MorrowPilot Privacy Policy

1. Information we collect

• Account data such as name, email, authentication provider, language, workspace membership, and an account phone number if you choose to provide one.
• Business content such as customer records, quotes, job updates, images, invoices, payments, support requests, and configuration.
• Subscription and transaction status from Stripe. MorrowPilot does not store complete payment-card numbers.
• Technical and security information such as timestamps, browser details, IP-derived security signals, audit events, and error logs.
• Website and application activity such as pages viewed, registration and trial milestones, referring page, sanitized campaign parameters, and advertising click identifiers. Our product-event interface does not send names, email addresses, phone numbers, free-form fields, or customer records to analytics tools.

2. How we use information

• Provide, secure, maintain, and improve MorrowPilot.
• Authenticate users, isolate workspace data, process subscriptions, deliver requested emails, and provide support.
• Measure whether visitors understand and complete registration, attribute campaigns, evaluate advertising effectiveness, and improve onboarding.
• Use an optional account phone number for account security, support, or operational communications you request. Providing a number does not enroll you in SMS marketing; any future marketing-text program will require separate consent.
• Detect abuse, investigate failures, preserve audit history, and comply with legal obligations.
• Communicate important product, security, billing, and policy updates.

3. Service providers

We use carefully selected providers to operate the service, including Google Cloud for hosting and storage, Stripe for subscription billing, Resend for transactional email, and Google or Microsoft when you choose social sign-in. When enabled, Google Analytics 4 and the Meta Pixel help us measure product adoption and advertising results. These tools may process the page URL, referring page, browser or device identifiers, IP address, and limited event data under their own terms and data-protection commitments.

4. How information is shared

We do not sell personal information for money. We share information with service providers needed to operate MorrowPilot, with analytics and advertising providers for the limited measurement purposes described above, with workspace users according to their roles, when you direct us to share a customer link or email, during a corporate transaction with appropriate protections, or when legally required. Some laws may define advertising measurement as “sharing”; the controls below let you turn off these third-party tools in this browser.

5. Retention and deletion

We retain information while an account or workspace is active and as reasonably needed for backups, security, billing, dispute resolution, and legal compliance. Workspace owners may request export or deletion, subject to contractual and legal retention requirements.

6. Security

We use access controls, encryption in transit, managed secrets, tenant isolation, logging, and backups designed to protect information. No online service can guarantee absolute security; notify us promptly if you believe an account has been compromised.

7. Your rights

You may update workspace information, manage team access, choose communication settings, and request access, correction, export, or deletion of personal information. Rights vary by location. We may verify identity before completing a request.

9. Children

MorrowPilot is a business service and is not directed to children under 13. We do not knowingly collect personal information from children through account registration.

10. Policy updates

We may revise this policy as the service or legal requirements change. We will post the effective date and provide additional notice for material changes when appropriate.