Privacy Policy
Last updated: 23 July 2026
Morpha, operated by Difflex Ltd ("Morpha", "we", "us"), is the video editor at morphareels.ai. This policy explains what we collect, how we use it, and the choices you have — including how we handle data from social accounts you connect for publishing.
Questions: hello@morphareels.ai.
- Account information. When you sign in with Google or with an email and password, we receive your email address and, from Google, your name and profile picture.
- Content you create. The projects you build in the editor — layers, text, animations, and settings — and the media you upload, such as video clips and images.
- Connected social accounts. When you connect Instagram or TikTok, we receive and store the OAuth access and refresh tokens those platforms issue, along with basic profile details (your username and avatar, and, for TikTok, your account's allowed posting options). We use these solely to publish the content you schedule.
- Payment information. Subscriptions are processed by Stripe. We receive your subscription status and billing metadata; we do not store your full card number.
- Assistant prompts. Text you send to Morpha's AI prompt panel, so we can generate the requested edits.
- Usage and device data. Standard server logs (IP address, request metadata) and a session cookie that keeps you signed in.
- To provide and operate the editor: rendering, storing, and serving your projects and media.
- To publish to your connected Instagram or TikTok accounts when you explicitly schedule or post a video.
- To process subscriptions and prevent abuse.
- To provide support, secure the service, and improve the product.
This section covers data we receive through the Instagram and TikTok APIs.
- We access these platforms only with your authorization, and only to publish the specific videos you schedule or post from Morpha. We never post on your behalf without an action you take.
- Access and refresh tokens are stored securely and used solely to publish your content and to keep the connection working. We do not share them with anyone.
- The Instagram/TikTok profile data we read (username, avatar, and TikTok's allowed privacy and interaction settings) is used only to show you which account you're posting as and to build a compliant post request.
- You can disconnect at any time in the editor (Share → Post → Disconnect), which deletes the stored tokens. You can also revoke Morpha's access from your Instagram or TikTok account settings.
- Our use of Instagram data complies with the Meta Platform Terms and Developer Policies; our use of TikTok data complies with the TikTok Developer Terms of Service.
We do not sell your personal information. We share data only with service providers who help us run Morpha, and only as needed:
- Cloudflare — hosting, storage (your projects and media), and content delivery.
- Stripe — subscription payments.
- Google — sign-in.
- AI providers (DeepSeek, Google Gemini, OpenRouter) — to power the assistant when you use it.
- Meta / Instagram and TikTok — to publish the content you schedule.
We may also disclose information if required by law or to protect the rights, safety, and security of Morpha and its users.
Data retention and deletion
We keep your account data and projects while your account is active. Disconnecting a social account deletes its stored tokens immediately. Deleting your account removes your projects, uploaded media, and connected-account tokens; residual copies in backups are purged on our normal backup cycle. To request deletion, email hello@morphareels.ai.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing (including rights under the GDPR and CCPA). You can exercise these rights in the app or by emailing hello@morphareels.ai. We will not discriminate against you for exercising them.
Security
We protect your data with encryption in transit, scoped access to storage, and signed, expiring credentials for media access. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.
Cookies
We use a single, essential session cookie to keep you signed in. We do not use advertising cookies. Where required, a consent banner governs any optional analytics.
Children
Morpha is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
International transfers
Morpha is operated using infrastructure that may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page.
Questions or requests: hello@morphareels.ai.