Effective Date: October 30, 2026
Morphed Social (“we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit morphed.social (the “Site”) or use our services.
We may collect the following types of information:
We use the information we collect to:
We do not sell or rent your personal information. We may share information with:
We use cookies, tracking pixels, and analytics tools (such as Google Analytics) to understand how visitors use our Site. You may disable cookies in your browser, but some features may not function properly.
When an authorized workspace manager connects Google Analytics, Morphed Social requests only read-only access (analytics.readonly). We read the available Analytics account and property names and identifiers so you can choose a GA4 property for that workspace. For the selected property, we read its name, identifier, timezone and currency, together with aggregate website reports for Organic Social and Organic Video. These reports include sessions, engaged sessions, active users, engagement rate and key events, with date, channel, source/medium, campaign and content labels.
This information is used to display and export website-attribution reports to users who have analytics access in that workspace and to operate that reporting feature. The connection cannot edit your Analytics property or website tracking. Data obtained through this connection is not sold, used for advertising targeting, sent to AI caption-generation services, or used to create or publish social posts.
We encrypt the OAuth access and refresh credentials stored on our servers. We cache property metadata and aggregate reports to provide the reporting feature and may retain older reports during temporary Google errors. Access is controlled by workspace permissions. Our hosting and other service providers process this information only as needed to operate and secure the feature.
Disconnecting Google Analytics in the workspace removes its locally stored OAuth credentials, selected-property information and cached reports. It does not delete data from Google Analytics or revoke other grants made to the same Google application. You can separately remove the application’s access through your Google Account’s third-party connections settings. Contact [email protected] for assistance with access or deletion.
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
When you connect Google Drive, we request your Google account identifier and verified email address (openid and email), plus access to files you choose with Google Picker (drive.file). Google describes this per-file permission as allowing file management; this import feature only reads and downloads selected files. It does not edit or delete your Drive originals, request access to your entire Drive, or monitor folders for new files.
We read selected file contents and metadata needed to import and verify them, such as names, identifiers, type, size, version, modification time, download permissions, checksums and file access keys. We copy supported images, videos and PDFs into the selected workspace’s content library, and export supported Google documents as PDF copies. Your Google connection belongs to your signed-in user and workspace. Imported copies are available to people authorized to use that workspace’s library; Google sharing settings do not control those separate copies.
We encrypt the OAuth access and refresh credentials stored on our servers and pass a short-lived access token to Google Picker in your browser. Our hosting and storage providers process file contents and metadata to complete imports and operate and secure the library. We retain imported copies, source identifiers, file versions and checksums, import status and audit records to support your library, prevent duplicate imports and troubleshoot failures. We do not sell this Google data.
Importing does not itself create or publish a social post or enable an automation. Imported content can subsequently be used in publishing, queues and library automations that an authorized workspace user configures, including rules already enabled for the selected folder or tags. Those uses follow the workspace’s permissions and approval settings and may send the chosen content to connected publishing services. Drive import does not automatically send file contents to AI services. If an authorized user approves an imported image as a brand reference and selects it for an AI image-generation or editing request, the selected image and request information are sent to our AI provider to perform that request.
Disconnecting Drive removes this user’s locally stored Google credentials and account identity from that workspace and cancels unfinished imports. It does not revoke Google’s account-level authorization or disconnect other workspace connections. You can separately remove the application’s access in your Google Account’s third-party connections settings. Disconnecting or revoking access does not remove existing library copies, retained import records, derived content, automation rules, or previously scheduled or published content. Archiving a library item is not deletion. Contact [email protected] for help with access or deletion requests; retention is subject to the Data Retention section below.
Watched-folder imports are a separate, optional background connection. When available and you choose to connect it, we request your Google account identifier and verified email address (openid and email), and read-only Google Drive access (drive.readonly). Google grants this permission across files you can access, not just the folder you select in Morphed Social. We use it to browse folders and shared drives, check source access, follow file-change information and import supported content from the source folder you configure, including subfolders only when you enable that option. Google’s change information may include metadata about files outside the selected source; those files are not imported merely because they appear in that information.
We read file and folder identifiers, names, parent relationships, shared-drive identifiers, types, sizes, versions, modification times, download permissions, checksums and contents as needed for this workflow. We keep encrypted background access and refresh credentials on our servers; we do not send these broader credentials to Google Picker or browser storage. We retain source configuration, file/version records, scan checkpoints, review decisions, import results and audit records to continue background checks, distinguish new arrivals from existing content, avoid duplicate imports and troubleshoot failures. Our hosting and storage providers process this information to operate and secure the service.
A source starts paused. You review its content and choose whether to include reviewed existing files before enabling intake. Watched folders create separate library copies and do not edit or delete Google Drive originals. By default, later source changes do not replace an imported copy; if you enable importing changed versions, those become new library copies. Authorized workspace members with library and automation access can see source configuration and history, while the background Google connection and its controls belong to the connecting user.
Imported copies follow the library access, downstream publishing and automation, and optional user-selected AI uses described in Section 4B. A watched folder does not itself publish a social post or approve content. Existing destination rules may select new imports for a queue under the workspace’s review and publishing requirements. We do not sell this Google data.
Pausing, archiving or disconnecting a watched source stops or fences its pending intake; it does not remove imported copies or previously queued, scheduled or published content. Disconnecting background access removes this user’s locally stored background credentials and Google identity from that workspace and stops its watches. Manual file selection and Google Analytics use separate Google connections. Removing the background application’s access in your Google Account’s third-party connections settings revokes that application’s Google authorization and may affect its connections in other workspaces. Retained copies and records remain subject to the Data Retention section and access or deletion requests through [email protected].
We keep your information only as long as necessary to provide our services, comply with legal obligations, and resolve disputes.
We implement reasonable security measures to protect your personal information. However, no online transmission or storage method is 100% secure.
Depending on your location, you may have rights to:
To exercise these rights, contact us at [email protected].
Our Site may contain links to third-party websites. We are not responsible for their privacy practices or content.
Our services are not directed to children under 13. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Updates will be posted on this page with the “Effective Date” revised.
If you have any questions about this Privacy Policy, please contact us:
Morphed Social
Email: [email protected]
Website: https://morphed.social
