Privacy Policy

Last updated: January 2026

The privacy of your data — and it is your data, not ours — matters to us. This policy explains what information Morsl collects, why we collect it, how we use it, and the choices you have.

We never sell your data. Never have, never will.

This policy applies to all products and services built and maintained by Morsl, Inc. (“Morsl”, “we”, “our”, or “us”), including our website, dashboard, APIs, and AI voice services (collectively, the “Services”).


What we collect and why

Our guiding principle is simple: collect only what we need to operate and improve the service.

1. Identity & account information

When you create a Morsl account, we collect:

  • first and last name
  • email address
  • phone number (for call routing, alerts, or verification)
  • company or restaurant name

Why: account creation and authentication, customer support, service updates and operational notifications.

We may send product or operational emails. Marketing emails are opt-in only.

2. Billing information

If you subscribe to a paid plan:

  • billing address
  • payment metadata (last 4 digits, transaction IDs)

Important:

Payment details are processed directly by our payment processor (Stripe). Full credit card numbers do not touch Morsl servers.

Why: billing, invoicing, fraud prevention, tax compliance.

3. Product usage & interactions

We store data generated through normal use of the Services, including:

  • call logs and timestamps
  • AI-generated transcripts and summaries
  • configuration data (hours, menus, routing rules)

Why: provide call handling, reservations, and automation; allow you to review call history and performance; improve system reliability.

We retain this data while your account is active.

4. End-user (caller) data

When someone calls a business using Morsl:

  • phone number
  • call audio (if enabled)
  • transcripts generated by speech-to-text

Role clarification:

  • the business using Morsl is the data controller
  • Morsl acts as a data processor on their behalf

If you are a caller, please contact the business you called for questions about how your data is used.

5. Analytics & website data

We use analytics tools (including Google Analytics) to collect:

  • IP address
  • browser and device type
  • pages visited and time spent

Why: understand usage patterns, improve performance and UX.

We do not run ads, remarketing, or behavioral advertising.

6. Cookies

We use first-party cookies for:

  • authentication
  • session management
  • preferences

Disabling cookies may cause parts of the service to stop working correctly.

7. Emails

We send emails for:

  • account-related notices
  • service updates
  • support responses

Email delivery is handled by Brevo. Their privacy policy applies to email processing: https://www.brevo.com/legal/privacypolicy/


When we access or share information

We only access or disclose data in limited cases:

  • to operate and maintain the Services
  • to comply with legal obligations
  • to provide customer support (with permission when required)
  • to trusted subprocessors (hosting, email, analytics, payments)

We do not allow human review of call content except:

  • with customer permission
  • to resolve technical failures
  • when required by law

Legal requests

We only disclose user data when compelled by valid legal process. Where legally allowed, we notify affected users before disclosure.


Your rights

Depending on your location, you may have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion of data
  • export your data
  • object to certain processing

You can exercise most rights directly in your account or by contacting us.


Data security

We protect your data using:

  • SSL/TLS encryption in transit
  • encrypted backups
  • access controls and least-privilege policies

No system is perfect, but we take security seriously and continuously improve.


Data retention

  • account data is retained while your account is active
  • canceled accounts are scheduled for deletion within a reasonable period
  • backups are purged on a rolling basis

Some data may be retained longer if required by law.


Children

Morsl is not intended for children under 13. We do not knowingly collect personal information from children.


Location of data

Our infrastructure is primarily located in the United States. By using the Services, you consent to processing in the U.S.


Changes

We may update this policy as the product evolves or laws change. The “Last updated” date will always reflect the current version.


Contact

Questions or requests related to privacy:

Email: contact@morsl.ai