Privacy policy

What we collect

• From your Google account, when you sign in with Google: your name, email address and profile picture. Nothing else (the section below has the details).
• Your profile: the name you choose, your phone number, and, if you tell us, your role and how you heard about Morfy.
• The early access list: your email, name, role, how you heard about us and what you'd use Morfy for.
• Downloads: what you downloaded or copied, in which format, and when. That's how the daily limit and your download history work, and it's the record of your licence for what you downloaded.
• Payments: when you buy or renew a plan, the plan and its price, the name, email and phone number on the order, your GSTIN if you give one, and what Razorpay tells us about the payment (whether it went through, how you paid, and its reference). Your card, UPI or bank details go to Razorpay, not to us.
• Work you save: your gallery, decks, Pop Fonts work and videos you add to decks. For decks you share with a team: the email addresses you invite, their roles, comments, and who is looking at which slide.
• Signing in with your mobile number: your number, to text you a one-time sign-in code (it expires after 10 minutes), and a record of each text: when it was sent, whether it was delivered, and the IP address that asked for it, so we can spot misuse and limit how many are sent. If you join this way, we also keep the email address you give us, to reach you.
• Signing in with your email: your email address, to send you a one-time sign-in code (it expires after 10 minutes), and a record of each code email: when it was sent, and the IP address and browser that asked for it, so we can spot misuse. If you tell us you didn't ask for a code, we note that too.
• Signing in: a cookie that keeps you signed in, and the IP address and browser each sign-in came from, so we can keep accounts safe.
• Invite codes you use.
• Visits and page speed: which pages are opened, the site that sent you, your country, and your browser, operating system and kind of device, and how fast pages load for you. This is counted without cookies and without keeping your IP address: a visitor is told apart only by a code that changes every day, so a visit can't be linked to you or to your visits on other days.

Data from your Google account

If you sign in with Google, Morfy asks Google only for your basic profile: your name, email address and profile picture. We never see your Google password, and we can't read your Gmail, Drive, contacts or anything else in your Google account.

• How we use it: to create your Morfy account and sign you in, to show your name and picture in your profile, to link your downloads and saved work to you, and to write to you about your account.
• Where it's kept: in our database in Mumbai, India, with the rest of your account.
• Who sees it: you, and the people you share a deck with (they see your name and picture on the deck). We don't sell it, don't use it for advertising, and don't share it with anyone except the services listed under "Who handles it for us", which store it for us.
• How long: until you ask us to delete your account. You can also remove Morfy's access at any time in your Google Account, under Security, third-party connections.

Morfy's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

What stays in your browser

Canvas designs, your page preferences and some caches are kept in your browser, not on our servers. Clearing this site's data removes them. Work you did before joining (saved decks, Pop Fonts, your brand studio) is copied to your account when you join or sign in.

Cookies

One cookie keeps you signed in. We don't use advertising cookies or track you across other sites.

Why we use it

• To give you an account, keep you signed in and keep accounts safe.
• To run downloads and the daily limit.
• To save your work, and to share decks with the people you choose.
• To run the early access list and invites.
• To answer you when you write to us.
• To count visits and see how fast pages load, so we can improve the site.

We don't sell your data, and we don't use it for advertising.

Who handles it for us

• Vercel serves the website, and counts visits and page speed for us (Vercel Web Analytics and Speed Insights).
• Amazon Web Services runs our server, stores files and sends our emails (sign-in codes and invites), in Mumbai, India.
• Supabase hosts our database, in Mumbai, India.
• SpringEdge sends our text messages (sign-in codes), in India.
• Razorpay takes payments for plans, in India. It handles your card, UPI or bank details under its own privacy policy.
• Google handles sign-in with Google, and serves some of the web fonts the site uses.

They handle data only to provide those services to us.

How long we keep it

We keep your account and your saved work until you ask us to delete them. Sign-ins end when you sign out or when they expire. When we delete an account, its profile, saved work, files and sign-ins go; the record of what was downloaded stays, with nothing that links it to you. Payment records (orders, amounts and invoices) are kept as long as tax law requires, even after an account is deleted.

Your choices

• See and change your profile on your profile page.
• Remove items from your gallery and your download history there too.
• Ask for a copy of your data, a correction, or to delete your account: write to eventoo1224@gmail.com from the email on your account. We'll reply within 30 days.
• Disconnect Morfy from your Google account at any time, in your Google Account under Security, third-party connections.

Children

Morfy is for people aged 18 and over. If you think a child has given us their details, write to us and we'll delete them.

Keeping it safe

Everything travels over HTTPS. The database and files sit in private storage that only our server can reach. No system is perfectly secure; if something happens that affects your data, we'll tell you.

Changes

When this page changes, the date at the top changes too. If it's a big change, we'll tell you on the site or by email.

Contact

Eventoo Designs Pvt Ltd, which runs Morfy, India. Write to eventoo1224@gmail.com. Our terms of service cover using Morfy and what you download.