Privacy Policy
Effective date: November 1, 2026 Last updated: November 1, 2026
1. About Morgan and this policy
Morgan is a financial intelligence service for businesses, operated from Egypt. This policy explains how we handle personal data when you visit morganhq.site, use the Morgan application, or contact us. It does not apply to websites or services run by other organisations, even where we link to them. You can reach us at management@morganhq.site.
In this policy, a Customer is the business that holds a Morgan account, and a User is an individual who uses Morgan on a Customer’s behalf. A Workspace is the private area of Morgan where a Customer’s financial information is held. Customer Data means the financial and business information that a Customer or its Users enter or import into a Workspace, together with the outputs Morgan produces from it.
2. Our role
We act in two capacities. For account details, billing records and our communications with you, we decide why and how the data is used, and we are responsible for it. For Customer Data, the Customer decides what is submitted and why, and we process it on the Customer’s behalf to provide Morgan.
The distinction matters if you are an individual named in a Customer’s records, such as a client, supplier or contractor of that Customer. The Customer is primarily responsible for that information, so requests about it are best sent to the Customer first.
3. Information we collect
Information you give us
When you register, we collect your name, email address and a password. You may also give us the name and profile details of your business.
Most of what you give us is financial information about your business: accounts and balances, transactions, income and expenses, invoices and receivables, bills and payables, and the dates, amounts and descriptions attached to them. You enter these records yourself or upload files in .xlsx, .csv or .pdf format. Morgan works only from the records you provide and does not create transactions, balances or other figures to fill gaps in them.
We also collect the questions you ask Morgan Intelligence and any messages you send us.
Information Morgan calculates or generates
From your records, the Morgan application calculates balances and summaries, produces Monitor findings, builds Horizon forecasts and scenarios, stores the scenarios you choose to save, and generates downloadable PDF reports. These outputs are derived from your records and the assumptions applied to them. They are not independent statements of fact about your business, and their accuracy depends on how complete and correct your records are.
Morgan Intelligence produces written explanations in response to your questions. These are AI-generated interpretations of figures the application has already calculated, as Section 6 explains.
Billing information
We keep a record of your selected plan, billing frequency and payment status, and of the payments, changes and cancellations connected with your subscription.
4. Other people’s information in your records
Customer Data will often include information about people other than you, such as the names of clients and suppliers, contractor payments or payroll costs. Customers are responsible for having the authority and a lawful basis to submit that information to Morgan, and for giving any notices those people are entitled to. Submitting information to Morgan does not make it lawful to process, so please do not enter personal information you have no right to share.
5. How we use information
We use personal data to operate Morgan. That means creating and maintaining accounts and authenticating Users; organising Customer Data and producing calculations, Monitor findings, Horizon forecasts, saved scenarios and reports; providing Morgan Intelligence responses; and managing subscriptions and keeping records of payments.
We also use it to protect the service and its Customers from unauthorised access, fraud and abuse; to investigate faults and keep the service running; to communicate with you about your account, billing and changes to the service; and to meet legal obligations and establish or defend legal claims.
6. Morgan Intelligence and Google Gemini
Morgan Intelligence is powered by Google’s Gemini models. Morgan’s servers send requests to Google; your browser does not communicate with Google for this purpose. Information therefore does leave Morgan’s own systems when you use Morgan Intelligence.
When you ask a question, we send Gemini the text of your question together with the financial context needed to answer it. That context comes from your Workspace and can include the financial records and outputs described in Section 3.
Morgan’s application performs the financial calculations. Gemini explains and interprets figures the application has already produced, and is not the source of those figures. Its responses can be wrong, incomplete or misleading, so please check anything important against your own records, and with a qualified professional where appropriate, before relying on it.
Google handles data sent to the Gemini API under its own terms and privacy documentation.
7. Payments
Paid plans are currently paid by PayPal transfer. PayPal collects and processes your payment details under its own privacy policy. We keep records of the payments we receive, as described in Section 3.
8. Who we share information with
We share personal data with the service providers who help us run Morgan, and only as far as needed for what they do for us. We may also disclose information where the law requires it, to protect the rights, safety or security of Morgan or others, or in connection with a merger, financing or sale of the business.
Our current providers are:
Provider
Role
Information involved
Google (Gemini API)
AI interpretation for Morgan Intelligence
Your questions and the financial context described in Section 6
PayPal
Receiving subscription payments
Payment details and payment records
Vercel
Application hosting
Data processed by the application
MongoDB
Database
Account details and Customer Data
9. International processing
Morgan is operated from Egypt, and our customers are initially in the United States. Our providers may process data in countries outside Egypt and outside your country of residence, so personal data you submit may be transferred across borders and handled under data protection laws that differ from those where you live.
10. Security
We use technical and organisational measures to protect personal data. No system can be made immune to attack, and we cannot guarantee that unauthorised access will never occur. You can help by keeping your credentials confidential and telling us promptly at management@morganhq.site if you suspect your account has been misused. If a security incident affects personal data we hold, we will notify affected Customers and the authorities as the applicable law requires.
11. Retention and account deletion
We keep the data we need to provide Morgan until you delete your account, which you can do from your dashboard. Other data we hold is deleted within 90 days. We may keep information for longer where the law requires it, or where we need it to resolve a dispute.
12. Your rights
The rights you have depend on where you live and on our role in relation to the data. Egyptian data protection law gives individuals the right to know what data is held about them, to access and correct it, to withdraw consent, to have it erased, and to restrict or object to its processing, subject to the conditions in the law. Residents of other countries and some US states have comparable rights under their own laws.
To make a request, write to management@morganhq.site. We may need to verify your identity first. If your information sits in a Customer’s Workspace, we may refer you to that Customer, since it controls that data, and we will help it respond. If you are not satisfied with our response, you may complain to your data protection authority, which in Egypt is the Personal Data Protection Centre.
13. Who can use Morgan
Morgan is a business service. You must be 18 or older, or of legal age where you live, to use it. It is not directed to children, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it.
14. Changes to this policy
We will post any updated policy on this page with a new last-updated date, and we will notify account holders of material changes.
15. Contact
For privacy questions and requests, write to management@morganhq.site.