Privacy Policy

1. Who we are

MorrnIx (“MorrnIx”, “we”, “us”) is a procurement intelligence platform for commercial construction companies. This policy explains what information we collect, how we use it, and the choices you have. It applies to everyone who uses MorrnIx, including accounts created by your company.

2. Information we collect

We collect:

• Account information: the email address and password you use to sign in (handled by our authentication provider, Supabase), and your company profile.
• Business data you enter: projects, suppliers, materials, purchase orders, and communication records you or your team create in MorrnIx.
• Connected email account information (only if you choose to connect one): the mailbox address associated with the Gmail or Microsoft account you connect, and an encrypted OAuth token that lets MorrnIx send email on your behalf. See Section 3 for details specific to Gmail.
• Emails sent through MorrnIx: if you send an email using a connected mailbox, we store a copy of that email (recipients, subject, body, and any attachment filenames) as a permanent business record, the same way we record a phone call or meeting note - this is the core recordkeeping function of the product.

We do not collect data for advertising, and MorrnIx does not use any third-party analytics or tracking service.

3. Gmail and Microsoft Outlook integration

MorrnIx lets you connect your own Gmail or Microsoft Outlook mailbox so you can send supplier emails from your real address instead of a generic MorrnIx address. When you connect an account:

• We request only the permission to send email on your behalf (the gmail.send scope for Gmail, or Mail.Send for Outlook), plus your basic profile (name and email address) so we can show you which account is connected.
• MorrnIx never requests, and cannot use, any permission to read, search, or otherwise access the content of your inbox. We only ever send messages that you compose inside MorrnIx.
• Your OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) and stored separately from your other account data, accessible only to the server process that sends your email - never exposed to other users, even within your own company.
• You can disconnect a connected mailbox at any time from Settings › Connected Email Accounts. Disconnecting immediately and permanently deletes the stored tokens; a record that a connection once existed is kept for your account’s audit history, but it can no longer be used to send anything.

MorrnIx’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

We use your information solely to provide and improve MorrnIx: to operate your account, store the business records you create, send emails you explicitly ask us to send, and provide customer support. We do not sell your information, and we do not share it with third parties for their own marketing purposes.

5. Who can see your data

Your business data is scoped to your company account - other MorrnIx customers cannot see it. Within your company, access follows the role your administrator assigns you. We use Supabase as our database and authentication infrastructure provider; Supabase processes data on our behalf under its own data protection commitments and does not use your data for its own purposes.

6. Data retention and deletion

We retain your data for as long as your account is active. Connected-mailbox OAuth tokens are deleted immediately when you disconnect that mailbox. To request deletion of your account or its data, contact us at rahulmorrning@gmail.com.

7. Security

We use industry-standard safeguards to protect your information, including encryption of stored OAuth tokens, row-level access controls that isolate each company’s data, and encrypted connections (HTTPS) for all traffic to MorrnIx.

8. Changes to this policy

We may update this policy as MorrnIx changes. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you directly.

9. Contact us

Questions about this policy or your data? Email us at rahulmorrning@gmail.com.