Back

Legal

Privacy Policy

Last updated: September 15, 2026

The short version

  • We use your information to run Morrio: simulations, AI feedback, talent signals, and hiring features you choose to use.
  • Your profile and work are private by default. Hiring professionals only see profiles you publish.
  • AI providers process your content to power features. Under their business terms, they don't train their models on it.
  • We don't sell your personal information, and we don't use advertising or cross-site tracking cookies.
  • You can download your profile data, change what's public, and delete your account yourself. Deleting it removes your data and uploaded files, apart from the limited records described below.

1. Who this covers

Morrio is owned and operated by Tripool LLC (“Tripool”, “we”, “us”). This policy explains how we collect, use, share and protect personal information when you use Morrio. That covers candidates, hiring professionals using Morrio Hiring, expert reviewers, visitors to our website, and people whose publicly available professional information we collect (see section 8). It sits alongside our Terms of Service.

2. Information we collect

CategoryExamplesWhere it comes from
Account detailsName, email address, password (stored only as a secure hash), account type, sign-in methodYou; Google if you sign in with Google
Profile and career informationTitle, summary, skills, experience, education, résumé, photo, banner, links, career goals, hiring roles and company (hiring professionals)You; parsed from a résumé you upload
Your work on MorrioChallenge answers, internship deliverables, Universe submissions and chats, documents, reflections, posts, messages, Career Explorer answers, Growth Plan goalsYou, as you use the Service
Video and audioVideo Intro, interview, weekly progress and presentation recordings, feed videos; transcripts of their audioYou; transcripts are generated by our providers
Insights we generateAI feedback and scores, talent signals and scores, badges, Career Explorer reports, Growth Plans, candidate summaries in hiring searchCreated by Morrio from your activity
GitHub informationUsername, public repositories, languages and activity, if you connect GitHubGitHub, with your permission
PurchasesPlan, amounts, billing status, dates, Stripe customer and subscription IDs. We never receive your full card number.You; Stripe
Reviewer informationProfessional background, reviews written, payout account statusReviewers; Stripe Connect
Records of consentWhen you accepted the Terms or authorised a purchase, with IP address and browser detailsCollected when you agree
Device and usageIP address, browser type, pages and features used, request logs, and usage counts for rate limits (IP addresses stored only as one-way hashes)Your browser; our hosting provider
Support and communicationsMessages to support, moderation appeals, email preferencesYou

We don't ask for sensitive information such as health, religion, sexual orientation, immigration status or government ID numbers, and we ask you not to include it in your submissions. Videos can show what you look like and how you sound, but we don't use them to identify you, to create face or voice prints, or to infer sensitive characteristics.

3. How we use information

  • Provide the Service: create your account, generate simulations and characters, save your work, run the features you use, and deliver hiring, messaging and review features.
  • Give feedback and insights: analyse submissions, calculate talent signals and badges, and build reports and Growth Plans.
  • Help candidates and hiring professionals find each other: show public profiles in Morrio Hiring and rank search results.
  • Process payments: handle subscriptions, one-time purchases, coupons and reviewer payouts.
  • Keep Morrio safe: confirm email addresses, check new passwords against known breaches, prevent fraud and abuse, enforce limits, and moderate content.
  • Communicate: send account emails (such as confirmations and password resets) and service notices, including notices of changes to our Terms and this policy, which go to every member. If your settings allow it, we also send product updates, tips or marketing. Those always include an unsubscribe link.
  • Improve Morrio: fix problems and understand which features help. When we analyse information to improve our own product, we use aggregated or de-identified data where we can.
  • Meet legal obligations: keep required records, respond to lawful requests, and establish or defend legal claims.

4. AI and automated processing

AI is central to Morrio. Here is where it touches your information:

  • Simulations and assistants: your messages and drafts are sent to our AI provider to generate character replies, document drafts and scenarios.
  • Feedback, talent signals and badges: AI analyses your submissions and activity to estimate skills across dimensions like communication, ownership and technical depth.
  • Hiring search: when a hiring professional searches, AI ranks and summarises public candidate profiles using the information on those profiles, including talent signals. Results are a starting point for people to review. Morrio doesn't make hiring decisions, and our Terms require hiring professionals to make their own.
  • Content moderation: posts, profiles and videos are screened automatically. Video audio is transcribed and the transcript is reviewed by AI, and content may be hidden while a person reviews it.
  • Growth Plans: your career goal is checked by AI before a plan is built, so obvious non-goals get a prompt to improve them.

Under their business terms, our AI providers don't use your content to train their models. They keep it only for a limited time (see section 10). If you think an AI-generated score, ranking or moderation decision about you is wrong, email privacy@morrio.ai or support@morrio.ai. A person will review it, and you can correct information on your profile at any time.

5. What others can see

  • Private by default. New profiles are private. You choose whether to publish your profile and, separately, challenge results, video intros, internship certificates and presentations, badges and Universe experience.
  • Public items can be viewed by anyone with the link, and public profiles can appear in Morrio Hiring search. Posts you share to the feed are public.
  • Weekly progress videos stay within your internship and have no public setting.
  • Expert reviewers see the work you submit for review.
  • Hiring professionals see what you've made public, plus messages you exchange with them.
  • Video links. Private videos aren't shown anywhere on Morrio. Video files are stored at long, unguessable web addresses, so anyone you give a file's direct link to could open it. Please don't share those links.

