Privacy policy

Who we are

Morphy One ("Morphy", "we", "us") is an AI and data consultancy based in Singapore, operating the website morphy.one. For the purposes of the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU/UK GDPR, Morphy One is the data controller for personal data collected through this site.

Contact for all privacy matters: admin@morphy.one.

What we collect and why

Website browsing — we use Cloudflare Web Analytics for aggregate, anonymised traffic stats. It sets no cookies and collects no personal data, so it runs for everyone.

Product analytics (only with your consent) — we use Microsoft Clarity to record anonymised session replays and heatmaps, so we can see where the site confuses people and fix it. Clarity sets cookies and runs only after you accept analytics in our cookie banner. Decline and nothing about how you use the site is recorded.

AI readiness assessment (morphy.one/readiness) — when you complete the assessment we collect your name, work email, company name, and your answers to the assessment questions. We use this to generate your results, email you your report, and follow up about your readiness findings.

Discovery call bookings — bookings are made through HubSpot Meetings, which collects your name, email and chosen time slot under HubSpot's own terms.

Direct email — if you email us, we keep the correspondence for as long as needed to handle your enquiry and any ongoing relationship.

Legal basis

We process assessment data with your consent, given when you submit your email to receive your results. We use Microsoft Clarity analytics only if you accept it in the cookie banner. We process booking and correspondence data on the basis of legitimate interest in responding to a request you initiated. You can withdraw any consent at any time — for analytics, delete the "consent" cookie and reload; for everything else, email us.

AI processing

Assessment answers are processed by Anthropic's Claude API to generate a personalised synthesis of your results. Your answers and scores are sent to Anthropic for this single purpose. Anthropic does not train its models on this data under its commercial API terms.

Who we share data with

We use a small set of service providers to run the site and assessment: Render (hosting, USA), Neon (database, Singapore region), Resend (transactional email, USA), HubSpot (CRM and scheduling, USA), Anthropic (AI processing, USA), Microsoft Clarity (product analytics — session replay and heatmaps, only with your consent, USA), and Cloudflare (analytics and DNS — anonymised data only). Each processes data only on our instructions. We never sell personal data, and we never share it for advertising.

How long we keep it

Assessment submissions: 2 years from submission, then deleted or anonymised. CRM contact records: until you ask us to remove you, or 2 years of inactivity. Email correspondence: as long as needed for the relationship. Server logs: 90 days.

Your rights

Under the PDPA and GDPR you can ask us to: access the personal data we hold about you, correct it, delete it, export it, or stop processing it. Email us and we will respond within 30 days. If you are in the EU/UK you also have the right to complain to your supervisory authority; in Singapore, to the PDPC.

International transfers

Some providers above process data in the United States. Where GDPR applies, these transfers are covered by the providers' standard contractual clauses. Assessment data at rest is stored in Neon's Singapore region.

Children

This site and the assessment are aimed at business decision-makers and are not intended for anyone under 18. We do not knowingly collect data from children.

Cookies

Essential — we store your cookie-banner choice in a "consent" cookie so we don't ask again. This is strictly necessary and always set.

Analytics — Microsoft Clarity sets cookies (for example _clck and _clsk) to measure how the site is used. They are set only after you accept analytics in the banner; reject is as easy as accept, and rejecting sets none. To change your mind, delete the "consent" cookie and reload — the banner reappears.

Cloudflare Web Analytics sets no cookies.

Changes to this policy

If we make material changes we will update this page and the date below. Significant changes affecting assessment data will be notified to affected contacts by email.