1. Scope and controller
This Privacy Policy applies to moritory.com, the Moritory Studio at moritory.com/app/, and related services that link to this Policy (together, the “Service”).
Moritory is responsible for the personal data processing described here. This Policy does not govern files after you download and process them on your own computer, or third-party services you choose to use independently.
2. Data we collect
Google account information
When you choose “Continue with Google,” we receive the basic identity information needed to create and display your Moritory account: your Google account identifier, email address, display name, and profile image when available. We do not receive your Google password.
Workspace content
We store content you enter into Studio, including story and screenplay text, characters, scenes, props, shot descriptions, project settings, workflow state, and related metadata. The current Service does not automatically upload the local render package you export to your computer.
Technical and support information
Our hosting, authentication, and database providers may process IP address, device and browser information, request logs, timestamps, and security events. If you contact us, we process the details in your message and the contact information you provide.
3. How we use data
- Authenticate you and keep your session active.
- Associate your private workspace with your account and synchronize edits.
- Operate, secure, troubleshoot, and improve the Service.
- Respond to support, privacy, and legal requests.
- Comply with law and protect users, Moritory, and the public.
Where the European Economic Area or similar laws apply, we rely on performance of our agreement with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where the law requires it.
4. How we use Google user data
Moritory uses Google account data only to sign you in, identify your account in the interface, and connect your saved workspace to that account.
We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models. We do not request access to Gmail, Drive, Calendar, contacts, or other Google product content.
Google data is stored or processed only as needed to provide authentication and the user-facing Service, subject to the Google API Services User Data Policy, including its Limited Use requirements.
6. Retention, cookies, and deletion
We retain account and workspace data while your account is active and for as long as reasonably needed to provide the Service, resolve disputes, enforce agreements, maintain security, and meet legal obligations. Residual copies may remain temporarily in protected backups.
Moritory currently uses browser storage necessary for Supabase authentication and session continuity. We do not currently use advertising cookies or third-party behavioral analytics.
Delete your data
You may request deletion of your Moritory account and associated cloud workspace by emailing privacy@moritory.com from the email address connected to your account. We may ask you to verify your identity before completing the request. Files you exported to your own device remain under your control and must be deleted by you.
7. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of data, withdraw consent, and complain to a data protection authority. Some rights have legal exceptions.
To exercise a right, email privacy@moritory.com. We will respond within the period required by applicable law and may need to verify your identity.
8. Security, transfers, and children
We use reasonable administrative, technical, and organizational safeguards, including encrypted network connections, account authentication, and database access policies designed to separate user workspaces. No online service can guarantee absolute security.
Our providers may process data in countries other than your own. Where required, we rely on recognized transfer mechanisms and safeguards. Moritory is not directed to children under 18, and we do not knowingly collect their personal data.
9. Changes and contact
We may update this Policy as the Service develops. Material changes will be communicated through the Service or another reasonable channel, and the date above will be updated.
For privacy questions or requests, contact privacy@moritory.com.