This Data Retention Policy describes how long Morphed retains different categories of data, the criteria used to determine retention periods, and the processes for data deletion. This policy should be read in conjunction with our Privacy Policy and Data Processing Agreement.
1. Retention Schedule
| Data Category | Retention Period | Trigger for Deletion |
|---|---|---|
| Account information | Duration of account + 30 days | Account deletion |
| Uploaded images (for processing) | 24 hours | After processing completes |
| Generated content (images/videos) | Until user deletes or account closes | User deletion or account closure |
| AI headshot training data | 7 days after generation | Automatic after generation period |
| Payment records | 7 years | Legal/tax retention requirements |
| Usage analytics | 24 months | Rolling window |
| Server logs | 90 days | Rolling window |
| Support communications | Duration of account + 12 months | Account deletion |
| Cookie data | Up to 12 months | Expiry or user opt-out |
| Backup copies | 90 days after primary deletion | Automatic purge cycle |
2. Account Deletion
2.1. Self-Service: You can delete your account at any time through your account settings. Upon account deletion:
- Your account data is removed from active systems within 30 days
- All generated content in your library is permanently deleted
- Your email address is retained in a suppression list to prevent unwanted re-enrollment in marketing
2.2. Data Export: Before deleting your account, you can download your generated content from your account library. We recommend exporting your data before initiating account deletion.
2.3. Irrecoverability: Account deletion is irreversible. Once your data is removed from active systems and backups are purged, it cannot be recovered.
3. Content Deletion
Individual Content: You can delete individual images or videos from your library at any time. Deleted content is removed from active systems immediately and from backups within 90 days.
Temporary Uploads: Images uploaded for processing (e.g., upscaling, background removal, headshot generation) are automatically deleted from processing systems within 24 hours of completion.
Headshot Model Data: Training data used for AI headshot generation is automatically deleted within 7 days after your headshots are generated. You can request earlier deletion by contacting support.
4. Legal Holds & Exceptions
Notwithstanding the retention periods above, we may retain data for longer periods where:
- Required by applicable law, regulation, or court order
- Needed to resolve an ongoing dispute or enforce our agreements
- Subject to a litigation hold or regulatory investigation
- Necessary to protect against fraud, abuse, or security threats
In all cases, retained data is kept secure and access is limited to those with a legitimate need.
5. Data Subject Requests
You have the right to request deletion of your personal data at any time, subject to legal retention obligations. To exercise this right:
- Use the self-service account deletion in your settings
- Email privacy@morphed.ai for specific data deletion requests
We will respond to data deletion requests within 30 days, as required by GDPR and applicable data protection laws.
6. Contact Us
For questions about this Data Retention Policy:
- Privacy: privacy@morphed.ai
- DPO: dpo@morphed.ai