Legal
Privacy Policy
Last updated: September 15, 2026
The short version
- We use your information to run Morrio: simulations, AI feedback, talent signals, and hiring features you choose to use.
- Your profile and work are private by default. Hiring professionals only see profiles you publish.
- AI providers process your content to power features. Under their business terms, they don't train their models on it.
- We don't sell your personal information, and we don't use advertising or cross-site tracking cookies.
- You can download your profile data, change what's public, and delete your account yourself. Deleting it removes your data and uploaded files, apart from the limited records described below.
1. Who this covers
Morrio is owned and operated by Tripool LLC (“Tripool”, “we”, “us”). This policy explains how we collect, use, share and protect personal information when you use Morrio. That covers candidates, hiring professionals using Morrio Hiring, expert reviewers, visitors to our website, and people whose publicly available professional information we collect (see section 8). It sits alongside our Terms of Service.
2. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored only as a secure hash), account type, sign-in method | You; Google if you sign in with Google |
| Profile and career information | Title, summary, skills, experience, education, résumé, photo, banner, links, career goals, hiring roles and company (hiring professionals) | You; parsed from a résumé you upload |
| Your work on Morrio | Challenge answers, internship deliverables, Universe submissions and chats, documents, reflections, posts, messages, Career Explorer answers, Growth Plan goals | You, as you use the Service |
| Video and audio | Video Intro, interview, weekly progress and presentation recordings, feed videos; transcripts of their audio | You; transcripts are generated by our providers |
| Insights we generate | AI feedback and scores, talent signals and scores, badges, Career Explorer reports, Growth Plans, candidate summaries in hiring search | Created by Morrio from your activity |
| GitHub information | Username, public repositories, languages and activity, if you connect GitHub | GitHub, with your permission |
| Purchases | Plan, amounts, billing status, dates, Stripe customer and subscription IDs. We never receive your full card number. | You; Stripe |
| Reviewer information | Professional background, reviews written, payout account status | Reviewers; Stripe Connect |
| Records of consent | When you accepted the Terms or authorised a purchase, with IP address and browser details | Collected when you agree |
| Device and usage | IP address, browser type, pages and features used, request logs, and usage counts for rate limits (IP addresses stored only as one-way hashes) | Your browser; our hosting provider |
| Support and communications | Messages to support, moderation appeals, email preferences | You |
We don't ask for sensitive information such as health, religion, sexual orientation, immigration status or government ID numbers, and we ask you not to include it in your submissions. Videos can show what you look like and how you sound, but we don't use them to identify you, to create face or voice prints, or to infer sensitive characteristics.
3. How we use information
- Provide the Service: create your account, generate simulations and characters, save your work, run the features you use, and deliver hiring, messaging and review features.
- Give feedback and insights: analyse submissions, calculate talent signals and badges, and build reports and Growth Plans.
- Help candidates and hiring professionals find each other: show public profiles in Morrio Hiring and rank search results.
- Process payments: handle subscriptions, one-time purchases, coupons and reviewer payouts.
- Keep Morrio safe: confirm email addresses, check new passwords against known breaches, prevent fraud and abuse, enforce limits, and moderate content.
- Communicate: send account emails (such as confirmations and password resets) and service notices, including notices of changes to our Terms and this policy, which go to every member. If your settings allow it, we also send product updates, tips or marketing. Those always include an unsubscribe link.
- Improve Morrio: fix problems and understand which features help. When we analyse information to improve our own product, we use aggregated or de-identified data where we can.
- Meet legal obligations: keep required records, respond to lawful requests, and establish or defend legal claims.
4. AI and automated processing
AI is central to Morrio. Here is where it touches your information:
- Simulations and assistants: your messages and drafts are sent to our AI provider to generate character replies, document drafts and scenarios.
- Feedback, talent signals and badges: AI analyses your submissions and activity to estimate skills across dimensions like communication, ownership and technical depth.
- Hiring search: when a hiring professional searches, AI ranks and summarises public candidate profiles using the information on those profiles, including talent signals. Results are a starting point for people to review. Morrio doesn't make hiring decisions, and our Terms require hiring professionals to make their own.
- Content moderation: posts, profiles and videos are screened automatically. Video audio is transcribed and the transcript is reviewed by AI, and content may be hidden while a person reviews it.
- Growth Plans: your career goal is checked by AI before a plan is built, so obvious non-goals get a prompt to improve them.
Under their business terms, our AI providers don't use your content to train their models. They keep it only for a limited time (see section 10). If you think an AI-generated score, ranking or moderation decision about you is wrong, email privacy@morrio.ai or support@morrio.ai. A person will review it, and you can correct information on your profile at any time.
5. What others can see
- Private by default. New profiles are private. You choose whether to publish your profile and, separately, challenge results, video intros, internship certificates and presentations, badges and Universe experience.
- Public items can be viewed by anyone with the link, and public profiles can appear in Morrio Hiring search. Posts you share to the feed are public.
- Weekly progress videos stay within your internship and have no public setting.
- Expert reviewers see the work you submit for review.
- Hiring professionals see what you've made public, plus messages you exchange with them.
- Video links. Private videos aren't shown anywhere on Morrio. Video files are stored at long, unguessable web addresses, so anyone you give a file's direct link to could open it. Please don't share those links.
