Privacy Policy

Last updated: March 24, 2026

Morph Tech Inc. ("we", "us", "our") operates VaultEdu, an advanced school management system. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

1. Information We Collect

We collect the following types of information:

• Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.
• School Information: School name, contact person, phone number, preferred subdomain, student count, and package selection provided during the agreement process.
• Payment Information: Payment references, transaction IDs, and billing records. We do not store credit card numbers — all card payments are processed securely by PayMongo.
• Brand Assets: School logos, photos, color preferences, and design choices uploaded to customize your school's website.
• Communication Data: AI chat conversations during brand discovery and agreement sessions.
• Usage Data: Browser type, device information, IP address, and pages visited for security monitoring and service improvement.

2. How We Use Your Information

• To provide, maintain, and improve the VaultEdu service
• To process payments and manage your subscription
• To build and host your school's website
• To communicate with you about your account, onboarding, and support
• To detect and prevent security threats and unauthorized access
• To comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate VaultEdu:

• Google: Authentication via Google OAuth (sign-in only — we do not access your Google Drive, contacts, or other Google data)
• Supabase: Database hosting and file storage (servers in Singapore)
• PayMongo: Payment processing for setup fees and monthly subscriptions (PCI-DSS compliant)
• Vercel: Website hosting and deployment
• Anthropic (Claude AI): AI-powered brand discovery and agreement assistance

We do not sell, rent, or trade your personal information to any third party.

4. Data Storage and Security

Your data is stored securely in Supabase PostgreSQL databases with Row Level Security (RLS) enabled on every table, ensuring that users can only access their own data. All data transmission uses HTTPS/TLS encryption. We implement industry-standard security measures including:

• Row Level Security (RLS) on all database tables
• OAuth-only authentication (no passwords stored)
• Server-side API key management (no secrets in client code)
• Automated security monitoring and violation logging

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you cancel your subscription, we retain your data for 90 days to allow for reactivation. After that, data may be deleted upon request. Payment records are retained for 7 years for accounting and tax compliance.

6. Your Rights (RA 10173 — Philippine Data Privacy Act)

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights:

• Right to Access: You may request a copy of your personal data.
• Right to Rectification: You may request correction of inaccurate data.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data.
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission (NPC).

7. Children's Privacy

VaultEdu is a B2B service for school administrators. We do not knowingly collect personal information from children under 13. Student data managed through VaultEdu is the responsibility of the subscribing school, which must comply with applicable data protection laws.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Morph Tech Inc.
Email: morphtechincorporated@gmail.com
Philippines