6. How we share information

We don't sell your personal information, and we don't share it for cross-context behavioural advertising. We share it only:

  • With service providers who process it on our behalf under contract (section 7)
  • With people you choose: hiring professionals and the public (for items you publish), expert reviewers (for work you submit for review), and people you message
  • For legal reasons: to comply with law or valid legal process, to protect the rights, safety and security of users, Tripool or others, and to investigate fraud or abuse
  • In a business transfer: if Tripool is involved in a merger, acquisition or sale of assets, subject to this policy's protections continuing
  • With your consent, or at your direction

7. Service providers

ProviderWhat they do for MorrioInformation involved
SupabaseDatabase, authentication and file storageEverything stored in your account
VercelWebsite hosting, request logs, and cookieless web analyticsDevice and usage data; pages visited and performance timings; data passing through the app
Anthropic (Claude)AI features, scoring, search ranking, moderation reviewContent and profile data sent to AI features
OpenAITranscribing the audio of uploaded videos for moderationVideo audio
ElevenLabsReading interview questions aloud in the AI interviewThe text of the questions
StripePayments, subscriptions, billing portal, reviewer payoutsName, email, purchases, payment and payout details
Google WorkspaceSending account emailsYour email address and the email content
Google and GitHubGoogle sign-in; GitHub account connectionDetails those services share with your permission
Have I Been PwnedChecking whether a new password appears in known data breachesOnly the first 5 characters of a one-way hash of the password, never the password itself

Our providers may only use your information to provide their services to us, under their terms and data processing agreements. We'll update this list when providers change.

8. People who aren't Morrio users

To reach people Morrio could help, we keep a small amount of professional information about people who don't have a Morrio account. It comes from publicly available sources and from people our team already knows. It can include a name, a public email address, a location and a short summary of someone's public work. We use it only to judge whether Morrio is relevant to them and to invite them to try it.

We don't sell this information, show it to hiring professionals, or add it to Morrio profiles, and invitations always include an unsubscribe link. If this describes you and you'd like your information deleted, email privacy@morrio.ai from that address. We'll delete it and add you to a do-not-contact list.

9. Cookies and local storage

We use only cookies and browser storage that Morrio needs to work: sign-in session cookies (separate ones for the candidate and hiring sides), staff admin sessions, and browser storage that remembers things like your latest Career Explorer result. We also measure how the site is used with Vercel Web Analytics, which is cookieless: it records page views and performance without setting cookies, without a device identifier that follows you, and without building a profile of you. We don't use advertising cookies or cross-site trackers, and we don't sell or share usage data. Blocking cookies will stop you signing in.

10. How long we keep information

InformationHow long we keep it
Account, profile, work, messages and generated insightsWhile your account is open. Removed from our live database when you delete your account.
Uploaded files (videos, résumés, photos)While your account is open, or until you replace them. Deleted when you delete your account.
BackupsDeleted data can remain in routine backups until they are overwritten on our providers' backup cycle.
Payment and transaction recordsAs long as tax, accounting and dispute rules require, generally up to 7 years. Stripe keeps its own records under its policies.
Records of consent (Terms, purchases)Kept after an account is deleted, as long as we need to show consent was given, generally at least 3 years.
Moderation decisions and appealsAs long as needed to handle appeals, prevent repeat abuse and meet legal duties.
Rate-limit counters and request logsShort-lived; kept only as long as needed for security and troubleshooting.
Copies held by AI providersAnthropic deletes API inputs and outputs within 30 days (longer only if flagged for a policy violation). OpenAI doesn't retain transcription audio; its abuse-monitoring logs are kept up to 30 days.
Information about people who aren't membersUntil they ask us to delete it, or when it's no longer relevant.

11. Security

We protect information with encryption in transit (HTTPS) and at rest through our providers. We also use database access rules so members can only reach their own private data, hashed passwords, breached-password checks, email confirmation, rate limits, and staff access limited to people who need it. Payment card data is handled by Stripe, not Morrio. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.

12. Your choices and rights

In the product, any time:

  • Edit or correct your profile, and change what is public.
  • Download a copy of your profile data from Settings.
  • Change email preferences in Settings (candidates) or Morrio Hiring settings, or use the unsubscribe link in any product update or marketing email. Product update and marketing emails are on by default.
  • Delete your account from Settings. Hiring-only accounts can email us.

By request: depending on the US state you live in, you may have the right to know what personal information we have about you, and to access, correct, delete or get a portable copy of it. You may also have the right to opt out of the sale or sharing of personal information (we don't sell or share it), and to not be treated differently for using these rights. Email privacy@morrio.ai from the address on your account.

We'll respond within the time the law requires, generally within 30 to 45 days, and may need to confirm your identity first. You can use an authorised agent, with proof of their authority. If we decline your request, you can appeal by replying to our decision. If we deny your appeal, you may be able to contact your state attorney general.

13. Additional US state disclosures

This section adds detail for residents of California and other US states with comprehensive privacy laws. In the past 12 months we collected these categories of personal information:

  • identifiers
  • customer records
  • commercial information
  • internet or network activity
  • audio and visual information
  • professional and employment-related information
  • education information
  • inferences (such as talent signals)
  • account login credentials

The sources, purposes, recipients and retention for each are described in sections 2 to 10. We disclose these categories to service providers for business purposes. We haven't sold or shared personal information, including of consumers under 16. We use login credentials only to provide and secure your account. We honour Global Privacy Control signals as an opt-out of sale and sharing, although we don't sell or share.

14. Where Morrio operates

Tripool is based in California, and Morrio is offered to people in the United States. Your information is stored and processed in the United States by us and our service providers. Morrio isn't currently offered in the European Union or the United Kingdom.

15. Children

Morrio is for people aged 16 and over and isn't directed to children. We don't knowingly collect information from anyone under 16. If you believe a child has given us information, email privacy@morrio.ai and we'll delete it.

16. Changes to this policy

We'll update this policy as Morrio changes, and review it at least once a year. For material changes, we'll notify you by email or in the product before they take effect, and update the date above.

17. Contact

For privacy questions or requests, email privacy@morrio.ai. Morrio is operated by Tripool LLC.