1. Scope and operator
This Policy applies to Morphilo websites, applications, support and managed session infrastructure. “Morphilo,” “we” and “us” mean the operator providing the Service under the Morphilo name. Morphilo is independent and is not provided or supported by Linden Lab.
2. Information we collect
- Morphilo account data: email address, password hash, plan, account status, consent records and support communications.
- Avatar account data: avatar name and identifier, encrypted password, profile image, region and coordinates, groups, friends, balance, settings, schedules, connection history, attachments, current outfit, nearby objects and supported HUD data.
- Communications and actions: chat and notification content when the relevant feature is enabled, object or avatar commands, virtual-currency instructions, confirmations and action results.
- Automation preferences: the usage mode you select, your optional Scripted Agent confirmation and date, dismissed reminders, and daily communication counters used for policy guidance and abuse prevention.
- Technical and security data: IP address, browser and device information, session cookies, timestamps, logs, worker assignment, errors, diagnostic events and abuse-prevention counters.
- Preferences: language and theme stored in your browser.
Some data originates from you; some is returned by the connected third-party platform when your avatar is online.
3. Avatar credentials
Avatar passwords are encrypted at rest using authenticated encryption. They must be decryptable because the Service uses them to establish requested sessions. A managed worker receives credentials through a short-lived, single-use authorization flow when starting a session. Morphilo does not display stored avatar passwords back to users.
Providing credentials is voluntary, but the cloud connection service cannot operate without them. Credentials may remain stored until they are replaced, the related avatar or Morphilo account is deleted, or retention is no longer needed, subject to backups, fraud prevention and legal requirements.
No safeguard eliminates all risk. Do not provide credentials for an account you do not own or control. Do not reuse your Morphilo login password as an avatar password. If you suspect compromise, change the avatar password with the platform provider and update or remove it from Morphilo.
4. How we use information
We use information to create and administer accounts; provide login, reconnect, chat, groups, schedules, objects, attachments, payments and other requested controls; show status and history; process plans; authenticate users; prevent abuse; secure and troubleshoot infrastructure; respond to support; enforce agreements; comply with law; and improve reliability and usability.
5. Legal grounds and consent
Depending on applicable law, processing is based on performance of the service contract, your explicit instructions or consent, legitimate interests in securing and improving the Service, and legal obligations. You may withdraw optional consent by disabling a feature, but this does not affect prior processing and may make the feature unavailable.
6. When information is disclosed
Information may be disclosed to managed workers and infrastructure providers that need it to operate the Service; to Linden Lab and the connected platform as required to perform your instructions; to professional advisers; to authorities when legally required; to protect rights, users or systems; or in connection with a business financing, reorganization or transfer. Providers are expected to process data for authorized purposes and under appropriate safeguards.
Morphilo does not currently sell personal information or use it for cross-context behavioral advertising.
7. Chat and virtual-world data
Chat history is stored when you enable history. When history is disabled, temporary messages may remain available for up to 24 hours for delivery and display. Other synchronized data may persist so the dashboard can show the last known state while an avatar is offline. People and groups interacting with your avatar may appear in those records.
8. Retention
We retain information while your account is active and as reasonably necessary for service delivery, security, dispute resolution, accounting, backups and law. Retention varies by category. We may de-identify records instead of deleting them. Deletion requests may not remove data that must be retained or data already disclosed to an independent third party.
9. Security
Measures include TLS in transit, password hashing for Morphilo logins, authenticated encryption for avatar passwords, access controls, short-lived credential grants, security logging and separation between web and worker services. You are responsible for your own devices, email, passwords and authorized users. Security incidents can still occur; Morphilo may take protective action and provide notices when required by law.
10. Cookies and browser storage
Morphilo uses secure authentication and anti-forgery cookies needed to keep you signed in and protect requests. Browser local storage remembers language, theme and interface preferences. We do not currently use third-party advertising cookies. Blocking required cookies prevents login.
11. International processing
Data may be processed where Morphilo and its infrastructure providers operate, including the United States. Those locations may have different privacy laws. We apply safeguards appropriate to the information and the Service, subject to applicable law.
12. Your choices and rights
You can change many settings in the dashboard, disable optional chat history and notifications, replace credentials, take avatars offline and stop using the Service. Depending on your jurisdiction, you may request access, correction, deletion, portability, restriction or objection, or appeal a privacy decision. We may verify identity and deny or limit a request where law permits.
13. Children
Morphilo is not intended for anyone under 18. Do not register or provide personal information if you are under 18. Contact us if you believe a minor has provided information.
14. Third-party services
Second Life and other linked sites have their own terms and privacy practices. Morphilo does not control their collection, use, policy changes or security. Review their notices before connecting an account.
15. Changes
We may update this Policy as the Service, laws or risks change. Material changes may be presented for renewed acceptance. The effective date and version identify the notice that applies.
16. Contact
Privacy and data requests: legal@morphilo.com. General support: support@morphilo.com.