Legal
Privacy Policy
Effective 2026-10-08 · Version 2026-10-08 · BI Squared (PTY) LTD
Information we process
We process account and authentication details, regional preferences, age and policy acceptance records, documents you upload, extracted and confirmed information, commitments, reminders, question history, billing identifiers, usage counters and operational events. Payment details are processed by Lemon Squeezy; MorrowCue does not store your full payment card information.
Purposes and choices
We use this information to provide requested services, manage subscriptions, protect accounts, limit misuse, resolve support requests and maintain service reliability. Optional analytics are disabled until you consent and can be turned off using Analytics preferences. We do not sell customer documents.
Documents and AI
Documents are kept in private storage with user-scoped access. For requested analysis, the selected document is sent to OpenAI. For grounded questions, the question and relevant confirmed information and evidence are sent to OpenAI. OpenAI response storage is explicitly disabled. Your documents are not used to train OpenAI models through our API integration. OpenAI may retain limited data for abuse monitoring under its applicable policies; disabling response storage is not a promise of zero retention.
Service providers and international processing
Supabase supplies authentication, database and storage; Vercel hosts the application; OpenAI supplies requested AI processing; Resend delivers authentication and reminder email; Lemon Squeezy acts as Merchant of Record. If configured, Sentry receives scrubbed technical error events and PostHog receives consented, limited product events. See the subprocessor list. Providers may process data internationally. We do not claim that all data remains in one country.
Analytics and monitoring boundaries
Analytics exclude document contents, filenames, commitment names, account references, evidence and monetary amounts. Authenticated document screens are not recorded. Error monitoring excludes customer documents, prompts, account references and secrets. AI telemetry contains model, token counts, timing, success or failure and internal identifiers, with user-scoped access.
Retention and deletion
Your account records remain available while you use MorrowCue, including after a subscription expires, unless you delete them or request account deletion. Settings provides account deletion, which removes MorrowCue customer records and private document objects. Individual documents can also be deleted. Billing providers may retain records required for accounting, tax, fraud prevention and other legal obligations. Copies in provider backups may persist according to provider backup schedules; we do not promise immediate deletion from every backup.
Your rights and contact
You may correct account preferences and confirmed information, delete documents, withdraw optional analytics consent and contact us about access, export, deletion, objection or other rights available under applicable law. Privacy requests: support@morrowcue.com. We may verify account ownership before responding.