Privacy policy

Last updated 2026-10-31. This is the policy for the Morph connector and service at runmorph.dev.

What we collect

• Account: the e-mail address, name and Google Workspace domain that Google gives us when you sign in; your workspace memberships, roles and invitations. We do not receive your Google password or access to your Google data.
• Sign-in tokens: stored only as one-way hashes; access tokens last 1 hour, refresh tokens 30 days, and are revoked when you sign out.
• Usage measurement: for each tool call, the tool name, whether it succeeded, how long it took and the short one-sentence reason the agent gives for the call (which the agent is told to write without personal data). Never the arguments, never the rows or results. Sent to PostHog (EU region).
• Website measurement: on the marketing website, which page was viewed, the kind of site that sent the visitor (for example a search or AI assistant), and which buttons were used (for example copying the connector address or a prompt, or which tools were ticked in the prompt builder). No cookies, no profile, nothing you type, and nothing at all if your browser sends Do Not Track or Global Privacy Control.

Your data

• Free workspace: the data stays on your Mac, in an encrypted file. Our service relays your requests to your Mac and back in memory; it does not store them.
• Cloud workspace (paid plans): the data is stored in an encrypted file (SQLCipher) on our hosting provider's disk in Frankfurt (Germany). A daily encrypted backup is kept for 14 days. Connector secrets you enter are stored inside that encrypted file and are never returned by any tool.
• Data you ask Claude to read is sent to Claude, under the terms of your Claude plan. We do not use your data to train models and we run no language model on our servers.

Who we share it with

Only the providers that run the service: Google (sign-in), Render (hosting, Frankfurt), PostHog (usage measurement, EU), Amazon Web Services (DNS for the domain). We do not sell data or use it for advertising.

Retention and deletion

Account data is kept while your account exists. Cloud workspace data is kept until the workspace is deleted. On request we delete your account and your cloud workspaces, and backups expire within 14 days. Free workspaces are on your Mac: deleting the app’s data folder deletes them.

Your rights

You can ask for access, correction, export or deletion of your personal data. Write to support@runmorph.dev; we answer within 30 days.

Security

Encryption at rest for every workspace, encryption in transit (HTTPS), per-person rights down to the column, read-only database connections for every agent read, and an activity log. Please report a vulnerability to the address above.