Skip to content
MORPHIX LABS
Dashboard
Legal

Privacy Policy

Last updated: November 4, 2026

This policy explains what data Morphix Labs collects when you use our website, your account and our After Effects extension Morphix Motion, why we collect it, which providers process it for us and what choices you have. We collect only what we need to run the product.

What we collect

  • Account data: your email address and a securely hashed password (we never store your password in plain text) — or, if you use Sign in with Google, your Google account ID instead of a password; account creation and last sign-in time; your email preferences and preferred language.
  • License data: license keys, plan, status and expiry, and anonymous device identifiers used to enforce the two-computer limit.
  • Usage data: counters of AI usage (seconds of audio transcribed, number of AI requests, AI tokens and their cost) used for plan limits and service statistics.
  • Support messages you send us through the dashboard, and notes our team adds to help you.
  • Purchase data is handled by Lemon Squeezy. We receive your email, order and subscription status and payment amounts — never your card details.

What the extension sends for AI features

Morphix Motion runs inside After Effects on your computer, and your projects and media files stay there. AI features send only the pieces described below. These requests go through our server, which checks your license, counts usage and forwards the content to the provider; our server does not keep copies of your audio, video frames or transcripts. The extension keeps transcripts and results in a local cache on your computer so you are not charged twice for the same clip.

AI captions

The audio of your composition is sent to a speech-to-text provider (Groq or ElevenLabs). Caption text may be sent to an AI model (Anthropic Claude or Groq) for cleanup and proofreading.

Rough Cut

  • Audio: the extension extracts the audio of your raw clips and sends it in compressed parts to ElevenLabs (Scribe) for transcription. If you choose the local Whisper engine instead, transcription runs on your computer and no audio is uploaded.
  • Transcripts (text with word timings) are sent to Anthropic Claude to choose the best takes, proofread captions and plan the edit (hook, zooms, B-roll, transitions).
  • Still frames: a few small, low-resolution images taken from your clips are sent to Anthropic Claude to detect the clip orientation and suggest a color correction.
  • B-roll: short search phrases generated from your transcript are sent to Pixabay through our server. The matching stock videos are downloaded directly from Pixabay, and their preview images are checked by Claude for relevance.
  • Hook emoji: only the emoji character is looked up, through our server, in Telegram's public animated-emoji set; if it is not there, the extension downloads the animation from Google's Noto Emoji library.

Podcast to Reels

  • Audio of your podcast video is sent in parts to ElevenLabs (Scribe) to transcribe it and tell the speakers apart.
  • Still frames from the video are sent to Anthropic Claude to find where the people sit in the shot and which person is speaking. These frames can show the faces of the people in your video — please make sure you are allowed to process that footage.
  • The transcript is sent to Anthropic Claude to suggest moments for Reels.

Voice cleanup (Enhance)

The audio or video file you choose in the dashboard is uploaded directly from your browser to our processing service hosted on Modal, which separates the voice from music and noise. The service receives a pseudonymous account identifier (a one-way hash of your email), not your email address. Uploaded files and results are deleted automatically within 24 hours, or immediately when you remove the job.

Each AI provider processes this content to return your result, under its own terms and data-retention policy.

How we use data

  • To provide the Service: sign-in, license activation, downloads, updates, AI features and support.
  • To send emails in your preferred language: one-time sign-in codes, security notices, welcome, purchase and license emails, expiry reminders and — if you allow it — release news and product updates.
  • To prevent abuse (rate limits, device limits) and to understand overall usage and costs.

We do not sell your personal data and do not use it for third-party advertising.

Service providers

We rely on these providers to operate. They process data on our behalf only as needed to provide their service:

  • Hetzner Online GmbH (data centre in Nuremberg, Germany) — hosting of our website, API server and installer files.
  • Upstash (AWS eu-central-1 — Frankfurt, Germany) — database: account, license, usage, support and sales records.
  • Lemon Squeezy — checkout and payments as Merchant of Record (including taxes and invoices), subscriptions, license keys and our affiliate program.
  • Google — Sign in with Google, if you choose it (we receive your email address and Google account ID).
  • Email delivery — Resend, which delivers our emails to your address.
  • Anthropic (Claude) — caption text, transcripts and still frames for AI features.
  • ElevenLabs (Scribe) — audio for speech-to-text and speaker separation.
  • Groq — audio for speech-to-text (Whisper) and caption text for cleanup.
  • Modal — files you upload for voice cleanup.
  • Pixabay — B-roll search phrases.
  • Telegram — animated-emoji lookup (only the emoji character, no personal data).

Some of these providers may process data outside your country, including in the United States.

Other content we load: our fonts are served from our own server. Tutorial videos are hosted on YouTube (privacy-enhanced mode) or Vimeo (with “do not track”); the player loads only when you press play, and YouTube preview images load from YouTube's image server. Some downloads — the installer, speech-recognition models and helper tools for the extension, fallback emoji animations and an animation library — come from public hosts such as GitHub, Hugging Face, nodejs.org, jsDelivr and Google. Like any website, these hosts see your IP address.

Cookies and local storage

  • An essential sign-in cookie that keeps you signed in (it expires after 30 days or when you sign out).
  • A language cookie and a browser storage entry that remember the language you chose (1 year).
  • Short-lived security cookies during Sign in with Google (10 minutes).

The checkout and the affiliate script on our product pages are provided by Lemon Squeezy, which may set its own cookies needed for payment and to credit affiliate referrals. We do not use advertising or analytics cookies.

Retention

  • Account data is kept while your account exists. One-time sign-in codes expire after 10 minutes.
  • Detailed usage counters are kept for 2 days (daily) and 35 days (monthly); trial usage counters for 120 days. Aggregated statistics are kept longer: daily totals for 400 days, and per-license monthly and lifetime totals together with the license record.
  • Our server logs record technical events without the content you send to AI features; email addresses in logs are replaced with a short one-way hash.
  • When you delete your account, your profile, notifications and support messages are deleted; license and payment records may be kept as required for accounting and to restore licenses if you sign up again with the same email.

Your rights and choices

  • Change your email or password, sign out of all devices, turn off news/update emails, or delete your account in Dashboard → Settings. You can change the language of the site and our emails with the language switch.
  • Every news email contains an unsubscribe link.
  • You can ask us for a copy of your data or for corrections by contacting us.

Security

Passwords are hashed with scrypt, new accounts and password resets are confirmed with a one-time email code (also required for admin sign-ins and unusual sign-in activity), provider API keys stay on our server, installer downloads use short-lived private links, and all traffic uses HTTPS. No system is perfectly secure, but we work to protect your data.

Children

The Service is not intended for children under 16.

Changes and contact

We may update this policy; significant changes will be announced. Contact: labsmorphix@gmail.com.