in transit and at rest using industry-standard protocols.
• Token Protection: Instagram access tokens are stored encrypted on our servers and are never exposed to your browser or to other users.
• Access Controls: Only authorised personnel can access personal data, and only as needed to operate the Service.
• Secure Infrastructure: The Service is hosted on secure cloud infrastructure with regular security reviews.
• Payment Security: Payments are handled by PCI-compliant providers; we never hold full card details.
• Data Minimisation: We collect and retain only what the Service needs.

Data Retention

• Account Data: Retained while your account is active and for up to 30 days after you delete it, unless a longer period is required by law.
• Instagram Access Tokens: Retained only while the account remains connected. Deleted immediately when you disconnect the account or delete your Morphica account.
• Brand Assets and Content: Retained until you delete them or delete your account.
• Published Post Records: Retained until you delete the post record or your account.
• Support Communications: Retained for up to 2 years for quality assurance.
• Analytics Data: Retained in aggregated or anonymised form.
• Legal Compliance: Some data may be retained longer where the law requires.

Data Deletion

You can delete your data in any of the following ways:

1. Disconnect an Instagram account: Go to Settings, open Connected Accounts, and click Disconnect. The access token for that account is deleted immediately and we stop all publishing to it.
2. Delete your Morphica account: Email support@morphica.studio from the email address linked to your account and ask us to delete it. All personal data, brand assets, content, and connected account data are deleted within 30 days, and we will confirm once the deletion is complete.
3. Remove Morphica Studio from Instagram: In Instagram, go to Settings, Apps and Websites, and remove Morphica Studio. Instagram notifies us and we delete the related data.
4. Delete specific data: Write to support@morphica.studio from the email address linked to your account to have particular brand assets, content, or records deleted without closing your account. We normally complete such requests within 30 days.

Your Privacy Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your data as described above.
• Portability: Request your data in a commonly used format.
• Objection and Restriction: Object to, or request limits on, certain processing.
• Withdrawal of Consent: Withdraw consent at any time, including by disconnecting a social account.
• Grievance Redressal: Raise a concern with our grievance contact at support@morphica.studio.

To exercise any of these rights, contact us at support@morphica.studio. We aim to respond within 5 business days.

Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Sign-in, security, and core functionality.
• Preference Cookies: Remembering your settings.
• Analytics Cookies: Understanding how the Service is used.

You can disable cookies in your browser, but some features may not work without essential cookies.

International Data Transfers

Morphica is based in India and may process data on servers located in other countries. Where data is transferred outside India, we use safeguards recognised under applicable law.

Age Requirements

The Service is intended for businesses and individuals aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with data, contact us and we will remove it.

Third-Party Platforms

Instagram and Meta are trademarks of Meta Platforms, Inc. Morphica is an independent service and is not affiliated with, endorsed by, or sponsored by Meta. Your use of Instagram is governed by Meta's own terms and privacy policy.

Changes to This Privacy Policy

We may update this Policy from time to time. When we do, we will update the Last Updated date, notify account holders by email for material changes, and post a notice on the Service. Continued use after changes take effect constitutes acceptance of the revised Policy.

Contact Us

• All Inquiries (privacy, grievances, support): support@morphica.studio
• Postal Address: Morphica, R.S.No.249/A/1/52, Plot No. 24, Nagala Park, Kolhapur, Maharashtra 416003, India
• Response Time: We aim to respond within 5 business days.