Privacy Policy

1. Zero Data Retention Principle

Morphic strictly operates on a Zero Data Retention (ZDR) policy at the gateway level. Your prompts, chat completion contents, source code, and AI model completions are streamed directly without being logged to persistent disks, cached, or used to train AI models.

2. Telemetry and Data Collected

We only record minimal operational telemetry necessary for credit accounting and service diagnostics:

• Input and output token counts for accurate credit balance deductions.
• Requested model IDs and timestamps.
• HTTP response status codes (e.g. 200 OK, 429 Rate Limited, 500 Error).
• Basic account credentials (authenticated email and QRIS transaction records).

3. API Key Security

Your secret API keys are stored in encrypted databases via one-way cryptographic SHA-256 hashes for authorization verification. The full key secret is presented only once upon generation.

4. Third Parties & Payment Processing

IDR credit top-ups are processed via licensed payment gateways (Duitku / QRIS). We never retain or access your personal banking credentials or card numbers.

5. Cookies

Morphic only sets cookies the service needs to work. There are no analytics or advertising cookies.

• Session cookie: keeps you signed in to the dashboard.
• Sign-in step cookie: holds a pending email OTP sign-in for a few minutes.
• Language cookie: remembers whether you chose Indonesian or English.
• Google reCAPTCHA (sign-in form) and PayPal (when you pay with PayPal) may set their own cookies under their policies.

6. Your Data Rights

From Settings you can download a copy of your personal data as JSON, and delete your account. Deleting removes your profile, sign-in methods, sessions and API keys. Transaction records and usage history are anonymised and kept for 5 years to meet tax and financial record-keeping law.