7. Service providers
| Provider | What they do for Morrio | Information involved |
|---|---|---|
| Supabase | Database, authentication and file storage | Everything stored in your account |
| Vercel | Website hosting, request logs, and cookieless web analytics | Device and usage data; pages visited and performance timings; data passing through the app |
| Anthropic (Claude) | AI features, scoring, search ranking, moderation review | Content and profile data sent to AI features |
| OpenAI | Transcribing the audio of uploaded videos for moderation | Video audio |
| ElevenLabs | Reading interview questions aloud in the AI interview | The text of the questions |
| Stripe | Payments, subscriptions, billing portal, reviewer payouts | Name, email, purchases, payment and payout details |
| Google Workspace | Sending account emails | Your email address and the email content |
| Google and GitHub | Google sign-in; GitHub account connection | Details those services share with your permission |
| Have I Been Pwned | Checking whether a new password appears in known data breaches | Only the first 5 characters of a one-way hash of the password, never the password itself |
Our providers may only use your information to provide their services to us, under their terms and data processing agreements. We'll update this list when providers change.
8. People who aren't Morrio users
To reach people Morrio could help, we keep a small amount of professional information about people who don't have a Morrio account. It comes from publicly available sources and from people our team already knows. It can include a name, a public email address, a location and a short summary of someone's public work. We use it only to judge whether Morrio is relevant to them and to invite them to try it.
We don't sell this information, show it to hiring professionals, or add it to Morrio profiles, and invitations always include an unsubscribe link. If this describes you and you'd like your information deleted, email privacy@morrio.ai from that address. We'll delete it and add you to a do-not-contact list.
10. How long we keep information
| Information | How long we keep it |
|---|---|
| Account, profile, work, messages and generated insights | While your account is open. Removed from our live database when you delete your account. |
| Uploaded files (videos, résumés, photos) | While your account is open, or until you replace them. Deleted when you delete your account. |
| Backups | Deleted data can remain in routine backups until they are overwritten on our providers' backup cycle. |
| Payment and transaction records | As long as tax, accounting and dispute rules require, generally up to 7 years. Stripe keeps its own records under its policies. |
| Records of consent (Terms, purchases) | Kept after an account is deleted, as long as we need to show consent was given, generally at least 3 years. |
| Moderation decisions and appeals | As long as needed to handle appeals, prevent repeat abuse and meet legal duties. |
| Rate-limit counters and request logs | Short-lived; kept only as long as needed for security and troubleshooting. |
| Copies held by AI providers | Anthropic deletes API inputs and outputs within 30 days (longer only if flagged for a policy violation). OpenAI doesn't retain transcription audio; its abuse-monitoring logs are kept up to 30 days. |
| Information about people who aren't members | Until they ask us to delete it, or when it's no longer relevant. |
11. Security
We protect information with encryption in transit (HTTPS) and at rest through our providers. We also use database access rules so members can only reach their own private data, hashed passwords, breached-password checks, email confirmation, rate limits, and staff access limited to people who need it. Payment card data is handled by Stripe, not Morrio. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.
12. Your choices and rights
In the product, any time:
- Edit or correct your profile, and change what is public.
- Download a copy of your profile data from Settings.
- Change email preferences in Settings (candidates) or Morrio Hiring settings, or use the unsubscribe link in any product update or marketing email. Product update and marketing emails are on by default.
- Delete your account from Settings. Hiring-only accounts can email us.
By request: depending on the US state you live in, you may have the right to know what personal information we have about you, and to access, correct, delete or get a portable copy of it. You may also have the right to opt out of the sale or sharing of personal information (we don't sell or share it), and to not be treated differently for using these rights. Email privacy@morrio.ai from the address on your account.
We'll respond within the time the law requires, generally within 30 to 45 days, and may need to confirm your identity first. You can use an authorised agent, with proof of their authority. If we decline your request, you can appeal by replying to our decision. If we deny your appeal, you may be able to contact your state attorney general.
13. Additional US state disclosures
This section adds detail for residents of California and other US states with comprehensive privacy laws. In the past 12 months we collected these categories of personal information:
- identifiers
- customer records
- commercial information
- internet or network activity
- audio and visual information
- professional and employment-related information
- education information
- inferences (such as talent signals)
- account login credentials
The sources, purposes, recipients and retention for each are described in sections 2 to 10. We disclose these categories to service providers for business purposes. We haven't sold or shared personal information, including of consumers under 16. We use login credentials only to provide and secure your account. We honour Global Privacy Control signals as an opt-out of sale and sharing, although we don't sell or share.
14. Where Morrio operates
Tripool is based in California, and Morrio is offered to people in the United States. Your information is stored and processed in the United States by us and our service providers. Morrio isn't currently offered in the European Union or the United Kingdom.
15. Children
Morrio is for people aged 16 and over and isn't directed to children. We don't knowingly collect information from anyone under 16. If you believe a child has given us information, email privacy@morrio.ai and we'll delete it.
16. Changes to this policy
We'll update this policy as Morrio changes, and review it at least once a year. For material changes, we'll notify you by email or in the product before they take effect, and update the date above.
17. Contact
For privacy questions or requests, email privacy@morrio.ai. Morrio is operated by Tripool LLC.